Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28ecfe6-1444-3632-a5ed-e7d71460395c.roa
File:                     a28ecfe6-1444-3632-a5ed-e7d71460395c.roa (raw, json)
Hash identifier:          sEkgdddm/mWGRHCVvHntuSc8WHAS9C8946Sq92ZSwaw=
Subject key identifier:   AE:1A:4A:99:30:D3:26:E9:A3:18:E6:63:42:57:9E:C2:94:16:1D:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7B7C1172FE920A3441900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28ecfe6-1444-3632-a5ed-e7d71460395c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.210.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:b7:c1:17:2f:e9:20:a3:44:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f5eba652-aa84-42f8-a6dd-c7dd2114f655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:f5:12:4c:e5:32:9c:3b:95:11:3a:22:01:
                    aa:1e:c2:4c:17:f9:66:81:0c:9d:0e:74:3a:d7:3b:
                    01:ae:93:dd:1a:2f:35:02:a4:03:b0:44:c8:0e:52:
                    0c:cf:a4:f1:eb:35:2d:0d:03:87:34:41:cc:07:58:
                    f4:26:de:b1:a6:8c:96:77:c4:a1:68:f5:1a:cb:49:
                    5e:5b:4e:9a:c0:9e:23:c9:ec:6c:60:ff:14:67:dd:
                    b7:e6:9d:51:93:1f:30:db:d7:32:63:74:9b:5b:b2:
                    50:70:fa:53:61:ab:d2:28:f1:6b:63:b5:78:d9:ff:
                    9f:bc:52:74:2c:ee:08:cf:c2:21:12:e4:07:8e:b8:
                    b2:34:30:cb:2e:52:fe:1b:6d:f9:a0:ee:27:39:79:
                    f9:ac:3a:f4:d9:81:41:8c:b1:45:2a:f6:10:a0:7c:
                    08:1f:66:73:4a:0c:85:15:9e:a6:a3:8c:30:a0:23:
                    58:fe:b2:25:e0:13:5f:d5:f6:50:bc:18:95:1b:17:
                    d0:8c:1d:e5:f5:1a:20:71:c0:72:9f:84:32:17:ec:
                    42:f0:21:75:00:47:7f:40:73:87:b1:15:98:c7:52:
                    21:ca:19:aa:85:f9:0a:52:b8:d8:30:58:e9:ab:fd:
                    91:44:a2:e7:62:0d:b3:2d:b6:13:60:df:3e:0c:ca:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:4A:99:30:D3:26:E9:A3:18:E6:63:42:57:9E:C2:94:16:1D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28ecfe6-1444-3632-a5ed-e7d71460395c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:d3:85:ed:b5:cd:b8:4e:8f:16:e9:7f:c2:47:50:e8:01:
         2a:bf:f1:c5:e8:72:ed:aa:a0:63:9d:93:be:16:13:ff:02:0f:
         c2:0a:99:69:b3:6d:6d:e8:55:1d:0b:66:84:3c:f4:06:25:3e:
         d3:a0:c4:dc:6e:90:27:d0:94:05:12:8d:ad:e4:79:b1:e5:7b:
         79:b3:4e:78:f8:b2:be:f1:4f:ff:7c:32:15:a7:f2:c8:4f:c2:
         d6:90:33:7b:b0:5c:d5:76:7c:10:34:ae:72:35:05:84:4c:81:
         74:12:e3:70:f9:83:7a:a3:57:f3:16:6a:1c:d3:71:b3:f5:e4:
         2c:5e:7c:39:53:5e:54:e4:a3:9b:70:ac:3d:b9:8f:33:c2:7d:
         58:97:d1:9f:6a:6f:39:b2:1d:58:68:43:23:0f:ba:5c:6c:44:
         62:02:06:c3:e2:10:bb:05:0d:43:7d:5c:66:53:ff:9b:b4:ec:
         2d:80:dc:08:8e:c8:de:7e:bb:4e:cc:97:02:c8:df:a7:73:dc:
         cf:54:1a:db:35:28:a7:72:50:ad:58:18:6d:d7:e2:df:c0:12:
         66:a0:08:9a:16:a1:c4:cd:5e:76:40:87:f9:0d:1f:91:a4:01:
         51:e1:9f:df:a7:07:8f:fb:91:8b:cc:06:22:d5:9f:71:16:81:
         bd:97:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:16:48 2026 by rpki-client