Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa
File:                     7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa (raw, json)
Hash identifier:          eocqdbYUDtdqpxeuC+G++8XA+Jetx6mK23gwFPj6KhA=
Subject key identifier:   0E:CB:FA:09:98:3F:B3:00:A2:20:BA:25:E2:B8:D7:04:13:5A:F1:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5D0FCD5B79606E0D9E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.248.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:d0:fc:d5:b7:96:06:e0:d9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=112b2b56-36e1-454b-9a07-6b0a48ac252d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:ad:fb:ef:ff:3b:81:30:e1:95:cc:9e:95:
                    ee:4b:eb:70:5c:08:d4:c9:e1:ac:8c:fd:28:d0:4a:
                    73:ec:5f:31:57:8a:05:77:bf:2a:01:a7:55:55:7b:
                    53:39:86:f3:aa:95:aa:30:67:d0:ff:04:09:8b:4d:
                    16:cd:64:c3:4e:50:83:c8:80:e6:cc:81:c7:25:6f:
                    65:8e:1e:0b:e8:62:fe:ac:d7:4a:a1:da:16:23:c1:
                    3c:3b:ea:82:3f:ff:97:fc:c9:bf:f3:ec:f9:2a:5b:
                    ed:29:f0:5a:1d:19:8b:59:48:12:50:01:ab:49:02:
                    67:72:a7:36:45:ce:6c:8e:5d:31:4c:1e:be:22:64:
                    fd:8f:58:af:82:aa:9b:c2:68:49:c4:8b:50:98:7d:
                    49:50:28:08:47:b2:dd:e4:2c:dd:92:af:62:bf:02:
                    e5:20:95:ee:b0:7a:13:fd:73:6f:35:f0:0b:29:e9:
                    39:82:f2:29:3b:1c:74:94:89:17:d4:55:7f:fc:67:
                    f0:02:f4:e8:eb:fa:39:3a:9f:e2:17:c2:80:fe:e1:
                    b8:d4:aa:6f:77:64:8a:06:7c:48:64:65:e0:0f:e7:
                    3d:a2:77:f1:40:92:6f:02:c7:0c:37:ee:f0:a6:07:
                    b3:bb:81:e4:b1:fa:46:d7:67:8b:58:a4:3d:aa:fe:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CB:FA:09:98:3F:B3:00:A2:20:BA:25:E2:B8:D7:04:13:5A:F1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c9b7a6c-4cea-3e26-9135-3311c195ca77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:bb:0c:07:83:7a:cb:02:1a:98:81:e8:8c:f1:a3:44:c5:
         d9:3e:d2:31:2c:7a:ed:0c:c3:ff:88:0a:32:ce:0f:0b:e4:8a:
         c9:77:7f:f2:12:58:7a:4b:6a:d8:5a:f0:d6:48:0d:f5:40:0e:
         1e:11:46:e0:96:98:c2:ac:40:64:93:f6:28:cc:f1:c5:c2:5a:
         d9:29:99:38:41:ae:a2:68:4d:0b:2c:95:65:54:15:42:ec:bd:
         7e:c1:10:69:c8:eb:0a:a6:64:a0:ea:b3:e9:5a:29:43:f5:ff:
         f2:bd:66:f8:af:71:91:ed:a6:fa:3b:b1:cf:9a:dd:ed:f5:88:
         ef:75:e9:29:ff:02:07:dd:06:4f:6e:b4:7b:40:9d:38:7f:ff:
         8b:59:33:16:5d:7c:a6:be:2a:39:a5:8c:de:94:48:8b:f7:35:
         e8:d8:a9:d6:47:1e:93:1d:12:16:a8:b5:a4:bf:ca:e1:62:f2:
         bd:d3:5a:4f:6c:44:7d:2d:f1:02:4e:5b:a0:e3:38:f6:63:53:
         ad:dd:79:ad:0e:9e:a1:88:77:62:d4:f4:fc:36:bf:16:34:ba:
         4e:2e:60:47:dd:a2:e3:c8:a6:de:a7:e4:76:c2:25:4d:2a:98:
         d4:ad:aa:08:f3:00:7c:50:41:08:ba:e2:30:ad:9d:1b:f7:b1:
         67:c0:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:25:37 2026 by rpki-client