Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2799fb4-e9cc-3a4c-ab5c-3b4737611c82.roa
File:                     a2799fb4-e9cc-3a4c-ab5c-3b4737611c82.roa (raw, json)
Hash identifier:          2kiKJg7vDrKz3gFzbkBE/EGiAIRrAc3p8cSMFq25pdk=
Subject key identifier:   F5:20:D5:18:FF:24:45:5D:9B:02:3D:AC:1B:2A:2A:9F:55:4D:7E:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF63D32374CF465F3CDB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2799fb4-e9cc-3a4c-ab5c-3b4737611c82.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.110.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:3d:32:37:4c:f4:65:f3:cd:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=05e393da-4520-4aa6-9f8e-b4b4b6850422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:46:f3:a9:ac:99:2d:3c:d7:28:4a:a9:65:
                    fa:0d:54:54:79:56:59:e7:05:df:6a:ab:cc:d4:37:
                    50:5b:f7:4a:2e:f4:69:75:d4:86:9f:48:51:3e:5c:
                    ec:dc:47:48:f7:a5:5d:e9:f8:30:de:28:46:ed:cc:
                    52:d3:ff:72:93:e4:38:48:64:91:28:7f:0f:4a:fb:
                    f5:18:4d:80:e8:40:ae:65:37:b8:9a:69:df:99:7e:
                    09:0a:fe:10:16:62:99:52:bd:d4:f3:95:d0:e0:e6:
                    1b:dd:d6:02:a2:94:8b:cc:63:6f:05:13:85:ae:6f:
                    09:cf:7d:37:9f:92:44:3d:3f:44:fa:71:54:f3:9b:
                    ba:6c:8d:d8:6d:25:57:42:dc:dc:71:da:be:46:5d:
                    e2:97:2f:b0:f9:b2:01:86:70:38:9e:b9:7f:9e:da:
                    d1:5c:5f:b0:e1:e5:57:9d:5a:79:f0:7f:63:50:3b:
                    ab:6d:7f:27:9a:2f:a8:65:f5:df:88:7c:34:19:3e:
                    01:a2:2b:6a:c0:67:4b:93:9d:b3:3e:14:15:2b:07:
                    4c:bc:a2:e3:cb:11:1f:68:5b:9b:fb:a4:98:2d:9d:
                    ee:67:fe:99:15:c8:25:3a:cf:f8:ec:86:34:30:bf:
                    a2:b6:28:23:dd:a4:2d:ce:e5:ca:0a:37:15:ee:8a:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:D5:18:FF:24:45:5D:9B:02:3D:AC:1B:2A:2A:9F:55:4D:7E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2799fb4-e9cc-3a4c-ab5c-3b4737611c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.110.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:2a:1e:cb:b2:9b:0b:75:63:62:4d:52:19:73:c9:5d:81:
         05:a3:f4:c1:b6:d4:c9:54:84:a0:7f:61:83:37:fa:3a:dc:dd:
         60:3f:ca:b7:9a:bd:ea:7f:a8:bb:f8:cc:1e:cd:ed:bd:40:0b:
         46:dd:0c:96:98:0d:c1:4e:dd:da:00:71:15:3c:28:05:c0:89:
         dc:19:76:fe:ef:b0:7a:63:3c:61:af:d9:c9:e4:f8:c3:b7:67:
         71:71:31:58:90:4f:a1:7f:b5:6b:e1:c4:70:07:e4:c1:9a:04:
         b5:92:6c:d4:d8:73:46:f3:6c:fd:65:c0:8c:42:46:bb:83:44:
         e2:31:b2:16:5a:a8:fd:5f:16:44:60:5e:32:5f:cd:8f:d5:bb:
         33:5d:79:e4:fa:aa:f5:d3:06:ab:7d:03:f9:1c:63:1a:ff:ac:
         2f:26:e9:d4:33:b8:f2:44:cc:02:65:9d:b3:72:6e:2d:63:7d:
         b6:3a:8a:34:ba:ed:90:5a:09:f2:8f:29:ec:1f:d6:cc:d8:24:
         e4:ae:af:9a:f4:2a:a6:99:bb:22:78:31:40:59:72:93:13:98:
         8b:f5:90:31:77:6e:ce:8f:11:85:51:95:44:3d:e4:f6:07:3c:
         9b:d7:55:d0:76:9a:9a:58:df:07:34:30:07:9a:45:69:d7:77:
         74:31:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:38:56 2026 by rpki-client