Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595f3980-3139-3bd7-a2da-35f7358ae5d8.roa
File:                     595f3980-3139-3bd7-a2da-35f7358ae5d8.roa (raw, json)
Hash identifier:          MIfOlS6ZXbYi6qYKMqp/eGDctRmH8M63sG+SHAvLBfI=
Subject key identifier:   9A:7A:9F:2C:E4:00:7A:D0:3B:51:93:00:E5:FD:B8:F4:9D:40:6E:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7C5480A2113623750E980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595f3980-3139-3bd7-a2da-35f7358ae5d8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.36.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:c5:48:0a:21:13:62:37:50:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=92f08ad6-ebba-43bd-9311-00e63641999e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:a7:59:53:a8:7b:95:ce:fb:1f:d2:58:18:
                    64:bd:63:72:a0:37:5f:8c:7a:d9:b1:7a:de:b9:22:
                    80:06:03:93:2e:5d:ba:3a:f4:09:b2:04:ad:a4:4a:
                    84:cd:0e:4d:21:b5:e9:ac:ed:9c:3f:b2:10:10:6c:
                    d5:11:6b:aa:14:cc:df:60:26:c9:3b:55:a6:d1:80:
                    41:b0:4f:31:90:41:66:86:bc:ba:be:4c:ac:1b:d3:
                    6b:1c:63:4f:b5:79:be:98:12:37:59:e5:1a:1a:32:
                    b1:89:40:fd:cb:9e:58:c7:fd:8b:c6:d0:5d:9a:97:
                    43:9d:2f:30:95:3f:f1:fe:c9:ba:52:85:aa:d9:f1:
                    78:24:b2:3d:cf:b5:f7:1d:11:a8:f6:10:c4:bc:43:
                    d5:26:11:16:f2:cb:86:6c:89:6e:af:4a:42:d7:72:
                    2e:dd:a1:b7:02:eb:b3:21:e2:2c:60:0e:3d:e6:67:
                    2c:9a:9a:de:e5:02:2d:2a:bd:79:5c:65:a4:20:74:
                    91:7e:d0:f5:b4:4e:13:15:3a:e0:92:5b:be:e5:68:
                    5e:f1:ae:4a:c1:f8:7b:90:10:bf:6c:be:6d:62:90:
                    61:42:17:f8:9e:6d:26:e5:d9:52:6b:a3:55:0c:84:
                    f5:0a:2f:5b:84:c4:e5:3a:8e:63:ee:74:ba:e9:81:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:9F:2C:E4:00:7A:D0:3B:51:93:00:E5:FD:B8:F4:9D:40:6E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595f3980-3139-3bd7-a2da-35f7358ae5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:2d:45:a5:0b:52:89:17:83:06:b5:27:cd:f6:e3:73:3d:
         33:02:c1:f1:a0:bb:29:1a:fa:df:28:82:b4:b2:87:48:58:78:
         6c:97:84:5e:35:8b:9f:0e:5e:19:a2:fc:56:60:a1:07:bd:4f:
         11:0b:71:51:dd:0a:8a:26:75:03:ff:a6:f1:28:5b:88:c2:b6:
         f0:77:15:d5:26:69:48:7f:29:9c:d4:8b:2d:09:b8:f0:da:dd:
         5a:1c:cd:43:80:9d:8e:ec:e6:8c:63:56:33:c5:35:0d:a4:01:
         59:05:c1:e2:5a:fe:e1:7e:c5:a9:31:93:d2:10:f8:c4:5f:bc:
         a7:10:7c:72:e2:a7:20:b7:42:89:e7:b5:a2:de:f8:f2:94:a2:
         fb:fd:f8:66:f9:0a:49:cb:61:ab:cb:5c:60:57:15:17:af:71:
         1a:16:f7:f5:ab:fe:06:d9:12:0c:f6:0f:b7:23:88:f2:37:73:
         b0:3d:da:11:c7:10:d4:6b:ea:0d:42:4d:51:d0:08:72:25:5a:
         ab:70:13:6c:e0:b6:d2:4f:07:0d:e1:c0:73:98:1b:ca:16:79:
         9f:d3:6b:dc:54:7f:5c:c7:18:af:23:96:09:a2:fe:71:67:41:
         92:da:f3:6d:74:cf:cf:0c:d4:30:0e:c2:64:14:40:fe:df:5b:
         d2:ed:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:21:08 2026 by rpki-client