Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc88744-98fa-3d4b-8fdb-0a9823ab87be.roa
File:                     efc88744-98fa-3d4b-8fdb-0a9823ab87be.roa (raw, json)
Hash identifier:          FTBuWP7npclHK3xN1HbX0SNrRkLjfYXNbEpDzVIHC5g=
Subject key identifier:   FD:17:5F:A1:AC:3A:06:34:5E:81:DB:1C:50:C6:6E:09:39:1B:66:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF657333799C697CEA9F500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc88744-98fa-3d4b-8fdb-0a9823ab87be.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.36.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:57:33:37:99:c6:97:ce:a9:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8637f314-e45f-4a47-81d5-a89b8f7d8829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:ff:65:aa:3e:1a:49:16:f8:b1:1a:b9:f0:
                    21:80:e2:68:38:1f:38:03:6d:14:99:5e:ad:84:3d:
                    c4:c9:fc:bf:15:be:7d:d7:84:c9:a3:ee:87:0e:2e:
                    af:34:3a:f2:da:80:a2:da:fe:bd:5b:43:65:fc:a8:
                    55:2b:41:da:38:c5:53:85:ad:be:47:3d:dd:e0:a7:
                    45:60:fd:31:1a:04:15:4d:15:0f:9c:40:e1:f5:e1:
                    9f:f7:0a:5f:9f:0e:93:c9:a1:1e:ce:18:fe:ee:08:
                    3a:f8:44:73:9b:0b:4c:7b:ee:6f:0e:01:ba:4a:0c:
                    03:ed:cc:78:9a:30:38:57:c5:6f:38:01:f4:c4:5d:
                    b1:f9:91:96:a3:83:48:e8:b5:a6:42:b1:c1:27:28:
                    64:64:87:f2:0a:a1:6a:30:1a:08:85:62:14:cf:b1:
                    64:e0:d9:d5:9d:5b:5f:06:45:30:92:76:7d:35:c8:
                    7c:b0:8d:0c:6d:e0:5d:57:96:b8:31:7c:47:79:dd:
                    cb:e5:74:78:d8:53:4c:79:bb:b6:5f:2d:88:15:81:
                    a7:87:a0:6d:da:25:b9:84:f2:41:fb:0d:f9:2d:92:
                    91:fb:ae:b5:5a:63:f8:85:dd:25:fa:0b:db:1d:42:
                    72:f9:7a:cd:52:4e:d3:31:40:d3:ac:1d:37:87:c5:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:5F:A1:AC:3A:06:34:5E:81:DB:1C:50:C6:6E:09:39:1B:66:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc88744-98fa-3d4b-8fdb-0a9823ab87be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:3a:8a:bc:16:c2:03:7c:5a:6f:59:73:cd:af:f3:1c:37:
         17:ed:cb:5d:f4:da:7e:98:62:aa:11:5a:fc:0d:44:4f:22:b5:
         9e:ab:55:94:12:84:b7:61:b4:dd:11:68:88:90:51:f8:c5:ba:
         b2:56:5b:16:d6:8c:98:b1:37:ca:59:5f:f7:a6:8f:36:1a:a8:
         dd:e2:8e:59:ab:9a:e3:df:fb:e1:f6:49:71:8c:65:d2:d2:ec:
         95:70:61:2f:36:88:10:4d:36:99:62:89:09:07:37:6a:96:7f:
         5e:7b:08:58:0e:e3:d1:55:cb:ab:03:53:99:72:e9:5b:a9:c9:
         2d:e0:78:9d:ba:ad:4e:a0:d0:8f:56:fe:9d:e3:da:30:29:6c:
         23:0c:b3:88:48:6d:10:58:0c:8d:eb:80:2b:03:2d:32:bb:68:
         7d:37:06:ec:c3:ac:8c:cd:8b:5d:08:a5:8f:7a:0d:db:2f:68:
         73:03:16:c2:ba:ec:2a:36:56:37:62:c8:83:47:b3:41:92:5e:
         3d:92:03:a9:17:6d:79:ba:83:95:62:94:a8:e8:02:05:69:9a:
         86:20:d0:a6:2d:a6:f5:43:55:d3:f8:fa:bc:eb:74:05:e0:3e:
         21:03:9b:66:98:33:58:70:fa:e9:ab:0e:19:05:97:35:12:55:
         05:36:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:41:10 2026 by rpki-client