Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1ebac86-e8e8-30f7-950d-dd5ae12b77a2.roa
File:                     f1ebac86-e8e8-30f7-950d-dd5ae12b77a2.roa (raw, json)
Hash identifier:          Yobdb1L3kq8VzYP+W+jYV0Nkc3c5m3Ad3cscJ1txAXk=
Subject key identifier:   25:DC:9E:29:23:EB:6E:E5:13:D9:4C:B8:10:49:DB:4E:40:BD:0D:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D2336542249499CDEFA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1ebac86-e8e8-30f7-950d-dd5ae12b77a2.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        73.71.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:23:36:54:22:49:49:9c:de:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=bdd2c638-e023-4deb-8694-fbc17356171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:2f:90:2c:32:4c:93:11:05:fe:03:e1:c1:
                    37:a3:ea:ca:d0:9b:51:9f:eb:46:21:27:8d:ed:fe:
                    73:66:33:38:10:3e:ea:2d:8f:da:1d:55:82:48:a7:
                    7f:07:1d:bf:26:e4:5f:ef:6b:78:59:19:05:19:6f:
                    82:70:b4:fe:2f:23:9b:b0:86:e5:c6:39:95:5b:6f:
                    89:c5:c8:2d:fa:1a:8a:ae:f5:60:16:da:f5:12:55:
                    f6:17:1e:62:ce:81:ed:7a:8a:ba:19:e1:2b:af:21:
                    65:83:08:45:29:51:a0:71:af:db:45:f7:14:a0:aa:
                    11:1e:43:ea:19:f2:38:18:12:1f:8d:80:3e:c2:64:
                    a8:3f:ca:9d:e0:91:c1:4c:5f:7a:02:92:83:3f:34:
                    31:9c:7f:8b:6f:f3:30:a1:58:08:46:d1:59:b6:34:
                    99:72:b8:12:03:04:6d:60:40:0c:f2:b8:92:fd:62:
                    b1:e6:09:d7:d5:25:49:87:0c:88:b1:9d:88:87:f8:
                    55:a8:db:fe:59:fd:55:9f:b7:8b:5e:cf:3a:a4:63:
                    10:7e:49:a6:a3:72:e8:ef:83:79:5d:91:4b:30:06:
                    6d:af:bf:d4:3c:0c:e4:ec:4c:83:f1:46:6f:90:c6:
                    08:56:f7:b7:c6:e3:09:f0:33:fd:72:5b:04:06:98:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:9E:29:23:EB:6E:E5:13:D9:4C:B8:10:49:DB:4E:40:BD:0D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1ebac86-e8e8-30f7-950d-dd5ae12b77a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:4e:7c:46:92:a7:12:31:b4:5d:3a:d1:d7:36:94:56:68:bc:
         39:f4:13:25:5e:ef:05:4f:d9:33:9d:d3:f9:5f:61:3c:19:e6:
         3b:2a:14:68:6b:6a:1e:6c:7b:6b:a7:0d:4e:31:8a:d2:0e:dd:
         3b:1e:3a:17:fa:10:11:11:2b:33:ec:d5:5e:48:1a:99:09:a4:
         b2:a6:05:e3:b1:71:18:ea:76:30:00:08:ca:05:b3:85:10:b7:
         72:e4:f7:4e:85:80:02:b9:6c:78:2f:52:cd:a5:75:03:c2:59:
         77:1e:82:3b:99:05:b1:2f:28:03:ed:d6:6b:69:22:88:68:be:
         78:17:c2:bf:c8:cc:5f:b9:43:83:af:f7:ae:8d:20:52:b7:b0:
         a7:97:dc:60:96:35:c1:fd:09:17:83:a1:25:49:7c:f6:86:2c:
         82:08:fb:6f:d0:b3:31:10:4c:50:02:9f:fd:3a:09:48:58:69:
         11:7c:f3:ce:01:18:28:e5:8e:e1:5a:59:4e:c5:6d:15:c4:87:
         76:9e:94:2c:c2:fd:8d:77:bb:27:3e:42:cf:89:36:97:81:21:
         07:a6:bc:60:58:ec:53:20:09:e2:58:f2:01:c3:f6:ee:25:76:
         d9:51:a8:c6:c2:73:c1:40:b2:9e:42:a6:5d:94:96:7d:49:bf:
         dd:fc:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:10:24 2026 by rpki-client