Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1f6483-6626-36e6-8c17-617bb63d7a39.roa
File:                     2a1f6483-6626-36e6-8c17-617bb63d7a39.roa (raw, json)
Hash identifier:          nyY+qcpVNfiPb0HaHuepOYOMj0/xg5ePKOALhZgtYHg=
Subject key identifier:   E7:9C:D0:98:CF:32:3A:03:8E:74:AA:BA:FF:89:83:99:67:58:30:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA69727498099B94A55700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1f6483-6626-36e6-8c17-617bb63d7a39.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.240.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:69:72:74:98:09:9b:94:a5:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=704a1f73-078d-4026-9f9f-d89faf31e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:00:4e:af:42:90:ca:5e:b7:7a:db:34:6c:
                    f5:a5:42:f0:19:d9:9d:43:eb:92:94:54:63:fe:a6:
                    d4:37:aa:7a:66:a5:2a:5b:97:c0:cd:82:e2:81:ea:
                    e5:97:a6:37:9f:07:2c:57:f9:aa:97:83:89:7c:fd:
                    13:03:35:c8:12:2e:b5:31:f4:9d:7c:fb:86:15:1c:
                    01:e2:ef:ae:44:f4:25:ab:13:2d:26:25:75:14:76:
                    9b:6a:5c:6c:52:86:36:b2:03:14:01:10:30:ad:b6:
                    e7:c6:cc:46:f5:fb:89:3f:3f:63:f0:db:f1:34:ce:
                    7c:18:15:bb:5b:cf:22:30:dd:21:0a:db:0e:12:3d:
                    a9:91:f0:b0:72:31:12:d4:4c:51:0c:dc:18:28:d1:
                    19:64:02:14:29:4c:65:71:82:a9:d6:88:cf:41:e4:
                    e7:a1:d5:08:be:49:d2:6d:ee:89:83:6a:e0:b7:7b:
                    98:bd:d8:b1:ea:92:f8:18:c2:7a:f3:dd:5b:e7:44:
                    82:95:86:fd:4b:6d:54:42:8e:a1:85:0e:54:65:e3:
                    e9:f8:d3:08:41:bd:0f:40:a9:25:cd:6f:2a:68:1a:
                    dd:31:51:54:61:64:20:85:7b:56:f2:8e:84:d0:0e:
                    34:0e:47:66:4b:90:ef:47:46:c9:5b:e2:1d:47:f0:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:D0:98:CF:32:3A:03:8E:74:AA:BA:FF:89:83:99:67:58:30:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a1f6483-6626-36e6-8c17-617bb63d7a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:72:fe:11:2c:a7:b8:1e:2b:48:15:b3:e9:05:ad:72:93:
         e6:72:ef:0f:f5:07:da:62:a4:ae:c1:25:a6:3e:ad:f6:5b:0a:
         2d:0a:92:c4:21:db:4f:9b:6e:d6:94:bb:a0:e4:ae:9a:57:6c:
         b6:e0:df:0a:ab:b6:da:7d:21:57:87:ed:b3:f9:85:c9:92:b4:
         6b:bf:92:34:63:31:94:2a:07:a0:ed:ed:f3:5d:58:b7:ca:64:
         76:25:65:04:31:ab:8c:2a:18:22:d9:14:cc:af:21:69:db:60:
         12:d1:e3:15:5f:8e:4b:ff:3d:33:de:c1:11:c5:26:48:a4:9e:
         c1:65:c6:2b:af:21:34:ba:68:c7:11:d8:eb:07:68:e2:9a:b1:
         fb:2e:4b:da:a5:9a:5d:ea:15:06:41:ed:a2:af:bf:4c:53:13:
         9f:68:f7:a6:7e:01:c9:3b:b9:86:f0:7c:85:e7:a8:1c:b9:00:
         91:1a:a2:9c:95:37:bb:71:e9:af:a7:d8:50:16:7e:b6:12:40:
         06:1e:62:e6:83:a9:be:61:38:8f:8a:ee:d2:8e:5b:3b:73:d7:
         dd:58:5c:83:d9:18:25:18:f8:97:91:2b:a2:af:76:d4:8d:c2:
         8c:35:90:c2:80:28:c9:5b:7c:cb:43:76:01:a6:e0:12:f0:9b:
         69:ce:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:00 2026 by rpki-client