Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad2cd64-0649-321b-83fe-002d165898ef.roa
File:                     bad2cd64-0649-321b-83fe-002d165898ef.roa (raw, json)
Hash identifier:          e5JwlB16NYWRyu2OCtvpvPBOfTpKWTv8VH8BTQazm6g=
Subject key identifier:   7D:88:9A:A7:8E:BB:6C:2D:31:FF:81:E5:5B:9B:04:2E:5B:F0:38:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6C6775792C27420FC1368
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad2cd64-0649-321b-83fe-002d165898ef.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.223.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:c6:77:57:92:c2:74:20:fc:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c1bea97e-fab0-4ce9-af39-57b4ca65d33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8e:d8:b3:c3:e6:6b:45:b9:69:a1:f8:8b:17:
                    49:c0:f6:72:56:2a:83:56:ae:90:2c:57:21:f7:bf:
                    94:8a:3f:b8:55:1c:3b:69:0b:67:15:ad:36:00:78:
                    2a:21:f3:60:dd:ce:a0:70:4e:82:59:e0:58:37:74:
                    f0:76:cd:74:ba:23:69:3b:4b:eb:fa:fa:f5:91:28:
                    22:80:85:e2:47:cb:07:25:db:29:f2:15:d8:8a:7e:
                    d1:ff:f9:85:f4:01:d8:aa:5e:42:12:5a:fe:2f:ff:
                    48:f6:85:0d:f3:e5:db:37:a3:42:36:ba:70:db:db:
                    91:02:a6:0b:1d:52:eb:99:74:04:c3:15:67:ea:a1:
                    9a:a7:8b:e7:f6:01:a3:0b:8b:e4:42:9b:1a:98:0f:
                    0e:82:30:7d:9b:b6:5f:31:38:89:59:00:9b:55:23:
                    e5:77:9a:62:b8:30:76:f7:cc:aa:b2:45:13:08:97:
                    d2:a5:e4:83:69:2a:52:ba:46:d7:b3:6c:bf:33:1a:
                    8a:c7:ea:b8:3b:e1:b1:85:7c:0d:88:9d:b1:bb:9b:
                    cc:e9:11:e5:9c:83:43:f7:b8:17:ba:76:18:16:8c:
                    72:a1:2f:d9:fc:e3:cb:33:f5:5b:16:a3:d5:4d:3b:
                    d6:84:28:5f:06:4d:ee:94:0d:f9:2f:50:ad:61:9c:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:9A:A7:8E:BB:6C:2D:31:FF:81:E5:5B:9B:04:2E:5B:F0:38:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad2cd64-0649-321b-83fe-002d165898ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:03:bf:93:93:68:ae:37:08:d2:c6:3f:99:e2:b2:a8:1a:
         cd:30:16:71:8d:47:4b:d7:aa:48:ae:67:74:24:82:bc:02:56:
         f3:66:b9:a4:b0:f7:df:ca:3a:d9:d7:bb:4f:8d:a6:c0:7d:b7:
         77:d0:9d:e9:60:67:9b:d3:01:89:ed:bb:8c:99:a2:a0:86:93:
         71:cf:e4:50:fb:3a:a3:e4:14:a0:f4:3e:7e:7b:71:5a:68:69:
         be:79:11:03:57:e6:97:4d:fd:e8:e6:49:be:a4:1c:1f:48:ed:
         4f:4a:29:a2:7d:cf:de:91:89:7f:1a:71:7b:c0:d6:85:b1:81:
         79:48:7c:ef:df:9b:ef:cd:60:e0:83:99:b9:d1:48:ea:d7:12:
         b3:4e:d0:7f:28:bc:92:4e:a2:70:0c:04:6f:db:96:38:3d:bc:
         91:fd:0d:f0:62:52:36:5e:27:51:56:34:60:26:ef:d6:24:9b:
         94:fc:e4:76:4c:7f:69:2e:5f:70:c5:1b:92:e7:0c:a1:f4:1e:
         2d:00:37:70:5b:d8:f0:64:89:72:1e:ca:5b:e1:6d:c1:1d:d3:
         15:6e:6e:65:6d:08:4b:ca:72:b5:97:ee:04:49:87:4b:49:90:
         d4:50:2d:05:0d:c3:ad:c7:c2:e6:fe:77:60:de:52:62:3b:be:
         52:e7:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:27:57 2026 by rpki-client