Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14478efc-29b4-3047-93c7-436f01c3c7c7.roa
File:                     14478efc-29b4-3047-93c7-436f01c3c7c7.roa (raw, json)
Hash identifier:          yYZt4cL7HQaZC4N/L14v1oycJLP9zhx3dglCqt2QRz4=
Subject key identifier:   51:DE:DE:A2:22:C9:F0:FA:9F:E5:0E:B7:B5:E8:60:B8:DD:26:42:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6BC6975C9698C99E53E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14478efc-29b4-3047-93c7-436f01c3c7c7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.170.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:bc:69:75:c9:69:8c:99:e5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=74e43e2f-3154-44e4-a1a1-cb555f13a4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:a6:49:5f:73:36:8b:4f:8b:10:05:2b:e9:
                    49:7a:b5:4e:2f:ea:30:5d:64:87:dc:27:00:dc:4d:
                    f9:23:c3:71:b7:e7:f3:05:bd:db:2e:7e:04:c5:d0:
                    75:5a:43:89:09:44:6b:fe:f1:32:17:d0:bd:35:72:
                    c4:73:a1:91:96:77:48:e6:22:14:cb:9a:b2:d9:d8:
                    e7:59:aa:f1:ea:03:58:cd:cd:ef:cc:02:78:f3:05:
                    26:e5:d8:33:73:8c:eb:e8:0f:1b:c6:db:d5:06:44:
                    2a:d0:3e:de:4c:b4:8c:99:98:52:c3:e9:57:06:3c:
                    52:c5:67:38:3c:4d:98:37:25:57:67:cd:6e:a3:77:
                    69:53:8f:ca:c0:e6:01:68:bb:9f:f7:6d:56:42:53:
                    ad:4b:59:92:e9:a4:64:b6:91:80:5e:56:80:72:90:
                    7a:22:e4:d6:78:1b:51:48:a4:99:5b:2e:cb:53:28:
                    15:d4:64:0b:1b:eb:1d:df:0d:dd:e6:5b:7d:1a:86:
                    12:59:0b:ba:20:db:ff:b3:32:01:66:08:54:4b:17:
                    07:ef:84:2c:2b:74:d9:37:08:1f:a1:2b:de:3b:d2:
                    84:58:30:f1:f6:b3:2e:d1:87:37:f4:ba:6e:95:4b:
                    8c:ac:46:72:68:06:86:e3:ad:0b:94:e6:6b:48:a4:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:DE:A2:22:C9:F0:FA:9F:E5:0E:B7:B5:E8:60:B8:DD:26:42:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14478efc-29b4-3047-93c7-436f01c3c7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.170.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:2a:bf:c0:31:dd:4a:73:05:77:f8:20:52:0b:48:ea:4b:1b:
         68:11:c4:41:2d:ef:47:70:ac:31:01:93:81:79:a0:36:4f:4a:
         a7:f1:d4:22:70:9d:6a:70:c1:d6:58:ea:0f:73:7f:fe:61:5c:
         5b:3f:1d:04:46:c6:27:0a:00:64:f6:5f:f9:9e:68:56:0b:c9:
         16:af:c6:e1:36:e1:af:37:ef:4e:11:6a:5f:7a:af:14:8b:7b:
         11:2c:00:b7:97:94:00:54:16:9d:60:1f:ed:50:10:01:92:0a:
         01:b4:11:74:7b:d2:a5:6f:67:09:cd:80:5a:22:09:a0:88:41:
         7e:49:4e:f1:fa:a1:55:93:e8:da:f8:13:9c:14:43:66:d1:3d:
         01:41:69:24:e9:70:85:bc:f7:35:17:4d:35:01:c5:dc:9f:eb:
         45:5d:4c:59:a0:c9:8c:3e:6e:34:0f:03:b0:fe:31:3e:3d:0c:
         07:a9:e3:53:e7:01:db:74:7d:87:fa:55:e2:c0:8d:a4:24:76:
         66:3c:c4:6a:97:52:67:dc:b6:a4:1a:21:cc:87:4b:d6:b8:94:
         15:a5:74:4f:0a:62:9e:e4:72:9e:e3:cc:aa:3b:2c:f6:e7:06:
         52:e3:50:de:29:a1:2d:da:0b:00:d9:32:1b:da:1c:85:d5:bc:
         2e:71:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:49:33 2026 by rpki-client