Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa
File:                     806c85fa-bb87-3d8a-b645-3fb422217fad.roa (raw, json)
Hash identifier:          gJte+ZN5dAp2wUFfflo229ATGEi0FFr7W7QaZgYiLmY=
Subject key identifier:   F6:7B:79:51:49:D2:D2:20:F5:2B:7C:93:E5:94:FB:02:85:D7:A5:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF761285F382ECD54998B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        73.188.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:61:28:5f:38:2e:cd:54:99:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d5ce9f5f-fefb-4e77-8db4-8ce7dbab67ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:fe:71:cb:70:df:0d:20:c2:a2:86:c2:49:
                    e5:c6:9e:36:ea:b1:65:28:a9:e2:cc:8d:d0:cc:c3:
                    f2:4f:bf:14:60:a4:ee:cd:c4:20:ff:29:a4:01:d7:
                    9d:46:0e:1b:6b:3b:0c:78:72:05:4a:f8:56:28:d3:
                    17:d5:b4:28:6d:d2:d3:84:d1:d5:2b:aa:8a:b9:3d:
                    58:ce:0b:25:da:bc:90:fa:8c:11:25:7d:93:21:1b:
                    0e:87:7f:40:3f:7a:5b:7f:49:2c:bb:fe:e2:4a:47:
                    15:89:97:d0:aa:57:e4:42:0c:16:f8:32:b0:e9:6f:
                    17:1b:81:aa:29:cd:f9:07:ba:37:5b:ad:51:78:fd:
                    c4:d4:4c:32:f7:22:2d:64:d5:ef:e3:4f:4f:dd:3f:
                    50:1d:c8:9b:95:a8:89:ec:de:f5:7a:bd:eb:49:e1:
                    f8:ca:ef:a4:fd:77:bd:84:e7:c8:88:01:2c:b9:49:
                    24:84:0d:3f:45:b9:4e:64:fb:ea:d6:b9:ed:dd:82:
                    bd:3b:07:cc:fb:5f:67:ce:4d:58:47:4f:f1:3a:09:
                    78:d5:15:5c:3f:fd:29:44:2a:de:04:8e:06:d8:68:
                    b7:78:9d:55:b9:6c:57:29:49:37:50:d1:61:fa:4c:
                    fc:56:02:0f:fe:73:4d:9e:af:41:f5:6d:66:c0:02:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:79:51:49:D2:D2:20:F5:2B:7C:93:E5:94:FB:02:85:D7:A5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/806c85fa-bb87-3d8a-b645-3fb422217fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:22:60:e1:9f:91:f2:9e:7c:62:d1:76:36:10:8c:d2:90:d2:
         5f:56:48:9e:4a:cb:8f:4d:1a:9a:f5:94:bf:7b:47:4c:7b:9e:
         e1:e1:c8:0f:34:cc:d9:70:59:11:b2:a2:28:bc:9f:bd:5d:3a:
         4b:d6:3b:7b:7d:45:ba:cf:82:25:80:8d:c7:06:e0:a0:46:5d:
         72:fd:86:73:8b:d0:31:b7:d7:11:ac:0c:6a:16:90:ab:3a:0c:
         b2:f9:74:84:67:7b:38:e5:54:37:ad:a3:4f:26:b8:8f:a6:53:
         b0:f8:aa:8f:8c:57:4e:80:e3:43:99:e5:42:69:03:b2:8c:4a:
         e3:55:0b:a7:3d:20:9d:53:01:13:9f:cd:04:76:78:6a:14:00:
         fc:98:14:9a:5d:93:b0:03:e8:a0:63:51:d8:06:72:62:9a:8d:
         33:2c:38:33:1e:fd:78:0a:5b:ad:d7:dc:99:98:28:90:1c:03:
         71:60:51:ae:69:ea:dc:e6:35:e0:3c:08:36:8b:35:15:1b:32:
         5c:da:60:28:43:d9:47:48:8d:27:2e:e6:ca:54:be:ab:6b:3f:
         ff:ee:59:7e:77:4a:9d:ca:5b:a4:90:45:2a:3c:5e:e1:c5:f7:
         ce:ca:63:d6:eb:19:ae:13:d6:b2:23:09:7d:99:cc:ef:74:bb:
         71:3c:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:17:53 2026 by rpki-client