Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11aa141e-400f-3182-afc5-a4ff9a1a6351.roa
File:                     11aa141e-400f-3182-afc5-a4ff9a1a6351.roa (raw, json)
Hash identifier:          SuDBmC1olxUii2asXRBdenfUHzL4gjcpm6cNkwsY2y8=
Subject key identifier:   5E:11:D0:C3:87:D5:5D:39:74:D9:6C:34:B7:69:6F:CF:FD:4E:C5:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF65056CE62267F2C33C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11aa141e-400f-3182-afc5-a4ff9a1a6351.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.22.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:50:56:ce:62:26:7f:2c:33:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=82aa5b22-5640-4c80-8ea6-7c85078468b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:e6:11:97:a0:68:82:9d:68:fc:7e:2c:a7:
                    52:0a:00:54:a6:b3:f5:94:7e:dd:fd:dd:69:a6:bd:
                    dc:6e:8d:04:ba:40:da:11:e6:c0:31:28:46:07:19:
                    c7:9b:95:59:7e:b6:54:be:ca:e5:a2:b9:4c:ee:51:
                    6f:5f:16:0d:bb:a5:ac:63:c9:a8:ba:71:08:e9:c1:
                    24:ab:12:ca:78:2c:51:03:39:1a:16:b5:89:49:a8:
                    19:3a:e6:36:54:d8:fc:38:9e:63:4a:07:c2:24:c0:
                    93:ae:28:2b:a7:16:64:4a:e4:b4:f3:ea:d6:38:a0:
                    cb:fc:82:7c:58:de:c3:78:88:83:93:17:9c:2f:d2:
                    88:07:a4:ed:bb:0a:6f:09:2a:93:7f:6e:bb:df:3a:
                    67:b0:0b:cc:73:f5:d4:7d:2c:a6:42:13:20:df:f1:
                    a3:ab:71:86:75:c7:75:5f:0c:18:9e:b3:ee:22:ba:
                    ab:fd:d7:80:62:53:2f:73:17:a0:03:54:6e:2a:d0:
                    fb:5d:b1:05:eb:69:80:93:6c:b7:f2:71:e3:77:e8:
                    88:3f:bb:35:42:d0:e6:a9:00:2e:7e:e1:32:03:3e:
                    98:5d:fa:e3:fc:0c:1d:64:4c:90:64:df:f4:d2:b3:
                    f7:72:58:94:29:72:8b:40:f1:79:f5:15:96:14:ff:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:11:D0:C3:87:D5:5D:39:74:D9:6C:34:B7:69:6F:CF:FD:4E:C5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11aa141e-400f-3182-afc5-a4ff9a1a6351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:26:37:d3:ff:05:40:3d:4d:97:c9:16:f6:88:5e:da:ba:
         57:86:08:59:38:06:33:a6:34:43:b5:67:e7:27:ff:68:37:c8:
         59:ac:38:c3:ca:60:15:0e:d9:15:07:b1:4f:72:25:e1:33:63:
         87:e4:a8:68:0a:97:4f:d9:b8:b6:74:93:9c:fe:aa:45:e9:2b:
         cf:d9:4c:c6:1d:7c:30:67:53:97:76:f1:59:f8:f7:80:93:51:
         2d:58:cc:24:b4:3a:12:d3:40:32:c8:96:65:10:77:f3:63:53:
         22:74:95:1e:7e:4c:9e:b0:9b:32:1d:38:f3:fc:41:5c:31:a5:
         fe:2f:80:10:30:6c:90:b3:cb:ff:fe:20:da:8a:ad:bd:66:8f:
         f0:9b:56:55:5b:ff:cf:9d:78:de:b2:81:1f:a0:37:84:8f:32:
         8a:fd:82:85:40:6f:b1:a6:cc:40:38:67:79:23:f0:ec:f5:c2:
         17:5e:50:1c:50:30:a2:94:9f:be:17:02:9a:6c:c6:7f:d2:b5:
         24:22:fc:05:6b:16:5d:12:a1:28:79:df:b6:56:ef:49:49:54:
         66:04:f8:dd:24:be:ef:9e:68:76:4a:e7:a4:f2:81:9c:80:81:
         c3:8e:d7:e1:ea:eb:7b:4c:72:9e:e3:f0:61:f1:6c:2c:ad:89:
         89:e9:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:25:09 2026 by rpki-client