Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c086087-9abd-35ab-b72a-4b592d5f6402.roa
File:                     0c086087-9abd-35ab-b72a-4b592d5f6402.roa (raw, json)
Hash identifier:          ay+6xCYiG0NPoRD/VF4aDt9yVEqzNje83hDofku4qtI=
Subject key identifier:   A0:3D:38:AF:6C:A0:73:32:98:1C:60:1A:C7:D0:DF:20:D2:84:5A:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC057E1A43B328E8E72380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c086087-9abd-35ab-b72a-4b592d5f6402.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.249.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:05:7e:1a:43:b3:28:e8:e7:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=eeb0e169-169a-48a3-803e-c27afdabccc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:ba:0d:41:40:f2:c6:b4:ce:c6:19:19:13:
                    fb:4f:f4:54:ed:1d:5c:24:e0:fb:fd:7c:3e:eb:fa:
                    26:7a:9c:bd:86:aa:6f:95:0e:d8:0d:38:93:b0:30:
                    40:8d:88:29:42:f0:81:61:75:52:62:07:d4:05:bb:
                    c4:d5:6f:74:d6:9b:5e:96:16:8b:63:af:44:55:62:
                    f3:e6:2e:01:5e:7f:8d:60:1a:53:4b:a0:27:10:45:
                    2b:68:55:2f:37:10:18:f4:6e:36:6c:09:e8:3c:8c:
                    6d:4c:be:4a:f3:d1:02:53:0e:ef:60:04:fd:d9:cb:
                    ff:b7:d6:61:0b:bf:49:a4:ca:b3:bb:0a:93:a5:5b:
                    5e:71:a6:51:3f:30:b3:60:7b:4c:c1:e1:6d:fb:ca:
                    7b:81:93:a8:10:d6:36:e4:db:91:31:90:9b:3c:1e:
                    7f:35:d0:22:01:09:69:46:45:a3:a7:8b:f5:03:ad:
                    c2:ed:d9:cc:5e:14:8a:f6:d1:e6:5c:f2:2c:0c:8c:
                    2e:2b:ec:cf:dd:46:f1:20:11:be:d7:b4:6f:54:23:
                    4c:47:94:f2:cb:1b:c4:a4:c7:1c:fe:1b:d4:2c:a3:
                    d4:9b:a8:36:48:4f:e6:f4:0d:3a:e9:b1:a8:ef:34:
                    b3:af:67:c3:6e:ce:65:8a:3a:83:39:07:79:56:a6:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:38:AF:6C:A0:73:32:98:1C:60:1A:C7:D0:DF:20:D2:84:5A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c086087-9abd-35ab-b72a-4b592d5f6402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.249.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:4d:9d:2b:4b:f3:b9:80:42:fe:b5:ce:d8:85:47:d6:a7:
         eb:3f:5c:ca:cf:d1:55:d0:97:65:a9:ae:20:52:5f:19:3c:1e:
         e9:54:37:df:08:36:68:7b:bd:50:63:15:e8:a6:00:10:f9:3b:
         3e:85:61:a9:85:54:48:52:82:25:97:16:9a:d3:7a:73:c2:1c:
         0d:d9:be:4b:6a:c9:e2:6d:b3:2c:61:42:c3:da:68:43:8d:88:
         44:f9:b4:9c:54:ae:dd:b5:39:d9:81:6b:e9:7f:4a:ff:c3:77:
         0f:f3:37:29:2c:b3:73:a2:04:78:80:8a:d7:a0:38:56:0a:54:
         57:07:bc:4c:5d:7e:83:83:88:9d:b4:11:08:63:31:09:ea:6c:
         21:e9:d0:ed:14:a8:69:83:4b:98:df:76:16:41:6d:b8:d5:35:
         62:7d:4f:da:55:35:1f:ac:a5:53:72:27:5d:21:e6:c6:43:f0:
         ff:fa:09:3c:32:eb:17:38:f6:f5:eb:36:e4:5c:d6:c0:9a:77:
         8f:2f:0e:75:c8:b0:77:51:49:ea:c2:06:18:c1:b7:a9:9f:11:
         77:69:81:1c:ef:ea:f3:f1:3c:71:7a:67:66:5d:10:e6:ac:8e:
         7a:58:68:ef:cf:fe:74:3e:d7:a8:f7:26:b9:3b:14:ac:29:e1:
         b9:15:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:29 2026 by rpki-client