Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a662dc93-db71-3267-86c7-764d33e29688.roa
File:                     a662dc93-db71-3267-86c7-764d33e29688.roa (raw, json)
Hash identifier:          PdKDJ2WZrWUotqI8Y1lHezhw7hkM/hUF2Hzf6Lkfz0c=
Subject key identifier:   93:B0:A2:59:29:B9:46:C1:92:04:F8:62:04:EC:17:2A:C7:11:32:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7AA49496DFC87DEB077F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a662dc93-db71-3267-86c7-764d33e29688.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.146.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:aa:49:49:6d:fc:87:de:b0:77:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=0dc877f5-c078-4985-ad06-fb746015d691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:d6:30:90:00:e2:e2:94:32:1e:d1:76:8a:
                    c9:e2:98:fc:3e:95:15:19:a9:e6:a6:a9:fe:6c:43:
                    b2:c0:e5:7c:4a:f0:ed:25:09:af:39:8c:92:bf:cf:
                    8d:33:0f:ed:85:d6:b8:e0:c8:0f:5f:94:02:52:cc:
                    35:bf:b2:48:7a:3e:74:16:f1:5a:d4:6a:92:83:89:
                    e2:96:6a:8a:db:a4:ad:ca:c0:f1:68:a1:6f:24:e2:
                    a5:9b:77:43:ad:21:5d:ac:d8:45:03:e4:39:fa:52:
                    91:63:3d:35:81:0d:85:20:76:eb:4e:20:e4:49:59:
                    05:0d:d8:4e:ec:6f:42:73:b6:3f:85:20:58:8d:cd:
                    b3:f7:c9:d5:68:72:0b:91:aa:ff:3b:14:1a:01:a7:
                    4f:d2:fc:0b:9a:d2:8d:a4:2d:fc:3e:4d:79:bd:fb:
                    26:a0:5b:a1:88:8b:00:88:d8:0b:d7:c0:fe:3d:06:
                    72:f8:16:bb:68:2b:39:d7:47:3a:5d:8b:97:9e:e9:
                    a5:9e:af:03:c5:04:1b:57:3d:e3:b8:42:58:a3:d6:
                    36:27:c7:42:05:5b:25:0d:7e:4b:e8:70:3c:e7:f3:
                    36:cf:e9:26:41:14:9f:c9:31:13:0f:cd:45:ae:a8:
                    6a:49:f5:03:bb:ee:6e:dd:5d:0d:56:cb:85:3a:10:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:A2:59:29:B9:46:C1:92:04:F8:62:04:EC:17:2A:C7:11:32:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a662dc93-db71-3267-86c7-764d33e29688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:5c:58:f4:09:fb:e2:1a:8e:df:a6:f1:19:5e:a4:a1:e2:
         3a:d7:4f:ff:33:d7:46:e3:f2:75:29:65:0c:95:15:27:04:88:
         8e:e1:06:55:8c:71:63:c1:22:4e:37:b7:c4:87:b9:b3:f5:eb:
         14:b9:eb:1c:d5:af:cd:2f:0a:c2:70:47:d8:45:5d:b3:e7:ee:
         cf:e3:c2:c5:e4:9d:6a:28:2b:33:1d:e4:6f:59:18:b2:d1:c1:
         c7:46:aa:7e:5d:6c:92:85:6d:ab:80:5b:60:ad:0a:13:cc:c8:
         50:6a:e1:aa:73:5c:59:33:1b:0b:32:01:01:84:fd:0b:c9:a6:
         35:33:f6:d8:20:d0:a8:99:0f:dd:bd:fd:9d:c3:a8:ed:e0:29:
         82:e3:97:dd:a4:2c:af:29:f7:59:48:a9:78:43:42:88:b8:d8:
         bc:0d:7f:ea:43:cb:a8:c4:ff:d0:a4:8c:71:66:ab:83:6a:db:
         59:25:e1:b1:4b:a3:64:c8:17:86:fc:60:04:89:68:9f:b7:25:
         54:54:4c:de:b0:bc:51:55:c4:0f:d3:84:35:a8:c8:fa:49:19:
         70:62:75:92:df:2e:22:bb:57:4e:3c:1f:9f:52:c8:de:40:46:
         3e:b4:61:a6:b3:6e:c9:9f:f8:8d:c2:92:5a:f0:6c:29:1c:13:
         42:66:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:52:49 2026 by rpki-client