Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8c2330-12a2-3d75-8c3c-0f45e5f63307.roa
File:                     3c8c2330-12a2-3d75-8c3c-0f45e5f63307.roa (raw, json)
Hash identifier:          v8NyCVktdzm+Asr2R0lkD3hAHbQZQUGqyv66ZSD/eDE=
Subject key identifier:   61:A3:8F:37:D7:DD:A5:74:D7:F9:7B:E1:12:F9:CA:3C:9D:6C:B1:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243AA59EED101E764746080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8c2330-12a2-3d75-8c3c-0f45e5f63307.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        73.59.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:aa:59:ee:d1:01:e7:64:74:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=6b1abaea-ec95-4839-851a-f81c50e810c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:64:ba:0a:c0:70:9d:92:df:87:69:d3:e7:
                    45:9d:07:c0:4c:34:24:c6:34:20:2f:4b:01:e2:74:
                    53:f5:c4:7a:7f:1c:a1:53:c3:df:77:9d:f6:c3:05:
                    ca:da:34:48:d5:76:78:35:67:0c:b2:63:5e:54:c8:
                    14:55:05:3c:0f:8e:61:ad:85:bf:ca:ee:da:48:3d:
                    2c:1c:f6:72:f9:15:da:91:54:94:ec:c3:f6:dd:05:
                    91:7a:a4:d8:1d:a6:ca:91:42:ac:2c:b6:f8:0b:33:
                    1a:fa:0c:b1:e2:41:f1:2f:74:17:55:dc:1e:6c:58:
                    0f:fa:11:90:74:a2:e9:58:90:a3:52:b5:ec:42:81:
                    d7:bf:66:87:77:4e:36:20:c5:4b:b0:8a:f1:81:87:
                    d8:bd:ee:ee:7a:73:b7:27:0f:0f:02:d5:0b:9c:08:
                    98:d6:65:c1:78:42:b8:82:f7:8e:0d:60:c9:29:5e:
                    8a:25:60:51:a7:72:8f:22:bb:05:0a:a2:55:18:16:
                    c4:f1:9f:56:56:24:be:36:90:ed:77:76:0d:97:d2:
                    07:36:b4:2d:13:7d:8c:ed:d7:34:da:b8:f8:65:dd:
                    24:98:32:4a:fa:96:bd:80:2b:71:9a:1a:45:ee:37:
                    fe:4c:65:bc:3a:71:cf:fe:1c:9f:36:b9:59:ca:98:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:8F:37:D7:DD:A5:74:D7:F9:7B:E1:12:F9:CA:3C:9D:6C:B1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8c2330-12a2-3d75-8c3c-0f45e5f63307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.59.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:1a:40:d7:10:e5:dc:13:81:70:fd:3b:80:99:e2:e8:c1:
         fa:6d:55:1c:6d:ee:ea:59:ca:d4:0f:6b:76:90:4d:74:04:20:
         bd:40:84:46:65:9b:c5:95:26:e3:a1:d0:2e:22:2f:02:7f:d3:
         60:b2:14:ee:cb:77:8b:59:50:e1:fd:31:ad:04:c3:5a:7a:ba:
         a4:50:e2:2e:12:37:10:45:73:b7:28:e8:63:93:19:95:fe:27:
         8d:b0:4a:0a:03:d1:fb:a7:3d:35:5b:96:da:bd:1b:d7:84:80:
         e0:b4:c2:5d:5f:1c:8f:62:c1:6b:3e:64:d1:75:b1:37:a8:fe:
         26:8a:4c:d6:e3:72:a3:0f:30:fa:d8:30:a5:2f:a6:f9:cf:82:
         d9:30:d4:eb:c9:c5:f9:9b:92:ba:62:5f:ce:34:8f:4a:c0:a7:
         f1:43:5a:05:db:b3:9e:55:c8:82:5d:03:85:40:81:55:dc:29:
         35:09:0e:cd:98:b7:01:47:63:0b:6a:6f:c1:9d:31:70:f0:87:
         40:90:3e:74:31:1d:b3:40:50:fe:2e:c9:e9:b6:df:0f:9c:e3:
         38:ee:c8:ae:3a:e1:0f:8e:c0:ec:39:d1:b0:27:c7:9d:09:6c:
         0a:ac:68:87:ea:47:14:9b:c9:40:b2:01:96:6c:51:98:03:77:
         de:d0:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:28 2026 by rpki-client