Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e91a64-4852-30da-a823-760a0efcff52.roa
File:                     38e91a64-4852-30da-a823-760a0efcff52.roa (raw, json)
Hash identifier:          81750PRbxQ5sgWBYgFOLigLBlKu4sk56JrFFuwRczV8=
Subject key identifier:   74:F1:7A:BD:6A:4B:B5:DE:F5:3A:9F:9C:95:17:5B:45:BC:69:30:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DC393EFB1F7C500948718
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e91a64-4852-30da-a823-760a0efcff52.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.70.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:c3:93:ef:b1:f7:c5:00:94:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=8f3e150c-9923-4dc8-8545-8aead5be0e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:c0:c9:90:d0:ab:7f:11:a4:fd:0e:e0:02:
                    76:4e:2e:bb:8e:f1:b1:22:9a:27:29:46:64:74:01:
                    49:24:22:85:df:e6:02:b7:de:02:26:ae:2b:70:f2:
                    68:9b:90:20:93:4e:1c:eb:f5:3c:c4:67:ba:21:70:
                    b9:40:cb:2f:a9:e5:8d:04:64:19:a8:0e:43:bb:97:
                    3b:9f:84:b2:47:17:9c:17:61:8a:71:49:8a:e1:42:
                    80:2a:53:70:fa:b2:98:cd:87:00:3f:d6:79:4e:5f:
                    a6:07:7a:b0:ec:9d:87:67:94:ea:46:aa:8e:2f:38:
                    f8:09:16:4a:e9:d4:24:e1:9b:b7:c1:34:d9:1a:4a:
                    62:33:99:55:4c:19:ab:bd:40:29:10:84:db:38:7e:
                    ae:62:04:25:fe:ce:88:6d:23:7c:79:40:7f:ed:d6:
                    b7:cc:90:86:90:07:9e:5b:11:81:9b:a7:45:eb:8b:
                    1d:40:83:b0:da:fe:ca:f0:08:67:43:ab:f8:2c:81:
                    34:12:b2:67:36:e0:16:6a:75:c5:bc:2f:ce:0e:56:
                    f9:11:7a:0b:5b:48:5f:13:de:08:2f:d3:d5:ef:ae:
                    dc:e7:35:cd:7a:33:30:88:a5:c8:1a:d8:20:52:de:
                    d8:1d:65:91:ff:f4:d7:63:96:b0:a5:58:09:62:b2:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:7A:BD:6A:4B:B5:DE:F5:3A:9F:9C:95:17:5B:45:BC:69:30:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e91a64-4852-30da-a823-760a0efcff52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:55:3c:d9:62:1b:26:0e:3f:de:51:b7:9c:3f:79:5f:18:87:
         d9:2e:ab:20:61:03:0c:3d:4b:b0:2d:7e:59:84:61:1e:0e:ab:
         27:95:ea:0d:3c:d6:49:2e:1a:ad:70:46:11:5e:a1:52:98:23:
         b2:04:c2:07:2d:19:05:82:f6:dc:9a:1e:3e:ed:15:a8:1e:57:
         da:11:2a:80:52:1a:b8:be:93:82:7f:76:65:00:11:b1:29:bd:
         9f:ea:6a:51:e3:f1:6e:8f:0f:d3:af:23:5b:ff:5c:a3:d3:03:
         5b:f4:c5:b8:13:dd:fd:21:93:48:49:dd:23:70:16:92:cf:e7:
         f7:4e:53:1b:e2:2e:e1:65:94:ab:3a:f1:37:05:e9:b9:fb:07:
         b9:ff:e3:b5:7e:5a:84:36:06:3f:7a:1a:7f:f9:69:42:c2:c9:
         87:8a:18:3b:a1:b9:63:a7:3e:84:0f:3f:d8:2e:17:f3:27:4a:
         05:2c:8a:b6:d1:1b:9a:95:f5:c7:93:a1:6c:7d:bd:80:3b:5f:
         eb:52:bc:55:1c:71:1f:28:db:88:ca:f0:65:5b:09:72:b4:21:
         e2:db:b5:5c:e1:4d:9e:6d:e8:85:a5:4b:ad:b8:9e:21:0a:0c:
         9c:ee:c9:8e:9b:4b:93:3e:cf:ee:39:37:7c:14:5d:4e:02:2e:
         ea:da:e3:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXcOT77H3xQCUhxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OGYzZTE1MGMtOTkyMy00ZGM4LTg1NDUtOGFlYWQ1YmUwZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSzAyZDQq38RpP0O4AJ2Ti67jvGxIponKUZk
dAFJJCKF3+YCt94CJq4rcPJom5Agk04c6/U8xGe6IXC5QMsvqeWNBGQZqA5Du5c7
n4SyRxecF2GKcUmK4UKAKlNw+rKYzYcAP9Z5Tl+mB3qw7J2HZ5TqRqqOLzj4CRZK
6dQk4Zu3wTTZGkpiM5lVTBmrvUApEITbOH6uYgQl/s6IbSN8eUB/7da3zJCGkAee
WxGBm6dF64sdQIOw2v7K8AhnQ6v4LIE0ErJnNuAWanXFvC/ODlb5EXoLW0hfE94I
L9PV767c5zXNejMwiKXIGtggUt7YHWWR//TXY5awpVgJYrLvUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTxer1qS7Xe9TqfnJUXW0W8aTDIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhlOTFhNjQtNDg1Mi0z
MGRhLWE4MjMtNzYwYTBlZmNmZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUbLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANpVPNliGyYOP95Rt5w/eV8Yh9kuqyBhAww9S7AtflmEYR4OqyeV6g08
1kkuGq1wRhFeoVKYI7IEwgctGQWC9tyaHj7tFageV9oRKoBSGri+k4J/dmUAEbEp
vZ/qalHj8W6PD9OvI1v/XKPTA1v0xbgT3f0hk0hJ3SNwFpLP5/dOUxviLuFllKs6
8TcF6bn7B7n/47V+WoQ2Bj96Gn/5aULCyYeKGDuhuWOnPoQPP9guF/MnSgUsirbR
G5qV9ceToWx9vYA7X+tSvFUccR8o24jK8GVbCXK0IeLbtVzhTZ5t6IWlS624niEK
DJzuyY6bS5M+z+45N3wUXU4CLura47g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:49 2026 by rpki-client