Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa
File:                     25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa (raw, json)
Hash identifier:          EevlNXZ6nXQkVe92k5IXQLaWiqOp66zojP76+fewVI0=
Subject key identifier:   E4:EC:8D:39:19:BC:3C:4F:89:84:1C:83:F7:14:89:C5:EF:A7:2F:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC57801153B7A266099000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        73.161.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:57:80:11:53:b7:a2:66:09:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7b34b3b7-774a-4cae-941d-c8d1675471c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:d4:26:9f:1c:00:0f:cc:54:3f:e2:a2:c0:
                    b3:06:6f:c1:6e:a5:b9:3f:bf:38:97:a6:c6:11:0a:
                    ac:8f:77:35:ac:3c:1c:d3:ac:ba:1c:78:37:83:28:
                    dc:55:4e:e2:27:5a:c2:81:09:27:20:d2:a0:7b:f3:
                    b5:bb:11:7e:8f:44:13:eb:62:9d:a8:50:76:98:d9:
                    f4:ea:37:b8:9f:73:f2:21:d1:3d:1d:75:8d:37:2c:
                    39:7d:cf:08:56:35:3f:d5:1e:6b:33:45:5e:fa:60:
                    9e:b5:35:f4:24:c9:23:d3:ea:02:cf:10:47:79:8f:
                    1f:71:fb:44:09:25:75:b8:ce:3b:44:ee:e6:c7:c6:
                    16:4c:ba:1b:31:30:e4:6f:c4:14:37:c7:c2:6f:eb:
                    64:f3:ec:6d:19:d7:df:de:a4:e3:3c:f9:c4:8b:d1:
                    c2:86:36:2f:eb:53:09:a6:2d:e5:f7:56:4f:3f:33:
                    35:96:32:b7:b8:8b:b9:d8:66:9f:1c:71:f9:1f:29:
                    4a:9e:d2:55:4c:13:55:75:d1:ae:4e:f6:da:56:6c:
                    44:ac:11:33:a7:35:ac:53:10:0f:61:3f:00:d4:ef:
                    b7:ae:0a:95:bd:f2:75:37:a1:36:6b:55:11:40:54:
                    cc:74:6b:db:83:11:86:7b:86:c0:11:d0:52:d1:80:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:8D:39:19:BC:3C:4F:89:84:1C:83:F7:14:89:C5:EF:A7:2F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25026a1f-b276-3c25-a8d1-ecd7df2c9ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:f4:21:63:f5:ad:ab:ee:20:43:64:72:3c:38:23:ad:0d:
         89:f6:74:6f:f2:5c:c2:ad:8e:e9:6f:77:46:0f:85:3f:84:5f:
         0b:9e:31:ac:00:01:66:07:c7:63:92:b3:28:08:f0:7c:d4:27:
         44:3a:21:c7:38:44:6a:56:43:ab:82:cb:fa:7c:d8:e8:7b:0e:
         68:48:4c:65:60:7a:1f:29:5e:a4:80:25:14:a4:1b:2f:48:53:
         13:f1:8f:eb:e0:54:89:2b:a5:c8:ed:ec:e0:1e:0e:b9:0d:02:
         a0:a9:5f:d3:d2:b9:6b:51:57:c3:d7:5a:13:d8:fd:e1:83:67:
         0d:df:40:20:91:12:2c:2c:54:0e:79:81:90:de:1b:75:52:b2:
         1c:d3:68:ed:53:de:d5:1b:3a:a2:44:1f:cc:58:72:a9:65:57:
         a3:3c:18:79:cb:70:d4:18:f7:cb:fc:1f:05:82:59:25:e8:dd:
         dc:ea:02:31:4f:3e:bb:88:45:22:b8:16:55:c4:59:b8:46:88:
         70:40:0c:3c:2d:41:99:41:da:d1:8e:78:22:78:b6:32:a9:bc:
         4e:21:10:63:56:cd:00:8d:ba:0f:eb:a2:b1:dc:74:e7:26:8f:
         74:50:48:fd:2e:15:e5:31:0d:a9:81:34:b2:e4:e2:12:1d:6e:
         a3:f8:d5:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFeAEVO3omYJkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
N2IzNGIzYjctNzc0YS00Y2FlLTk0MWQtYzhkMTY3NTQ3MWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbDUJp8cAA/MVD/iosCzBm/BbqW5P784l6bG
EQqsj3c1rDwc06y6HHg3gyjcVU7iJ1rCgQknINKge/O1uxF+j0QT62KdqFB2mNn0
6je4n3PyIdE9HXWNNyw5fc8IVjU/1R5rM0Ve+mCetTX0JMkj0+oCzxBHeY8fcftE
CSV1uM47RO7mx8YWTLobMTDkb8QUN8fCb+tk8+xtGdff3qTjPPnEi9HChjYv61MJ
pi3l91ZPPzM1ljK3uIu52GafHHH5HylKntJVTBNVddGuTvbaVmxErBEzpzWsUxAP
YT8A1O+3rgqVvfJ1N6E2a1URQFTMdGvbgxGGe4bAEdBS0YC+nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTsjTkZvDxPiYQcg/cUicXvpy92MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUwMjZhMWYtYjI3Ni0z
YzI1LWE4ZDEtZWNkN2RmMmM5YWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaHLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0v9CFj9a2r7iBDZHI8OCOtDYn2dG/yXMKtjulvd0YPhT+EXwueMawA
AWYHx2OSsygI8HzUJ0Q6Icc4RGpWQ6uCy/p82Oh7DmhITGVgeh8pXqSAJRSkGy9I
UxPxj+vgVIkrpcjt7OAeDrkNAqCpX9PSuWtRV8PXWhPY/eGDZw3fQCCREiwsVA55
gZDeG3VSshzTaO1T3tUbOqJEH8xYcqllV6M8GHnLcNQY98v8HwWCWSXo3dzqAjFP
PruIRSK4FlXEWbhGiHBADDwtQZlB2tGOeCJ4tjKpvE4hEGNWzQCNug/rorHcdOcm
j3RQSP0uFeUxDamBNLLk4hIdbqP41Qo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:46 2026 by rpki-client