Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810cc21b-07af-3e60-bc71-86127345d87e.roa
File:                     810cc21b-07af-3e60-bc71-86127345d87e.roa (raw, json)
Hash identifier:          GVNW1Yzt8q1fbWxYlMaUmfosSZTbSRpi2+P/6JDg6S0=
Subject key identifier:   B0:A6:37:AE:D6:DA:C2:55:D4:C8:3B:C3:E4:26:DC:E6:D5:1E:8E:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7BF939F0EF10ACCC55C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810cc21b-07af-3e60-bc71-86127345d87e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.246.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:bf:93:9f:0e:f1:0a:cc:c5:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=a165d9ac-42ad-4f34-b3fb-d6923c6e8bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:22:52:d3:a8:c6:1a:44:f3:c8:45:cf:12:
                    cb:2f:27:80:e8:94:b7:9c:b4:2c:f3:59:d2:b8:eb:
                    ce:29:82:34:e1:81:29:2e:93:7f:35:c7:dc:c7:8a:
                    b6:48:83:ad:a7:f9:e2:37:fc:35:65:27:37:78:31:
                    de:db:ba:dc:24:24:50:70:a2:67:0b:81:d2:cd:26:
                    1b:19:e7:68:b0:ec:07:3f:97:7a:99:78:a9:9f:b4:
                    ff:dc:13:7d:0f:04:6b:ab:58:67:30:3a:fe:61:4f:
                    fa:51:9f:c5:4f:20:48:92:58:1c:f3:a5:2a:ac:a1:
                    21:ad:21:67:1c:40:59:9e:44:5c:d0:ab:f4:7f:1d:
                    f4:e3:63:da:af:97:e6:72:29:e0:d5:dc:58:ea:90:
                    c1:eb:a0:77:5e:e0:14:b2:f3:ac:4a:07:8e:5b:8f:
                    a4:a8:e6:24:a7:09:a5:44:b0:93:9c:3f:b9:03:5e:
                    91:80:35:7f:ea:c8:07:c1:6d:82:aa:d7:0f:45:17:
                    b2:34:48:d8:b8:2e:07:9c:98:2f:86:b1:fc:d1:f8:
                    76:a4:44:44:58:8a:90:94:53:c9:60:38:29:aa:44:
                    f0:9e:4b:f5:72:6e:94:ad:c2:a1:7f:54:4b:ce:83:
                    7f:fc:48:5f:91:07:2d:42:1e:a0:00:70:9f:c3:ea:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:37:AE:D6:DA:C2:55:D4:C8:3B:C3:E4:26:DC:E6:D5:1E:8E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/810cc21b-07af-3e60-bc71-86127345d87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:4a:54:4f:f5:24:f6:66:b9:b2:69:ad:dc:08:cd:90:11:
         16:11:1b:b3:36:ca:87:af:4e:92:ac:4f:4e:39:1a:19:a4:59:
         61:c1:a5:92:a0:3f:3a:77:21:43:2f:2e:6a:ea:f1:2d:fc:c9:
         b5:06:47:c8:80:39:6b:88:3f:f5:4f:71:9e:1e:4b:22:be:85:
         74:68:62:8d:f8:65:18:b5:49:51:df:73:fb:ec:62:0c:f3:2c:
         56:d2:bf:3d:17:ca:d1:66:6c:ff:3f:b4:40:7c:cd:bc:9e:2a:
         ea:76:d0:7e:a9:1d:ae:e4:1a:d3:7e:1f:e3:53:38:c6:ae:6a:
         b7:2e:9c:e4:2e:65:a6:56:e0:04:62:01:29:fc:e7:f3:d2:d5:
         d0:87:4b:1f:19:b9:47:37:e2:9f:21:d1:6d:32:47:e9:0d:27:
         05:c2:0d:66:f5:c4:ea:4a:6d:95:98:dc:7c:7b:b3:e6:49:5c:
         9f:f8:5f:6c:24:16:be:e5:ca:2f:f5:ca:68:58:ff:8b:77:c1:
         de:95:42:85:4a:99:40:f2:ab:f9:28:7b:1d:e6:46:a5:0f:ab:
         4f:79:e2:c1:f0:95:1a:6e:99:50:c2:7c:72:cd:c9:84:3e:1a:
         82:b8:a3:86:d2:82:62:ef:7d:cf:8a:c8:d9:d3:de:27:7e:9b:
         07:fc:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:59:05 2026 by rpki-client