Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f6d214e-b17a-3e22-9ba0-1a7f967e2308.roa
File:                     0f6d214e-b17a-3e22-9ba0-1a7f967e2308.roa (raw, json)
Hash identifier:          UF4/EVf436xccw9ZoW1RVsD/M/oaCNNipxNR8Ogq0HA=
Subject key identifier:   EB:46:C9:27:A3:88:94:45:47:C4:59:0A:93:58:EA:BB:BE:B9:D8:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D311E4FBED65D75C8AAE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f6d214e-b17a-3e22-9ba0-1a7f967e2308.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        73.50.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:31:1e:4f:be:d6:5d:75:c8:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=f7974079-0c98-4a1c-8525-d7c3cecc2c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:4f:96:e5:e6:24:ae:a6:b3:d7:a2:22:e2:
                    9a:f9:62:ed:68:9f:f5:93:7b:cb:70:ba:b6:8a:06:
                    36:6f:c3:2d:03:84:87:44:00:2e:07:da:1c:19:f5:
                    5b:de:d7:b8:1e:1e:ac:17:b9:01:4b:13:13:94:aa:
                    25:33:ed:a8:62:3a:07:1c:7c:13:5c:78:4b:dc:2d:
                    54:74:2f:a7:2c:85:2d:b2:46:2b:af:3e:a6:aa:ff:
                    01:85:6c:50:35:7f:c0:38:41:cd:b5:cc:a2:af:b4:
                    50:59:55:82:b6:73:eb:0b:3c:29:06:4e:21:27:eb:
                    0c:01:26:4c:bc:40:8b:9c:e2:94:d7:de:f9:bb:0e:
                    a5:a9:a2:35:0d:17:e7:2e:a0:84:a0:c2:45:2a:3b:
                    f2:31:9b:e8:ce:4d:54:45:3f:d6:58:83:75:78:50:
                    36:4b:ae:a3:d3:0c:40:ac:f7:f6:95:07:10:f6:29:
                    6e:fb:47:a6:f9:c9:5a:cc:c7:03:69:48:ce:2f:05:
                    4d:37:81:2a:e1:61:8e:ee:24:f9:7a:f9:bf:1e:86:
                    d1:9b:9a:6e:b3:62:15:f7:e6:0d:a5:8c:ab:44:d7:
                    b3:2a:46:16:d4:a8:68:ba:8e:b8:9e:e0:ab:e0:f6:
                    38:0a:30:31:c3:bb:87:13:c1:95:1e:36:5a:80:d2:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:46:C9:27:A3:88:94:45:47:C4:59:0A:93:58:EA:BB:BE:B9:D8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f6d214e-b17a-3e22-9ba0-1a7f967e2308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:db:bc:d7:19:50:96:c2:54:78:03:9a:01:5f:9d:60:40:
         cb:ec:32:2f:ec:c4:47:f1:e0:a0:aa:6a:ef:c2:22:6b:3d:2c:
         6b:3c:1d:83:da:86:23:95:1b:46:f1:9f:1c:2e:5a:1f:ee:c8:
         b1:47:40:da:6a:ab:bc:70:af:b0:ff:f2:0c:26:cc:28:f9:63:
         03:02:c2:cc:ba:f7:43:83:e8:0f:22:de:05:84:9f:00:3f:80:
         25:5b:da:d2:f3:af:a9:f8:be:ab:02:65:fc:77:71:47:22:bc:
         98:dd:bf:79:2c:e2:39:87:51:d0:73:e5:81:58:72:67:87:bf:
         a6:22:4f:d3:7e:ef:49:0e:fe:36:9f:d1:b9:b4:64:d6:9e:42:
         14:18:d9:c9:ed:3d:bc:10:5d:48:dc:86:ec:0e:3a:9e:b9:77:
         74:d5:e4:76:46:d2:34:f0:e7:0a:b2:fc:75:1c:67:66:d6:88:
         cf:55:bc:b6:19:db:50:4c:ab:00:95:0f:4b:3c:23:1d:66:8c:
         60:bf:33:de:a2:70:7b:6e:64:70:ed:3e:9d:b7:76:c1:fa:18:
         21:06:a7:60:73:6c:61:26:65:20:29:97:d7:4a:9b:36:3c:59:
         6e:7e:a0:5a:49:74:8b:e9:5c:46:1f:76:75:9a:e0:b2:a8:0e:
         22:ce:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:31:04 2026 by rpki-client