Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa
File:                     99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa (raw, json)
Hash identifier:          nO3e9A8u13yUyEasRjfvKXR1rZZwI6aKeCNTHq1N990=
Subject key identifier:   38:18:47:D7:AF:CA:0A:F5:F9:5B:18:8F:23:2F:F2:A4:DB:C4:15:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7C30B8A696290470231C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.247.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:c3:0b:8a:69:62:90:47:02:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=901d8ced-ada0-47af-860e-6d74fa9a7a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:ae:82:8a:a0:3d:81:09:b4:1c:c6:93:29:
                    e9:35:ba:85:e9:db:c0:e8:ee:b8:92:57:ed:46:40:
                    d8:e4:0b:c7:fd:ad:f0:76:84:95:48:a3:7c:dd:43:
                    7d:84:33:e8:c7:ac:4c:13:9e:c7:05:0d:37:b2:d0:
                    bb:8a:7f:02:e0:cb:64:c1:b7:e4:03:17:da:74:7b:
                    40:31:93:40:64:10:e5:32:43:20:e4:8a:25:49:f1:
                    00:ad:2a:15:aa:b1:8c:5d:6d:72:5f:3f:ab:31:dd:
                    19:9a:84:7b:a5:16:a1:ad:d3:33:69:9c:f4:54:b8:
                    4d:7c:de:fc:02:5d:12:d7:55:12:6d:3c:9b:ea:3f:
                    a9:77:74:91:58:67:25:ea:43:b4:c9:d5:9a:48:9e:
                    7b:f3:01:66:3a:89:8f:48:84:0e:6d:9f:f0:79:11:
                    51:2b:0c:ca:b8:78:f7:b9:37:4c:11:95:25:39:07:
                    6a:32:cf:37:0c:05:b6:06:03:75:cd:6a:a2:35:10:
                    4e:d0:0a:d4:c2:43:92:41:e8:61:42:8a:d0:03:85:
                    80:d2:73:c9:90:a3:29:eb:32:49:11:2d:89:48:55:
                    53:10:46:a7:03:cb:68:61:c6:48:24:be:84:99:49:
                    3d:9b:2f:40:b4:0f:27:34:9c:20:bc:ec:3d:04:4f:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:18:47:D7:AF:CA:0A:F5:F9:5B:18:8F:23:2F:F2:A4:DB:C4:15:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e385e9-eb9f-382f-a1c9-9acbaa4695b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:67:2c:f4:26:a5:18:d3:4a:d1:f5:b9:3e:8d:e9:f4:48:
         d6:54:32:49:80:76:12:4c:21:7e:fb:41:cf:71:7a:d6:b7:cd:
         c3:d8:fe:d3:08:fe:3f:c4:95:d6:1d:9b:1c:e7:b6:f2:e8:62:
         0c:27:6e:88:1a:90:77:5f:da:a7:69:d1:46:5f:27:bb:aa:2a:
         16:3c:8c:89:9d:1f:d7:52:a1:f6:2b:eb:35:a5:1c:c2:b1:43:
         d6:4a:93:6a:21:3c:3c:97:00:cb:31:0a:97:ed:87:21:16:41:
         36:76:fa:68:47:a4:3c:6d:4c:27:27:a6:a5:38:86:27:67:6b:
         3c:9f:3c:1f:9f:d3:1a:94:84:7f:70:6d:c9:b7:f8:f5:b3:4b:
         fe:7a:4c:4a:98:c7:14:f1:9e:67:7f:d0:6f:49:d9:9b:75:a3:
         c4:a0:4b:2e:50:2b:67:98:da:65:67:c0:b3:ab:72:09:5c:57:
         3c:35:4c:ba:c8:50:19:2d:a2:eb:6d:97:26:c3:d6:1a:52:c8:
         97:af:ba:45:eb:13:82:22:cb:eb:13:81:4d:e4:44:7c:bd:22:
         ee:cd:f0:89:23:8d:6f:fa:e3:18:ed:b5:9b:5e:99:a8:5b:7f:
         28:30:5d:da:1e:3e:b9:5b:e7:d2:d3:92:96:7f:7f:ed:fd:24:
         9f:b3:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:34:17 2026 by rpki-client