Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5144129f-76a8-34fc-b8ab-2a829992c674.roa
File:                     5144129f-76a8-34fc-b8ab-2a829992c674.roa (raw, json)
Hash identifier:          P55MsNauoGuAEmFFcclqPSnLfTvn4AXZaUrH5Qx+bDk=
Subject key identifier:   F8:94:09:CA:BA:15:E4:F7:9F:19:53:EB:0C:AB:10:05:E4:51:85:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58F775E9AA092FA5808920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5144129f-76a8-34fc-b8ab-2a829992c674.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.92.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:f7:75:e9:aa:09:2f:a5:80:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d5c958b0-ced2-43db-a229-3b940c29d4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:ee:d8:6c:63:56:74:1b:2b:40:d2:c3:46:
                    c5:34:ed:77:1c:5a:f4:c3:f1:b2:6f:b4:88:97:60:
                    e8:a6:80:9f:6e:e5:7e:84:ea:c3:65:a2:2b:fa:d9:
                    0b:30:f1:aa:b4:82:bf:c9:a8:0b:0b:e8:d3:7c:32:
                    a3:2e:e8:54:b9:20:51:7b:bf:80:41:05:5e:fe:4a:
                    0b:98:3f:3f:19:c5:1a:bc:e7:6b:91:f8:42:4d:93:
                    6d:2b:37:64:70:73:b1:de:da:6f:91:78:e9:e6:3a:
                    93:4d:8d:2a:99:aa:c3:b2:49:0f:b5:c9:17:06:d0:
                    9f:eb:c3:16:23:ba:7d:04:0c:c1:e3:29:19:36:a0:
                    27:e4:82:58:65:14:33:1c:fa:02:5b:72:10:35:27:
                    03:c3:7b:2c:98:72:e5:8e:b2:dd:96:84:6c:ae:d4:
                    db:51:72:47:37:14:22:40:8c:ed:71:38:7d:be:80:
                    3c:e4:ad:21:11:fc:be:7e:fc:22:d8:3a:55:dd:28:
                    f2:42:e9:46:02:9f:fa:89:77:05:4b:43:83:af:41:
                    8a:10:13:6a:2d:21:aa:cb:1f:29:6d:51:06:02:69:
                    b0:b6:d0:a5:9b:b3:42:92:b2:47:7b:dd:ef:95:5b:
                    fc:98:82:0d:e1:bd:43:2a:26:2a:25:f5:ac:8b:a9:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:09:CA:BA:15:E4:F7:9F:19:53:EB:0C:AB:10:05:E4:51:85:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5144129f-76a8-34fc-b8ab-2a829992c674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:64:81:98:4c:e1:1e:b4:e8:fe:67:39:f9:2d:46:8d:ac:97:
         6b:24:07:03:2f:b7:66:2d:e4:63:87:29:98:39:97:e0:b8:7f:
         b7:06:01:ed:17:8a:6c:2a:c1:5f:8f:04:6e:a9:b4:7d:81:0b:
         7f:fc:e1:54:d2:cb:a8:a0:b6:d5:64:4d:6b:43:71:d3:16:97:
         2a:c5:48:ea:09:9c:e3:69:e3:53:ca:c0:f7:93:49:cb:db:a7:
         10:ab:a7:75:41:60:a0:dd:88:76:96:90:e4:38:7f:6d:92:69:
         5f:d2:41:21:96:87:a8:a5:6f:e3:1b:5f:27:5d:21:e4:ae:41:
         1a:54:a5:40:3c:3a:b2:d3:21:e8:7f:a1:02:d4:f3:0a:8f:79:
         98:a4:d3:c7:e2:38:8a:91:bf:c0:8f:a3:ed:1c:34:b7:e9:da:
         08:34:3e:be:2f:70:15:09:97:a0:8e:e0:db:87:b0:34:cf:37:
         d7:1c:22:29:df:0d:d6:41:92:f3:7c:d3:bf:70:fd:15:09:48:
         ee:3b:97:a2:60:db:26:ff:fa:38:f3:a7:46:ac:ff:0b:e3:db:
         e3:6a:e5:40:14:43:cc:81:37:d6:26:32:f1:91:75:f4:32:06:
         82:6d:ce:cb:e2:1d:d7:37:88:6d:bf:31:09:a8:24:8a:19:09:
         19:bd:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:50 2026 by rpki-client