Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4d05b-5200-303f-a393-aa0452bb207d.roa
File:                     21d4d05b-5200-303f-a393-aa0452bb207d.roa (raw, json)
Hash identifier:          4ymhzfUlelqGIz3asmXy2DxHr1BxAv3AtAV2IUZ63OI=
Subject key identifier:   DE:78:CD:F5:FC:B6:FB:4F:58:2A:EA:FA:BA:C3:45:2A:5B:5A:97:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E5E0819BC44B88D14B600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4d05b-5200-303f-a393-aa0452bb207d.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        73.93.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:5e:08:19:bc:44:b8:8d:14:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=43c6a1bb-c1cc-459f-a1c5-bfa7ac027759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:c1:af:02:08:0b:1a:3a:3d:77:f9:bd:b9:
                    0f:a5:81:99:bd:5c:19:82:bb:e9:ea:67:c7:d5:96:
                    c0:6c:e9:a8:33:42:9e:98:0b:54:7e:e2:28:48:58:
                    fd:96:61:b8:68:13:47:84:c4:8c:f0:d9:d5:71:81:
                    df:7a:69:fa:a6:f2:82:d0:52:43:11:5c:5b:c2:d4:
                    46:2b:10:16:3a:8e:62:71:10:f0:82:37:cd:11:b9:
                    93:ad:d0:98:8d:e8:0e:26:f6:97:9f:f0:ce:44:a2:
                    06:a2:5c:72:19:23:3e:29:0c:77:18:4a:2a:d3:bc:
                    fb:35:56:37:fc:e5:fa:ca:ed:e0:c1:19:b3:0e:d8:
                    03:3a:37:d3:e9:6f:27:85:9d:8a:52:fe:ad:6c:ce:
                    7a:bd:e2:ff:6a:34:bb:a8:f1:67:6b:54:ce:54:62:
                    28:84:70:91:19:a5:04:5d:fe:26:16:ec:e6:0a:57:
                    b1:b5:29:4d:80:d2:85:f0:2f:48:14:26:5f:36:49:
                    5c:3e:6b:94:d1:4a:f7:f2:4a:82:61:73:9b:eb:a6:
                    2a:77:1f:9d:22:c2:36:bb:f0:fd:4c:e2:22:24:e6:
                    17:b0:cf:ea:06:54:60:f7:8b:fb:cb:b8:f1:0b:22:
                    f8:12:e5:8d:12:48:d2:d4:c9:9b:e2:70:1e:b1:d2:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:CD:F5:FC:B6:FB:4F:58:2A:EA:FA:BA:C3:45:2A:5B:5A:97:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d4d05b-5200-303f-a393-aa0452bb207d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.93.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:00:d1:6b:e4:ac:4a:f8:73:fd:97:5e:48:eb:6e:17:ab:
         e6:06:fa:c4:02:cc:cf:30:7d:dd:68:16:05:4a:d7:19:e0:ff:
         72:fa:4b:be:76:34:ac:06:23:08:42:ab:40:fa:92:b2:7a:f8:
         c7:53:d7:40:a7:d7:e8:88:07:4c:40:d9:1b:20:60:28:75:10:
         b2:c9:da:8d:57:a6:29:e1:bd:da:5a:72:52:57:12:05:23:92:
         03:c9:35:fe:a6:b8:f6:79:63:89:1b:4a:30:43:56:0e:81:ba:
         fb:72:bd:4f:e8:78:a0:15:88:06:c5:2f:3a:34:87:bc:4f:4b:
         8f:53:8d:90:4d:76:7c:58:7e:39:39:3e:57:c4:73:f5:79:f6:
         6f:14:a2:a6:e8:46:90:b0:c2:93:68:0f:c5:3b:b5:ba:81:8f:
         da:67:77:c1:19:3b:c1:a8:9b:54:eb:d8:f9:dc:40:af:82:58:
         45:f0:bb:c3:34:e1:cb:e4:12:a9:1a:fd:48:f8:28:03:56:6f:
         07:25:ad:21:b8:8d:32:5e:06:ab:c2:b9:a7:56:84:64:d9:ae:
         d3:52:3b:7d:57:c4:bd:4c:a7:41:43:7b:4c:47:77:cf:d0:3e:
         72:fa:b9:5e:d7:d4:46:31:8f:b8:98:86:68:fd:d1:b0:aa:4d:
         92:33:c5:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnl4IGbxEuI0UtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDNjNmExYmItYzFjYy00NTlmLWExYzUtYmZhN2FjMDI3NzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvnBrwIICxo6PXf5vbkPpYGZvVwZgrvp6mfH
1ZbAbOmoM0KemAtUfuIoSFj9lmG4aBNHhMSM8NnVcYHfemn6pvKC0FJDEVxbwtRG
KxAWOo5icRDwgjfNEbmTrdCYjegOJvaXn/DORKIGolxyGSM+KQx3GEoq07z7NVY3
/OX6yu3gwRmzDtgDOjfT6W8nhZ2KUv6tbM56veL/ajS7qPFna1TOVGIohHCRGaUE
Xf4mFuzmClextSlNgNKF8C9IFCZfNklcPmuU0Ur38kqCYXOb66Yqdx+dIsI2u/D9
TOIiJOYXsM/qBlRg94v7y7jxCyL4EuWNEkjS1Mmb4nAesdKDtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN54zfX8tvtPWCrq+rrDRSpbWpfkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFkNGQwNWItNTIwMC0z
MDNmLWEzOTMtYWEwNDUyYmIyMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSV10MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtkANFr5KxK+HP9l15I624Xq+YG+sQCzM8wfd1oFgVK1xng/3L6S752
NKwGIwhCq0D6krJ6+MdT10Cn1+iIB0xA2RsgYCh1ELLJ2o1XpinhvdpaclJXEgUj
kgPJNf6muPZ5Y4kbSjBDVg6BuvtyvU/oeKAViAbFLzo0h7xPS49TjZBNdnxYfjk5
PlfEc/V59m8UoqboRpCwwpNoD8U7tbqBj9pnd8EZO8Gom1Tr2PncQK+CWEXwu8M0
4cvkEqka/Uj4KANWbwclrSG4jTJeBqvCuadWhGTZrtNSO31XxL1Mp0FDe0xHd8/Q
PnL6uV7X1EYxj7iYhmj90bCqTZIzxfQ=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:07 2026 by rpki-client