Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed618d6-a649-373f-a0cf-aa2fde40cf07.roa
File:                     1ed618d6-a649-373f-a0cf-aa2fde40cf07.roa (raw, json)
Hash identifier:          hF2uOY+M3J8DHnY8oEaR2jzlTJ8tn5wQnEdmpmYq+Z4=
Subject key identifier:   C6:D1:69:2E:C4:E2:74:84:23:DB:12:3E:76:6B:8F:D0:15:EB:A3:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D93CFCDD2C685C2299F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed618d6-a649-373f-a0cf-aa2fde40cf07.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.202.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:93:cf:cd:d2:c6:85:c2:29:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=8101b227-1033-4682-9a1c-a57c842f40f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:dd:36:8c:39:0d:26:b4:e5:a9:18:a2:8e:
                    70:40:f6:4a:b2:fa:df:15:0e:14:18:87:ff:17:e2:
                    19:bd:e2:b1:da:4e:b8:70:79:79:67:e1:a6:cc:ca:
                    1e:85:8d:25:8b:71:bc:c1:03:d9:bb:85:35:ca:6b:
                    46:45:c4:8a:95:6a:a5:c6:06:05:d0:42:ad:88:ef:
                    bb:71:82:a1:74:e5:9c:8e:ef:56:74:f0:7a:a1:b8:
                    2a:63:35:dd:82:ea:cf:29:3e:0c:4b:81:33:c4:8d:
                    ab:ae:0e:80:3e:43:8d:e9:80:03:41:2b:c1:26:c1:
                    06:e0:f6:90:17:65:e3:e3:b5:83:bb:d9:06:18:f3:
                    68:27:74:26:75:7b:d5:3f:73:02:ef:20:9f:ef:2b:
                    0e:7e:b9:7a:c7:22:e4:dd:e9:29:79:57:bd:32:b8:
                    a8:d2:79:b8:1d:db:25:90:3e:b7:2c:e0:0e:a9:b1:
                    ad:97:02:9d:ac:ab:d6:ec:58:71:e1:fd:3a:85:3f:
                    f8:f7:4a:89:ec:0e:82:98:31:50:31:a6:e5:55:e9:
                    2d:38:af:d5:10:d8:9d:8e:9a:16:7f:db:c6:8e:07:
                    0a:e8:97:ff:e2:23:9c:0e:fd:cc:82:d1:d7:28:a5:
                    7b:29:24:be:d2:26:14:37:48:32:87:34:ff:8e:29:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D1:69:2E:C4:E2:74:84:23:DB:12:3E:76:6B:8F:D0:15:EB:A3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ed618d6-a649-373f-a0cf-aa2fde40cf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:15:b0:c6:3d:84:a8:4d:1f:cf:b1:92:56:e8:ba:21:2a:
         7d:99:b8:1c:28:b8:62:c4:cc:dc:2e:2b:33:72:cc:5f:f7:5f:
         51:ae:42:49:86:66:75:72:ec:72:ee:90:53:96:bf:bf:0b:3d:
         ac:f4:32:87:59:fe:19:2e:8b:cf:86:31:b8:02:74:74:87:3a:
         33:3d:84:05:ad:b1:58:fb:b5:06:8a:67:6c:30:e9:2e:68:3c:
         f7:df:61:9b:75:42:05:34:a2:ed:7c:0a:07:f0:c9:10:3c:2a:
         66:c3:53:ce:66:99:d9:c6:64:e7:d0:da:10:f8:17:55:98:a9:
         81:0f:38:18:5f:5e:ba:bb:e2:40:f0:0a:57:cd:ee:9d:24:f2:
         d7:fc:86:eb:23:e8:a9:36:cf:fd:17:fe:5f:73:3d:22:68:2a:
         03:22:b1:c1:48:b6:58:26:cb:07:50:73:81:b1:47:2a:82:34:
         1e:f7:09:c8:a0:fc:01:34:ad:a9:73:a9:bf:ea:01:8a:96:f1:
         4d:28:ca:24:d0:b2:5f:ea:bc:ee:9e:d6:8e:8f:1c:95:37:a2:
         76:42:1c:2d:df:40:73:44:39:b1:a3:88:5c:88:b6:77:6b:77:
         59:92:76:b2:9e:51:46:60:c6:e8:1f:24:89:25:ea:94:de:65:
         75:49:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:55 2026 by rpki-client