Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef2ddbb-dabe-3f50-92c9-e11b81361875.roa
File:                     cef2ddbb-dabe-3f50-92c9-e11b81361875.roa (raw, json)
Hash identifier:          hk7c8VPwHlrnBZ+70n0/8314IZ32ZZgdSVP1E3ZtCC4=
Subject key identifier:   84:BE:88:4A:F9:36:E1:B2:87:12:BC:AF:CC:32:78:0C:3F:CC:C5:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF72D67F5DD0041B24099B8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef2ddbb-dabe-3f50-92c9-e11b81361875.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.199.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:2d:67:f5:dd:00:41:b2:40:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=28838bdc-d038-4739-b969-c8184a68b7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:23:bf:bf:a0:e6:f7:2f:5a:36:91:cb:04:
                    3e:95:86:3f:59:5d:a4:de:e7:27:e9:ed:c7:8d:c3:
                    82:68:5e:0c:e2:8c:e2:2e:f6:73:49:7e:33:79:f0:
                    a9:21:0e:59:c6:f2:69:ed:c7:e4:3b:4a:c9:82:24:
                    b8:3e:35:1e:1b:92:ee:23:07:cc:c2:25:cd:8b:07:
                    c8:42:29:fe:30:fe:c7:41:77:17:aa:b3:77:d7:11:
                    14:2f:1e:36:59:b5:9d:72:83:e5:71:dd:92:98:a2:
                    26:c1:c2:19:27:aa:32:bb:78:d7:9a:fc:07:2f:fd:
                    80:02:35:92:f1:7c:67:04:f0:40:7e:8b:94:4a:4e:
                    e4:01:c9:d9:2e:63:55:cc:af:95:e3:ae:a1:7f:de:
                    5c:ed:4a:41:ee:34:bd:54:5b:1d:49:dd:d5:6f:74:
                    f2:bd:ea:cd:57:f8:f8:79:22:2c:10:f0:ea:e7:e3:
                    d2:c3:9b:b0:d8:2c:4f:8a:84:ca:4a:a7:c7:61:f9:
                    5d:67:74:6c:29:45:48:84:0e:50:54:c9:70:d0:6b:
                    79:9a:05:4d:d7:37:87:1b:3f:a1:7b:bd:f2:ef:8f:
                    35:ed:67:fc:23:83:02:70:e1:29:71:88:c9:ff:23:
                    a7:46:f3:f9:fd:69:c7:dd:39:ff:00:64:e9:bd:12:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:88:4A:F9:36:E1:B2:87:12:BC:AF:CC:32:78:0C:3F:CC:C5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef2ddbb-dabe-3f50-92c9-e11b81361875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7b:51:e1:cd:87:e4:02:d2:5a:76:ef:48:3d:39:0f:d8:00:
         1f:ae:0d:7b:29:1b:4f:84:60:0c:b3:16:6c:c4:2e:63:8d:a9:
         d4:f8:8f:c3:14:f4:81:9d:51:4d:02:45:96:32:50:22:40:3c:
         2c:c9:2e:2d:b1:bf:28:db:84:1b:e4:d4:d2:23:e0:c0:ea:51:
         3c:d6:61:91:9c:fd:71:ab:ed:cd:e3:a9:36:35:c5:17:4d:de:
         24:f9:ce:05:b6:99:3f:90:22:e8:6b:b1:f2:b6:d0:cc:bb:a4:
         63:da:be:b2:88:47:c1:8b:8b:ce:27:c2:bf:f3:d8:47:17:73:
         3f:04:1b:0b:9c:57:c5:72:01:a0:90:d2:f7:20:27:39:f4:4d:
         1e:e9:16:79:58:c1:32:23:fc:4e:ef:9f:b2:df:f7:e2:0f:95:
         12:6f:b5:86:51:02:5b:5d:7a:c1:c8:7c:95:aa:a4:34:6d:15:
         d4:18:f2:97:f1:61:37:2e:26:e7:8d:5a:4b:4a:9c:a6:c5:e3:
         b2:e9:7b:95:66:b8:fe:ac:87:85:93:6a:0f:ef:c9:c3:43:81:
         59:80:b3:20:db:9f:59:78:2b:66:7d:3e:e0:f6:19:75:45:5f:
         d6:f1:9a:91:6d:5d:5c:e6:dd:43:6c:7f:20:6d:e2:c3:01:c1:
         48:a9:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:17:11 2026 by rpki-client