Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad478bd-830f-3d36-91e5-adcb029560b1.roa
File:                     1ad478bd-830f-3d36-91e5-adcb029560b1.roa (raw, json)
Hash identifier:          Ep8opca1PmFyyXwleF6vwhFjhgkOH+2HI77YowHaMUw=
Subject key identifier:   BD:6C:AA:21:B9:40:9D:A1:07:D7:38:23:E8:D4:9E:3B:0C:0B:D4:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7AAE11CD340375B372E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad478bd-830f-3d36-91e5-adcb029560b1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.168.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:aa:e1:1c:d3:40:37:5b:37:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=efe5e4ac-69c4-49eb-b012-6eadce9526e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:ba:8f:4e:63:36:4e:c9:ee:dc:3d:5c:6c:
                    16:48:ac:fe:ba:48:99:f6:20:9b:cc:cc:39:18:83:
                    7a:71:4a:98:62:d2:08:5a:07:b5:69:9c:64:e6:a3:
                    eb:00:10:fd:f4:a0:f4:ad:20:6f:86:f0:fa:f7:ce:
                    0b:4f:b7:22:b1:f5:58:2b:6d:59:6b:b6:b6:a9:77:
                    b9:04:23:75:f7:fb:54:12:b0:f1:db:b8:a4:51:1b:
                    53:35:cb:9b:84:f2:75:5b:0c:89:1d:24:7d:8e:68:
                    d6:fc:c3:72:7b:77:cc:70:f7:05:9f:14:09:cf:9b:
                    38:7c:97:30:8a:d7:ac:f5:95:fe:7a:f5:9a:46:c4:
                    37:41:fc:cc:95:8d:2b:7c:fb:dd:db:f1:01:d1:b5:
                    9f:71:35:3b:a0:a3:d5:8e:16:6f:20:b2:9e:0b:c2:
                    f1:fa:94:93:02:1e:96:7a:9e:37:83:91:86:50:ea:
                    f3:cc:f6:72:90:b7:2d:de:26:4c:25:e6:8b:37:a6:
                    74:fe:00:4f:42:9f:de:a5:2f:0a:f4:b8:97:97:9e:
                    35:5d:91:4c:d8:c9:55:97:2f:a0:6f:1b:19:81:bf:
                    c5:5e:87:00:b7:e1:48:44:65:04:9d:7b:6f:37:e1:
                    5e:2d:03:f8:29:74:15:80:a9:82:67:36:63:3b:dc:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:AA:21:B9:40:9D:A1:07:D7:38:23:E8:D4:9E:3B:0C:0B:D4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad478bd-830f-3d36-91e5-adcb029560b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:ab:81:88:12:8d:c9:cf:dc:e8:a6:9f:7f:ba:e0:db:2e:
         70:d6:91:e0:30:c4:72:12:1e:c0:c6:47:81:8b:66:cf:19:c8:
         ae:13:24:f6:d0:58:d7:3a:f5:ae:d9:bc:3d:dc:f6:9e:33:ab:
         1c:f1:e9:e7:88:21:d5:d9:6d:bc:14:c1:88:16:cc:9b:c2:0e:
         5c:36:b7:0f:13:77:af:01:2a:88:b1:49:46:2f:f7:44:ba:4a:
         5f:75:df:36:0c:99:1f:af:59:9c:3f:4c:4c:50:2b:af:1e:1e:
         8d:73:55:fd:58:b1:a1:c2:34:37:d0:23:8f:a9:8f:ca:71:72:
         d0:22:f3:cf:60:e3:3b:f8:e2:97:14:28:99:29:b4:e3:fb:3a:
         dd:a4:ef:83:2d:99:67:5b:af:79:88:cc:56:8d:7d:61:cb:4c:
         bc:f4:7a:a7:09:6f:a3:bd:84:cc:54:ee:35:37:9f:bb:58:7b:
         d1:ed:ff:83:12:cf:a9:b7:fb:76:98:22:4b:16:22:01:c0:95:
         76:08:eb:3f:06:f7:54:d4:ba:bd:5f:7c:0f:a0:20:c5:3c:2b:
         a0:64:10:e4:0e:9a:6a:c3:4e:4f:6b:4f:e7:1c:f1:9e:22:29:
         89:7d:72:08:e4:d6:29:3d:69:bf:60:54:6c:5f:75:e9:49:18:
         67:d8:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:25:54 2026 by rpki-client