Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa
File:                     f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa (raw, json)
Hash identifier:          mdXgGHXIZRzLplxKtcczI8x45l9r/00+Mm90/gCLHJc=
Subject key identifier:   9B:F6:23:F1:EA:B5:22:9F:43:58:EA:A5:2E:E8:DD:56:A6:8A:D3:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6C55673A82F3762258300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.223.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:c5:56:73:a8:2f:37:62:25:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=a8bc3ecb-dad2-4107-9bcb-781dcbe5de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:48:79:2b:be:05:a1:06:f2:2a:35:88:c9:
                    69:ea:ec:69:13:d9:d9:ef:b6:7d:e3:60:00:50:b3:
                    f0:27:32:67:98:1e:91:d7:7f:17:82:9d:21:ae:6b:
                    10:b1:aa:49:b6:92:79:28:a2:c9:d0:f3:94:7c:23:
                    19:67:24:cc:92:10:8a:72:ae:0a:4e:3e:eb:3c:20:
                    fa:af:5b:c9:f7:8e:5f:6f:82:d4:8c:99:7a:56:1a:
                    df:28:88:48:ef:1f:36:ad:b6:68:99:a4:7c:77:3d:
                    da:15:8e:aa:17:e3:d3:ad:6f:a2:9d:3b:90:1a:91:
                    2a:e7:fe:e6:e4:d4:48:fa:6b:18:0c:ce:fc:3b:8b:
                    28:fe:3f:f9:38:7e:f9:15:87:5c:7a:98:e7:52:3e:
                    be:94:bf:c7:58:76:c9:eb:81:30:f5:0c:ce:87:24:
                    a9:cd:94:cf:05:55:37:0e:33:b4:6c:bb:c9:b2:c8:
                    9f:ac:be:65:06:f6:61:0f:cb:99:d8:63:36:de:26:
                    12:ad:95:65:bc:87:93:eb:38:1b:2c:c7:29:1e:bf:
                    29:06:f2:ea:ce:49:5c:dc:f0:df:43:f7:9b:f7:22:
                    ed:d4:56:d9:13:b4:16:3b:d7:ff:b6:ba:84:39:49:
                    6a:d2:5a:30:33:61:62:3a:6c:8e:6e:12:9d:3e:b6:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:23:F1:EA:B5:22:9F:43:58:EA:A5:2E:E8:DD:56:A6:8A:D3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f918fc70-c1f0-3ce8-9c2b-820bfca5bc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:88:f2:6c:f8:65:26:b8:ca:5e:a5:44:53:88:e1:b6:c1:
         99:79:2c:ed:f1:66:77:72:6b:99:b7:86:d0:e7:f4:a3:53:8c:
         23:7f:73:ca:e5:80:89:86:79:63:14:cf:cd:95:46:e4:f5:aa:
         20:8e:43:6c:4f:00:48:15:0f:ad:fa:3d:cb:5a:24:59:5a:03:
         41:3b:0a:e0:1e:cd:7d:08:ff:30:32:40:8c:01:f3:0c:22:0c:
         39:60:56:22:c4:21:69:ca:7d:96:f4:b1:a4:77:2b:e5:cd:be:
         47:9e:ba:7a:c3:d6:9e:4d:cc:9a:e5:93:94:d4:cc:84:05:95:
         0e:db:f5:44:ac:3d:b8:a1:f3:da:46:db:b1:cb:98:f5:a2:82:
         45:db:5b:2d:d0:2f:44:77:6a:d0:2e:62:f7:eb:e5:82:39:12:
         ca:c9:f6:ce:7a:4d:78:27:be:6b:2a:a1:6e:57:f5:9c:30:5c:
         08:40:e2:29:04:ca:d8:55:88:db:f9:4a:46:82:44:8c:04:9d:
         f9:dd:3d:2e:4c:dc:08:c5:ed:c5:26:4c:42:6f:6e:c5:36:dc:
         53:4b:25:c7:78:ff:e1:fe:ed:64:e5:3c:95:ae:4d:bc:eb:14:
         17:53:0c:e9:fa:a0:48:14:78:70:36:90:9d:5f:f5:81:36:99:
         10:45:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:13:31 2026 by rpki-client