Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17cfccf4-1c96-3884-9d4e-2f70f59e5f4a.roa
File:                     17cfccf4-1c96-3884-9d4e-2f70f59e5f4a.roa (raw, json)
Hash identifier:          YUwn29ORfAlk1gklJPYwdD4zbqAEWFgJ+GBELXUN3s4=
Subject key identifier:   B6:DB:6F:E4:F9:17:27:66:09:DA:5A:AD:F0:02:4E:CC:60:1A:21:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8D59BD161E81591F1B998
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17cfccf4-1c96-3884-9d4e-2f70f59e5f4a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.231.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:d5:9b:d1:61:e8:15:91:f1:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=eeb5e104-7981-4505-b4b2-21ca2c4066de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:3b:19:1d:19:da:b1:e5:ca:0d:5f:67:02:
                    4e:80:40:3a:5a:89:54:cd:8a:41:84:e0:66:e5:19:
                    82:56:44:e6:36:7c:0c:43:d7:2a:bb:46:79:72:88:
                    54:8a:4e:81:ba:d3:5d:0e:c3:64:75:26:3d:e5:e3:
                    93:57:f9:dd:00:fe:92:00:81:ea:eb:3f:93:c8:c2:
                    f1:e9:2f:53:54:8f:bd:80:d1:59:ed:4b:79:26:7e:
                    f9:8b:62:ef:14:6a:61:29:7c:f6:09:c1:13:72:29:
                    55:30:f3:7f:bd:05:4d:3e:4d:6e:a9:1e:2b:a0:94:
                    b7:19:99:3d:a0:81:28:0c:8f:d3:ab:37:35:31:30:
                    7c:c0:f7:82:f8:f4:3a:3e:a9:94:82:ca:95:7b:27:
                    6d:1c:5e:a9:78:ea:4a:62:37:8b:0e:28:46:f0:69:
                    49:32:d0:9b:68:7c:d0:5b:41:4b:7b:f6:12:e5:c7:
                    59:65:40:5f:ea:44:37:5f:d3:32:05:bd:c3:5e:38:
                    3b:d2:1e:03:f4:af:80:6e:ca:31:e8:2e:95:47:e0:
                    12:ef:83:27:6e:6a:fa:8c:55:70:1e:2a:0f:06:ea:
                    26:de:50:6e:1e:8f:c7:00:f2:eb:73:2d:6e:60:69:
                    0c:34:a1:b2:ee:d0:d7:d4:42:8f:b1:d9:eb:6a:d5:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DB:6F:E4:F9:17:27:66:09:DA:5A:AD:F0:02:4E:CC:60:1A:21:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17cfccf4-1c96-3884-9d4e-2f70f59e5f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d2:2b:54:22:d9:60:30:b6:8c:24:cf:79:88:04:25:eb:ba:
         1e:14:6f:1d:9e:a8:88:67:40:05:89:1b:7d:49:06:86:06:fe:
         93:88:35:ff:fb:73:fc:cd:5b:2f:53:d8:c9:83:cd:64:59:01:
         95:1b:ad:a9:22:1c:40:69:1d:19:a1:54:33:37:eb:0e:39:83:
         4d:fb:2c:4a:0b:4a:4f:71:e7:62:4d:d3:8c:1a:39:b7:f6:d8:
         c0:dd:8f:63:e8:72:c1:7d:b0:12:37:33:4c:7e:d5:bd:6a:86:
         8e:4a:7e:3e:37:ca:1e:7e:74:f4:04:84:10:10:af:48:ca:84:
         85:c1:08:5e:7c:d2:bc:80:15:f9:f7:1e:89:98:51:85:96:06:
         bf:84:4d:b7:03:1d:fa:f2:95:d6:05:23:2b:1e:78:c4:ec:1d:
         5d:a7:54:95:82:30:16:25:f1:a0:e6:a4:e4:4e:09:44:53:69:
         69:9f:e7:0d:a3:9b:fe:9e:48:6e:14:60:7a:1d:d3:03:9f:06:
         fb:3b:72:6e:ba:01:49:8e:44:03:76:35:93:f9:36:af:3b:33:
         5d:d9:14:4d:6d:ad:d8:86:cd:48:14:1a:50:b3:f1:5c:cb:aa:
         09:49:b0:c3:51:3e:cb:d7:4a:fd:19:94:8c:96:4b:b4:e2:f8:
         0c:62:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:11:58 2026 by rpki-client