Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9fb241-d385-375a-b212-565a4bc04e62.roa
File:                     8c9fb241-d385-375a-b212-565a4bc04e62.roa (raw, json)
Hash identifier:          ISKSgk23vODnIHpU/FtSZIrqGrMIgw/WDgWAdf4Y1oE=
Subject key identifier:   79:1B:DC:B7:C9:9D:EA:87:F8:D0:83:B1:82:4B:F3:72:B3:08:28:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7BD428D4C7003EFB60300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9fb241-d385-375a-b212-565a4bc04e62.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.22.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:bd:42:8d:4c:70:03:ef:b6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=45e9c67a-83dc-4a65-917e-1f9942294391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:6b:43:24:2f:8b:f2:f7:95:98:f1:d4:31:
                    7a:c3:b5:d1:7a:22:59:5c:65:ae:fc:55:ed:23:8e:
                    1a:af:40:ac:3e:b0:7b:ce:64:2c:fc:6b:f3:e0:1f:
                    96:cb:b7:97:cd:68:80:15:c6:ae:eb:15:a3:a2:12:
                    d0:f4:f8:3c:c2:6b:6d:6a:b6:12:10:ae:de:6d:05:
                    05:d0:dd:e8:c8:ea:9d:db:f5:65:e0:a9:f0:21:08:
                    a7:86:16:2a:67:b6:b4:0d:36:c2:49:08:8c:8a:71:
                    e1:a3:af:ab:6b:88:b6:5e:1e:07:96:01:d8:1b:39:
                    7f:5a:8a:83:00:5f:79:32:f5:8a:3e:01:b3:bd:fd:
                    65:ca:60:26:cc:15:9a:0b:81:70:5c:e8:ed:23:a8:
                    71:a5:57:8e:1d:88:41:74:b8:e5:b6:e3:8a:fc:4c:
                    90:5e:f2:80:fd:f0:ce:13:ce:85:16:69:e5:0d:4f:
                    e4:2f:89:06:f6:88:40:a2:5b:a9:ee:34:d0:a5:3b:
                    cf:00:41:f3:11:0c:c6:23:97:e6:7d:e3:5b:e6:72:
                    a8:ac:c6:f5:56:1a:7b:41:87:9a:1a:e0:78:a0:08:
                    ba:f4:de:0a:96:fe:e8:31:3a:e0:6d:a7:f2:47:42:
                    09:53:e6:46:13:c5:fc:86:4d:ce:46:71:93:4a:a9:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:DC:B7:C9:9D:EA:87:F8:D0:83:B1:82:4B:F3:72:B3:08:28:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c9fb241-d385-375a-b212-565a4bc04e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:72:01:56:6c:ad:22:fe:c7:55:20:49:43:28:69:81:f0:d6:
         8f:63:b9:43:94:71:56:ad:d7:6a:35:d9:8b:0e:43:a9:5b:a0:
         81:0a:51:f4:b4:94:12:6f:ec:7a:9b:28:7e:ef:41:55:bd:92:
         fe:ce:97:6a:d5:4a:f9:7d:8a:85:0c:fd:af:8e:40:34:3f:ed:
         f2:94:94:e1:d5:d7:77:c7:6f:71:fa:6d:06:fb:f2:ad:fe:ab:
         f6:1f:5d:e1:be:c6:50:df:cd:3f:fb:6c:2f:67:0c:ad:57:76:
         6e:8d:b8:42:b4:4f:7b:06:fb:66:90:b5:cd:0e:a0:de:54:17:
         7a:3e:48:a8:45:07:af:00:26:f6:38:25:0e:84:fa:30:c4:f8:
         3e:bc:38:ac:3b:c8:3c:dd:ce:e3:d5:ed:49:06:fd:72:da:7e:
         62:ad:99:0b:f8:c8:d8:e5:f8:eb:c4:21:ab:a1:8e:2a:97:c4:
         8a:9d:2b:30:63:2b:cd:de:fc:02:7a:91:48:6c:98:cd:69:15:
         51:53:d5:4e:ce:5f:97:d9:0f:fe:bb:52:cf:ab:28:a2:4a:7c:
         fc:ae:de:dc:02:96:57:93:a0:06:ac:34:9d:62:47:e7:53:62:
         ad:99:fd:ec:c1:21:26:ac:0d:82:a5:8c:3d:b2:57:34:b9:bd:
         4f:83:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:30:08 2026 by rpki-client