Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823b3229-5288-37f7-9396-161d233570c8.roa
File:                     823b3229-5288-37f7-9396-161d233570c8.roa (raw, json)
Hash identifier:          pBSTBPlQXkOT1/NalyT3SbKSzxpurUykxvMc/3n3j10=
Subject key identifier:   5B:B7:E1:B2:FB:9F:87:3D:66:54:43:D3:CD:FB:B9:7E:26:40:45:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8D5A9676EF7EF6A401380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823b3229-5288-37f7-9396-161d233570c8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.231.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:d5:a9:67:6e:f7:ef:6a:40:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1c7a9908-6705-455c-b38b-e291b2a214f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:e2:29:38:62:b6:48:55:09:8f:14:db:14:
                    08:43:44:a7:ae:07:bd:c6:65:29:02:b4:70:7f:c8:
                    8a:44:03:c8:61:77:6a:bc:88:40:03:63:16:4e:4a:
                    27:8d:ee:bb:fe:f7:07:d4:cf:cb:d8:93:6e:b0:8d:
                    8d:cd:5c:2f:c1:d6:a9:db:e6:a8:4f:9d:eb:18:53:
                    ec:3c:bb:95:2c:36:5f:32:6c:c5:f6:45:7c:5e:54:
                    91:9f:e2:63:c8:02:f4:ab:51:20:80:5e:d4:94:d7:
                    c1:5c:4d:23:93:39:e0:dd:f6:bd:00:18:3d:3f:88:
                    48:3c:3c:76:b1:dd:cb:ce:f8:ca:a9:86:90:22:39:
                    be:e3:81:ff:d6:85:6b:07:59:93:d6:b5:b6:76:d7:
                    56:df:08:d1:a9:1a:8d:12:fb:15:51:a5:33:64:f3:
                    cc:0f:e9:6b:38:ad:7c:e8:0f:34:8d:a7:19:50:ab:
                    9e:9f:59:25:a6:bb:9a:90:30:dd:2c:59:25:23:a7:
                    dc:f0:43:f6:0a:55:29:ae:a9:d0:75:2d:65:1d:33:
                    76:c8:78:dd:53:c1:d8:aa:7d:ce:2a:8c:cd:af:4d:
                    c3:64:00:53:de:8c:aa:1d:66:24:e8:bd:82:c6:a5:
                    53:a7:ae:1f:d0:08:65:81:63:f6:14:61:5c:7d:f1:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B7:E1:B2:FB:9F:87:3D:66:54:43:D3:CD:FB:B9:7E:26:40:45:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823b3229-5288-37f7-9396-161d233570c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:03:d2:3e:23:a1:80:9d:fd:03:f9:8e:2a:b7:e2:09:f6:
         8f:0f:49:15:5f:df:c1:f7:34:de:8f:49:53:b8:ce:a2:97:ff:
         1a:35:5e:15:f9:cd:a7:96:10:5f:1d:98:1f:79:e4:fd:e8:f7:
         9a:f4:e4:0e:2b:34:7a:ad:03:e4:bc:8e:a1:d9:37:15:16:36:
         02:41:16:c8:77:88:05:4f:f1:10:3d:b3:c7:c4:85:0b:21:03:
         2d:a0:e9:4f:10:2f:ff:ac:eb:fd:08:41:a4:19:3e:55:bf:79:
         4d:a6:11:dd:3a:e7:f0:4e:e1:34:79:fd:75:56:8f:84:d7:a2:
         ea:8b:c0:dd:99:8e:eb:e0:e0:e5:70:87:00:35:46:e9:30:28:
         3e:85:d9:2e:02:60:bc:82:04:87:ca:d1:bb:9b:67:13:50:c3:
         74:5c:d5:75:03:50:4b:7e:4f:3c:51:a1:ad:92:fb:50:9d:b3:
         3d:78:6f:b1:b5:a0:d7:b8:bf:01:64:8b:d9:d6:82:5c:0d:ba:
         bf:fc:6d:68:79:ac:1a:30:f6:9b:a6:43:de:45:70:e2:37:01:
         9d:cf:dd:14:90:e4:84:50:3f:01:71:78:75:42:23:e6:2d:15:
         a5:88:05:6a:d4:5f:8a:ea:ee:b7:7f:85:0c:8c:7a:76:88:18:
         b0:d9:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:33:33 2026 by rpki-client