Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50f7fd6d-8507-30a2-8233-4bba8462b551.roa
File:                     50f7fd6d-8507-30a2-8233-4bba8462b551.roa (raw, json)
Hash identifier:          R1DUDfPsbW6wnpdtVUO2Gh+6puYCK5wiQgY1RM7cZMA=
Subject key identifier:   D7:86:2C:D4:B2:58:02:14:3F:60:71:23:64:AC:DD:EB:5A:AA:29:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5F1CB0E296048B2954400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50f7fd6d-8507-30a2-8233-4bba8462b551.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        73.141.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:f1:cb:0e:29:60:48:b2:95:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=293e5461-438a-4a94-9a0a-c01378f50429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:dc:40:5f:53:c5:fb:88:f7:27:f1:0a:bd:
                    c5:cc:a5:a8:e8:33:81:33:2a:54:1c:27:aa:31:03:
                    4d:30:85:82:49:76:2b:ef:ab:d9:74:d1:0a:ee:d4:
                    83:48:30:e1:81:73:0a:15:c2:21:7d:2f:ec:c5:a8:
                    f3:32:fc:3f:0b:40:b5:e9:a1:3f:0c:9b:35:d8:c0:
                    f4:41:cd:c2:a9:b6:1f:1d:90:0c:84:79:b3:45:0f:
                    80:6d:cb:db:9d:cf:17:1c:79:8c:66:46:4b:d1:0e:
                    e2:30:59:af:23:b6:88:b1:54:12:52:fa:2c:96:79:
                    b6:25:71:88:1e:d8:f1:bf:b9:9e:f2:fd:6a:4f:35:
                    aa:39:b4:42:00:b3:27:23:9e:81:eb:d1:50:6d:54:
                    e4:ca:21:54:af:02:fe:d5:2c:81:22:c1:ae:d2:8f:
                    f9:19:cc:ff:7d:40:6c:20:82:3c:d7:1d:3e:c3:a0:
                    fc:7b:db:b6:5b:55:64:30:2c:a6:ac:be:8d:7a:a0:
                    80:99:9b:e1:50:70:61:38:62:f6:b7:4b:f1:33:e8:
                    30:54:d5:a7:6d:98:a9:4d:37:6e:41:47:c4:08:58:
                    a4:b2:8c:50:84:51:71:56:1e:57:c7:19:1f:65:46:
                    db:54:e5:b4:50:eb:52:ee:be:cf:12:c2:21:6c:75:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:86:2C:D4:B2:58:02:14:3F:60:71:23:64:AC:DD:EB:5A:AA:29:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50f7fd6d-8507-30a2-8233-4bba8462b551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.141.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:ef:be:ef:3f:86:ab:cd:bd:6a:9b:e3:bd:88:a1:3e:9d:
         3d:39:fd:b9:6b:28:54:75:5d:5e:93:06:6b:07:73:41:88:63:
         3a:47:32:bd:0b:3d:98:39:6b:9a:85:3e:27:4f:8a:06:f6:a7:
         c8:ef:39:b1:80:30:9a:21:52:39:10:a2:c4:83:c8:eb:77:63:
         07:d5:66:a9:a7:58:ec:70:06:0b:80:13:0c:50:38:df:10:48:
         22:db:45:99:77:8f:71:1b:a4:06:4d:71:9e:30:8e:98:cb:4f:
         3d:95:1d:18:c1:94:1a:b5:b1:3d:f7:07:07:6d:37:f9:68:c2:
         21:4c:22:72:18:36:ab:34:cf:3b:57:d1:67:7f:13:16:8c:eb:
         6a:6f:3a:7c:41:d4:74:da:b2:18:c7:9e:50:c8:5b:80:8a:6b:
         3c:c9:33:72:e4:02:bd:a9:a9:a3:b1:cf:58:d3:6b:d4:c4:43:
         47:6d:03:0a:30:10:b6:8f:3c:fb:fb:a7:eb:ee:84:76:e7:98:
         1c:08:ab:ad:d8:58:88:8f:f4:f0:e1:b5:66:60:9b:37:de:24:
         bb:14:10:09:64:f9:7e:b6:96:d6:1c:a0:4c:56:2b:60:37:25:
         f1:7a:a5:2c:81:5b:d8:06:e5:40:ec:e1:a9:a4:4b:45:bf:ad:
         99:75:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:33:16 2026 by rpki-client