Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39ea00e7-e86f-373f-a2ee-9a9a32d21c46.roa
File:                     39ea00e7-e86f-373f-a2ee-9a9a32d21c46.roa (raw, json)
Hash identifier:          wjznswBtx7CUoDbCwVTWh7+olU3LQI+2KS15Q+jD6ek=
Subject key identifier:   F2:2D:2C:D5:0E:B3:0D:99:52:6E:28:71:55:33:29:33:5B:54:DD:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C442BAC4F7DE480F63E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39ea00e7-e86f-373f-a2ee-9a9a32d21c46.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.247.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:44:2b:ac:4f:7d:e4:80:f6:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=df551260-3df8-42c4-830b-9707cf4fa746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:e3:0f:fd:d2:c6:13:3a:c5:cc:d7:d6:6c:
                    9e:52:a3:16:de:12:71:dc:d6:e4:03:bf:ab:3a:d2:
                    26:1e:6b:f8:7c:8c:d6:bc:4c:26:cb:94:07:5d:ed:
                    36:22:37:04:d4:13:4e:0b:c9:93:5e:ff:42:df:6e:
                    b3:1c:bf:5c:13:a1:ac:4a:43:bb:95:50:29:4e:fc:
                    15:73:bc:f5:9e:27:fd:e1:56:78:32:d8:e4:4e:aa:
                    2c:ff:e6:b5:cd:f3:95:61:e7:dd:3e:7f:5a:76:5f:
                    b8:b9:69:f6:95:74:64:c7:06:76:e5:54:3a:c1:6e:
                    30:fa:1c:3e:00:29:fc:40:11:b3:e0:c4:71:72:09:
                    22:bc:c8:73:e3:d5:74:b1:12:c9:fc:7e:e8:8f:c2:
                    b4:32:0d:78:7f:73:38:37:9b:1c:cd:bf:d4:ef:c0:
                    1f:82:8d:61:63:96:6b:94:e3:43:ef:50:36:3e:e2:
                    40:e3:14:a1:38:6e:49:89:45:fd:2f:92:77:ef:14:
                    2e:eb:00:73:1e:03:3f:36:dd:49:0e:d9:35:32:40:
                    90:35:52:d0:e4:f9:cd:9c:61:d5:b7:a8:e8:c8:41:
                    e0:28:20:3f:73:a3:35:d5:1f:76:7a:d5:5b:f9:e7:
                    fb:62:6a:86:d0:f2:c9:e4:c6:c7:bd:84:de:b0:12:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:2C:D5:0E:B3:0D:99:52:6E:28:71:55:33:29:33:5B:54:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39ea00e7-e86f-373f-a2ee-9a9a32d21c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:11:0a:ec:9e:86:12:cf:cf:45:b1:19:2f:d5:19:d5:53:8b:
         73:7e:14:98:b4:70:36:5d:02:68:bc:9d:ef:16:b1:b9:9e:2f:
         f7:46:27:bb:f0:84:ff:59:dc:89:bf:52:fe:d2:b7:19:a8:e5:
         a2:ac:6e:78:6f:e6:12:62:4a:76:70:da:84:f6:77:2a:33:14:
         6d:ff:c6:20:ff:80:a1:93:ec:a6:f8:ee:19:06:8d:9f:49:a7:
         91:49:24:23:0e:d2:5d:37:f8:e3:9e:67:ff:ff:38:0e:a3:15:
         25:53:3c:8d:10:ca:e0:2f:df:d1:15:ac:b8:07:16:ce:53:37:
         42:cf:60:6d:84:1c:71:67:17:2c:ab:93:06:56:54:6f:0d:05:
         45:f7:52:3e:fb:41:a3:36:fe:0f:8a:34:ef:fc:02:d8:83:81:
         ae:2b:ee:16:81:13:8c:7c:ba:e0:33:b8:e1:cf:ce:0f:9e:ce:
         f3:1e:f5:fd:9a:11:cb:ea:94:c7:e7:7f:70:d0:91:c1:2b:21:
         15:91:c7:c4:0f:82:dd:29:94:ac:a2:70:8e:69:be:1f:c4:2f:
         af:f8:83:62:f8:fc:4a:3a:4c:e6:bd:99:fd:83:f6:56:fa:93:
         c5:e3:ce:00:61:7c:fb:99:d7:91:ec:6c:12:38:64:06:ce:b6:
         28:37:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:34 2026 by rpki-client