Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7330a516-afc3-3929-bcf8-b174e52ef1e7.roa
File:                     7330a516-afc3-3929-bcf8-b174e52ef1e7.roa (raw, json)
Hash identifier:          5Gkw1c1bgdm4nZkWqbFSEZjEd2z3acPa2+VUZ8UH8IE=
Subject key identifier:   DD:F6:D4:58:A8:FD:4B:1C:90:91:32:A0:AB:78:2C:50:E4:FE:69:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D3EC99A4BE1DCAA71CD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7330a516-afc3-3929-bcf8-b174e52ef1e7.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        71.228.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:3e:c9:9a:4b:e1:dc:aa:71:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=87811ee3-9d46-48a4-8eb9-a397db531d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:d6:32:bd:68:6f:58:3c:f5:fb:6e:8c:1b:
                    0e:53:34:3c:05:d1:c4:04:8a:2e:f1:de:06:ca:09:
                    53:32:fa:cf:f0:4e:07:d9:b6:0b:32:fd:7e:af:39:
                    f9:17:4f:2e:60:58:b8:d7:fb:f2:7a:1d:6f:3a:36:
                    af:3c:f1:e5:11:e4:cb:3d:f0:66:a8:31:53:4a:51:
                    2b:e8:1e:47:9e:ae:10:87:39:6d:5d:e5:25:82:82:
                    b6:fe:63:d7:af:4d:b7:89:bd:31:71:7f:b0:89:2d:
                    92:1f:9d:c0:44:01:23:2c:46:95:87:4d:ed:2d:77:
                    da:c5:33:4b:34:10:71:9e:38:ea:82:9f:e8:1e:8f:
                    1f:ab:9c:20:d3:ec:69:7d:be:d4:b5:47:b5:35:f2:
                    48:0f:b5:3a:8a:a0:a7:cf:cf:45:0a:66:70:14:db:
                    ad:b9:aa:10:5c:32:d0:5c:f4:3e:e2:cd:0a:2a:7f:
                    2b:96:32:8e:ed:c1:25:d3:2e:ed:3d:47:1e:52:c6:
                    43:92:f5:6f:8d:65:6e:c1:77:d0:48:fd:11:d3:2f:
                    58:8f:b0:12:a7:cc:de:85:5b:f0:7c:9d:55:e1:b5:
                    4e:44:1c:4d:7b:ae:43:a5:a9:23:bc:b8:ce:16:8c:
                    08:ef:be:f2:cf:4c:08:ef:25:4a:71:f4:88:1a:46:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:D4:58:A8:FD:4B:1C:90:91:32:A0:AB:78:2C:50:E4:FE:69:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7330a516-afc3-3929-bcf8-b174e52ef1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:59:60:82:64:16:07:85:8a:b0:05:97:11:ef:b6:a5:7d:90:
         14:dc:e7:f4:be:d7:5f:42:ff:10:61:a2:cb:60:bc:b1:ce:00:
         7c:9a:e5:18:ac:cd:eb:bd:a2:94:bb:5a:6d:09:4c:27:de:75:
         90:77:2e:8b:00:16:1a:de:32:a2:4f:99:b9:a0:90:a6:08:57:
         24:a3:05:c8:f2:d0:32:66:65:f1:81:0d:ba:df:f8:ea:8b:18:
         35:ba:dc:df:c6:57:e6:ef:b4:e8:da:4e:78:c2:59:be:65:30:
         e4:eb:15:57:4e:50:e9:4a:f8:54:41:07:7d:98:0a:ef:fa:b3:
         fb:b9:4b:ba:c9:3c:3a:58:b2:df:2d:16:47:9f:5f:24:f7:54:
         05:49:2c:9c:47:78:21:59:2f:1e:5a:07:6d:c8:5f:3c:ef:8f:
         80:05:a4:14:1f:e2:e8:de:45:64:c5:05:11:e7:ed:cf:b4:b5:
         7e:77:f5:ce:48:88:58:55:17:79:06:ac:85:4a:70:7c:8f:09:
         75:02:77:fb:5a:03:46:85:f8:51:95:70:9b:ec:da:a4:77:80:
         6c:89:00:64:bb:34:93:7e:cc:78:62:5f:2f:7d:c6:87:93:b4:
         ee:67:2a:0c:5a:0b:6f:3e:ad:ef:f9:59:5a:b7:ca:9c:70:7e:
         4e:18:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:25:19 2026 by rpki-client