Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9d240c-9843-3597-8942-d4105f1637ae.roa
File:                     ec9d240c-9843-3597-8942-d4105f1637ae.roa (raw, json)
Hash identifier:          lqA9cazM6jg9drMzOIIt8m/lqMzF8iNt0kFZgniBeC4=
Subject key identifier:   E5:58:36:82:D1:2D:88:C8:07:54:43:EB:FE:20:52:10:73:35:3B:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7B7046D00F58C51A90AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9d240c-9843-3597-8942-d4105f1637ae.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.210.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:b7:04:6d:00:f5:8c:51:a9:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=100c7502-bab1-4da5-8a17-6596b518c95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:d5:e9:f2:59:ab:07:6f:b2:11:8a:45:ce:
                    e7:9d:3a:32:de:64:51:99:74:e5:ca:a9:88:12:76:
                    80:c6:c2:bc:50:72:de:e0:3c:11:85:f9:f6:d4:39:
                    53:77:e6:ce:71:df:14:89:f1:47:29:5e:49:e9:19:
                    0d:17:be:5e:37:f4:f8:e4:b8:a1:9f:64:2e:b4:9e:
                    8d:5b:d1:f7:47:bc:4b:8d:23:4e:b1:72:85:2a:b8:
                    e7:87:fb:f8:c0:8b:1b:be:36:a9:bc:1b:d3:b4:3d:
                    5e:7a:d3:15:ef:ae:29:18:98:8a:d0:8a:3a:4c:9c:
                    14:d4:17:7b:4f:08:aa:a0:6c:be:63:dc:b3:59:0b:
                    e5:d5:43:18:a8:fe:cf:b2:71:4e:bc:ad:50:2d:d5:
                    26:03:0c:6e:e2:27:89:fa:46:37:8f:fd:2e:3a:23:
                    03:c4:3b:78:5f:8a:b7:a7:1f:d5:ee:ba:0d:7e:20:
                    ce:ec:cc:d4:91:2c:a6:b6:4f:24:4d:7c:f4:f5:ca:
                    4c:28:18:c3:f6:65:0a:b7:c7:29:a2:2d:2a:21:e9:
                    99:26:41:4a:3c:c8:37:54:89:d3:55:de:12:be:8b:
                    1d:44:bc:ca:70:19:62:1e:dd:5c:e4:44:ac:cb:5e:
                    8c:96:2b:97:cb:97:67:a0:45:b1:86:fb:9a:fe:2b:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:58:36:82:D1:2D:88:C8:07:54:43:EB:FE:20:52:10:73:35:3B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec9d240c-9843-3597-8942-d4105f1637ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c7:11:52:0e:07:3b:b9:0f:68:85:e5:55:9e:3c:f9:c2:7c:
         27:f7:7c:ac:d3:81:13:75:51:0b:a5:2e:e2:90:ae:1e:dc:dd:
         22:9f:ad:17:08:97:d4:33:7c:bf:9a:eb:9f:6e:ba:5f:e7:62:
         bf:bc:be:56:d7:01:ec:53:be:24:3a:90:3f:9f:75:95:3c:f0:
         b8:95:62:d2:ca:ab:d3:26:53:d0:15:8f:45:e3:75:9b:04:43:
         6b:2c:20:70:a8:89:4a:75:70:25:24:98:34:c0:e3:b9:c7:9e:
         35:01:0a:a2:09:5b:0c:0e:ff:55:6f:73:fa:5c:c1:79:06:c1:
         a5:19:c1:b2:f2:08:ee:b5:28:d3:4f:c3:06:ed:5f:29:12:1d:
         c2:92:5e:f3:9e:d8:e9:62:bb:75:88:a0:ac:f7:3b:b3:34:5a:
         b5:d0:c7:9b:b6:6e:01:9b:50:98:7d:ee:4e:2a:d6:77:7e:cd:
         1e:19:4f:41:c3:0b:da:62:f7:35:94:d1:d1:49:44:b2:5a:17:
         41:9b:3b:7c:84:72:16:5d:86:c9:f1:ab:d6:fa:97:75:ec:5f:
         88:cf:1c:e2:0d:eb:a8:7b:b0:4a:03:46:f8:b9:19:5b:96:b6:
         63:42:c5:eb:a7:92:c1:27:44:94:16:ff:ba:83:c5:e5:74:82:
         34:3d:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:33:03 2026 by rpki-client