Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97adb38b-8c76-39b1-8895-d25103eea000.roa
File:                     97adb38b-8c76-39b1-8895-d25103eea000.roa (raw, json)
Hash identifier:          0VAXDEuei6yI1zAGjnhD7ampgSBFJ0ZXn/gkb4PHH5g=
Subject key identifier:   95:F2:F6:1F:9D:CA:AF:58:EC:92:F1:EE:DA:FE:96:5B:F9:16:07:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8F6EE5D4761589464CB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97adb38b-8c76-39b1-8895-d25103eea000.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.71.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:f6:ee:5d:47:61:58:94:64:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c1c23e9a-1bbb-4d1d-b96d-d81a75bfa4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:b7:2b:80:22:35:0d:5d:dd:a5:51:d2:47:
                    7c:4c:b6:01:46:67:9e:82:a5:c7:20:cc:14:51:d4:
                    2a:05:22:4b:6b:1c:77:e6:69:61:58:7e:d3:eb:26:
                    50:9d:86:8a:4b:46:1c:6e:30:ba:d9:5d:6a:0e:4f:
                    d5:1d:00:2b:9f:6e:19:c9:32:f5:a3:17:13:94:31:
                    22:c0:f3:83:91:d6:40:94:93:eb:ca:31:02:e8:78:
                    f2:7a:62:75:0c:81:c8:c8:51:af:d7:22:7e:32:e0:
                    c1:fe:77:a6:c1:fe:04:71:a0:7a:ad:32:0f:1f:3f:
                    5f:80:c6:a7:d2:f6:d1:fa:86:70:6d:ec:21:71:ca:
                    38:a0:fb:c1:42:b9:e4:a8:34:7d:9e:28:ed:b3:ac:
                    ee:13:3a:30:90:d7:8c:e6:f7:d1:15:48:da:c9:a6:
                    1a:0c:3b:d9:1e:e0:8b:91:a3:6b:c8:aa:5e:76:df:
                    77:97:c9:7f:4d:8c:67:04:6c:68:74:66:6a:34:4d:
                    54:f6:d9:d8:f1:cf:f0:ed:b5:4d:2a:be:43:f9:ad:
                    ca:ef:46:f1:bb:a2:0c:1d:75:9d:b5:d2:d8:7d:fe:
                    e7:3b:65:7c:7e:f0:5a:7c:a7:d2:41:39:ec:b4:05:
                    13:65:cf:1d:14:14:01:a3:05:4c:e7:19:c1:ee:85:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F2:F6:1F:9D:CA:AF:58:EC:92:F1:EE:DA:FE:96:5B:F9:16:07:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97adb38b-8c76-39b1-8895-d25103eea000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a7:6b:2b:3e:e9:6c:15:d8:f9:86:52:97:86:fd:50:a0:85:
         9c:16:ad:e8:7f:71:bb:35:67:cc:bd:d5:21:3c:27:d2:b2:4b:
         06:26:eb:9c:4f:62:6a:5e:f0:33:b3:92:97:57:97:e2:86:0e:
         21:0c:45:b9:67:67:3d:17:43:74:24:50:55:27:4e:85:a4:09:
         75:9b:8e:80:73:5c:ec:5b:73:a5:d7:43:13:c8:6b:a4:d7:f2:
         0e:a2:a5:d0:07:c4:ba:4d:87:65:3f:a1:a6:0d:a6:c9:e3:f4:
         39:c9:c5:ca:ce:55:0b:02:72:cb:a4:f9:32:58:90:d2:75:79:
         9d:17:ea:30:3d:21:43:37:9b:08:f6:28:7a:08:d4:df:05:c4:
         1d:84:a1:ab:56:98:11:3e:df:2c:6b:65:51:57:f0:59:a6:5e:
         7a:82:f2:78:ca:07:23:a0:25:a7:b6:8e:89:27:41:72:73:33:
         59:9f:a3:2d:85:9e:50:e1:48:ba:b8:78:72:50:95:32:bd:db:
         a4:95:44:fa:04:75:e7:90:ac:8a:73:58:91:3a:b2:7c:fd:6a:
         03:b6:cd:e6:26:c5:d0:82:5c:d8:84:be:18:9d:43:f8:d8:37:
         ae:75:e5:7f:20:c3:ce:f5:e3:a5:d5:38:bf:de:91:22:e8:7f:
         9c:ef:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:08:58 2026 by rpki-client