Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0844252-57ed-3770-8378-f5cb134cd90b.roa
File:                     a0844252-57ed-3770-8378-f5cb134cd90b.roa (raw, json)
Hash identifier:          djW2xb36ojNc8UYQJhNfOddxuFFE2S8GwnR21yBF9Hs=
Subject key identifier:   4E:73:95:77:41:41:A0:FE:33:B3:DE:F9:32:45:29:93:55:0B:00:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D3FA7D307368E919C9188
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0844252-57ed-3770-8378-f5cb134cd90b.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        73.15.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:3f:a7:d3:07:36:8e:91:9c:91:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=fb8c6d4f-7ec5-4c5e-be4a-e1abe69639c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:9e:66:03:02:e5:38:01:e9:9c:4c:57:a3:
                    eb:f9:f9:92:ec:07:a3:5e:88:b7:cd:cf:1b:9a:c8:
                    c3:78:bd:82:0e:b4:e6:2e:65:36:a4:a1:2f:8e:3a:
                    89:ad:31:1f:cd:74:c9:75:f0:6a:df:52:a0:c1:f0:
                    73:3f:51:05:69:25:e9:0b:a5:cf:6b:ee:a0:e8:b1:
                    49:80:dd:9a:f2:67:41:db:7d:d9:2a:2c:c5:13:a2:
                    0c:23:df:d0:2b:d1:0d:2d:51:e9:7f:c1:dd:c4:ff:
                    58:c2:c6:30:fb:6e:0e:ce:fb:c3:7f:0a:36:80:d2:
                    2b:52:17:4d:be:eb:2b:a8:60:83:90:65:24:5a:78:
                    f4:1d:e9:1f:a9:b8:af:c0:47:d0:f0:eb:28:2e:9a:
                    82:b4:9b:39:50:8e:30:09:b3:d6:42:bc:f3:4e:eb:
                    42:f9:3a:3e:a8:ee:b1:cd:fa:ee:31:44:9c:75:ff:
                    c2:5b:7f:73:f2:a8:ff:db:7b:a2:37:5d:d0:1d:63:
                    8a:9d:23:62:9e:41:a5:43:dc:ba:ce:8c:f9:f5:bc:
                    2c:7e:9d:52:b5:1c:f3:c9:a7:f7:bb:8a:8d:42:49:
                    f7:bc:70:ec:8a:da:f1:f3:cc:22:05:00:71:bf:e7:
                    5f:02:48:21:c2:2e:f6:6a:a2:e9:ec:fa:09:05:ba:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:73:95:77:41:41:A0:FE:33:B3:DE:F9:32:45:29:93:55:0B:00:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0844252-57ed-3770-8378-f5cb134cd90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:28:fd:9b:38:01:d5:b5:ee:71:08:18:3a:45:3c:3c:d8:3d:
         b7:fa:e5:f1:ed:87:e3:ee:06:d0:97:eb:27:e8:66:0e:6e:49:
         f6:25:cf:74:18:13:b5:4e:58:df:1e:21:9e:b1:5f:08:87:c8:
         ea:16:a8:67:ae:cd:f3:0e:95:6a:9c:fc:d4:9d:be:47:05:06:
         1d:e0:78:7e:07:40:9e:26:77:1f:1b:3f:65:2f:cf:c3:41:0f:
         9b:dd:64:e3:a0:77:3b:3e:cf:17:0a:5e:ce:db:a0:3e:e6:04:
         b5:d9:df:33:0b:71:9f:2c:fe:b4:0f:d7:df:57:44:ae:a2:c2:
         3d:4d:c5:e3:03:e4:36:4b:40:d4:3f:46:36:06:a2:54:1d:e9:
         1c:fa:9c:a3:30:60:50:6c:78:da:5f:a6:56:1f:b0:2b:ef:33:
         d1:7b:2a:1c:73:16:a4:b9:ba:51:1a:d0:29:7a:b4:2d:a9:75:
         fd:e7:b7:e1:9e:33:cc:6a:0b:8c:9d:98:6a:56:15:3f:e4:29:
         a2:28:fc:c0:60:69:93:55:ee:86:6d:de:88:07:44:a1:51:6b:
         b9:94:59:28:96:5c:64:49:75:75:c4:e5:e1:e7:01:b4:da:a1:
         a0:b3:9c:75:c8:62:4b:57:1b:d2:4b:9c:67:66:f1:39:b5:31:
         56:4a:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:43:00 2026 by rpki-client