Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58964e45-bf81-367f-82e8-22df45b167eb.roa
File:                     58964e45-bf81-367f-82e8-22df45b167eb.roa (raw, json)
Hash identifier:          LTrJ3WP6I2i25WYMSveLAqsXlx+oY7fJr3a9pwVDEgw=
Subject key identifier:   F7:C4:39:A9:06:B0:3F:E8:14:63:57:73:46:EF:B1:91:02:86:1A:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA75590EFBBD2B35AF2980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58964e45-bf81-367f-82e8-22df45b167eb.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.96.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:75:59:0e:fb:bd:2b:35:af:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=cbaf2a49-6d03-4b84-9524-bc1c1c727fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:7b:63:5a:3c:53:a7:ea:1e:7e:64:b9:a7:
                    e8:a7:67:14:63:fb:fe:89:9a:d4:ab:9c:6f:e4:ae:
                    87:82:50:69:fa:89:31:af:71:27:cb:7d:a0:b8:d9:
                    cc:9d:0b:d2:e7:b7:a8:52:4e:ce:bc:d3:3c:f0:8d:
                    47:bd:fa:54:17:47:84:03:19:00:4c:b7:1f:20:b8:
                    1f:db:02:cc:44:0e:7b:8f:54:de:eb:ff:1d:96:ca:
                    59:28:45:6a:ed:b7:e0:37:a4:05:63:a9:09:4f:75:
                    f0:a8:a6:0d:0e:02:a9:47:60:16:f8:70:33:1d:ac:
                    77:cd:6a:1a:45:30:8d:4e:9a:ed:0b:50:3e:d9:47:
                    31:a1:2d:76:3c:7b:6f:94:52:ef:fb:bd:8b:94:59:
                    81:56:64:9d:42:9f:ff:85:22:fd:a3:25:2b:f7:8b:
                    db:ce:83:58:a5:3b:a0:a2:a7:df:9c:c9:e6:e9:c2:
                    4a:a1:a5:39:2a:14:2c:08:86:56:2f:34:2b:c8:b9:
                    5b:f6:b1:68:0d:5b:d1:f2:43:3d:bf:d7:ff:8e:e4:
                    45:ab:8e:a0:4c:7e:25:f4:89:ea:5e:e2:a0:22:6b:
                    1a:04:01:22:00:14:e5:ca:aa:dd:7a:5f:aa:45:ca:
                    19:9d:97:29:42:9b:c8:f0:c4:0b:3b:d5:81:35:fa:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:39:A9:06:B0:3F:E8:14:63:57:73:46:EF:B1:91:02:86:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58964e45-bf81-367f-82e8-22df45b167eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:56:13:95:f2:75:83:cf:a7:19:67:5d:01:25:17:97:73:
         19:23:65:ba:2c:59:35:2a:ea:ff:0c:2c:4f:5f:56:61:be:c1:
         e8:74:7c:00:8b:23:ab:cd:37:a9:20:62:64:52:cd:0d:88:f7:
         21:4f:44:76:69:2f:ab:a3:40:e0:18:f9:ba:a5:32:55:c1:35:
         97:d4:a2:cc:9f:b0:f4:06:01:01:5b:db:ae:2f:39:29:c9:a9:
         81:e0:cb:8e:28:b7:ab:6a:da:46:05:3d:d9:35:97:f3:c5:30:
         84:dd:dd:dd:07:9a:8e:a8:61:03:0c:15:48:7b:b3:51:17:f5:
         2f:77:97:37:a0:ff:73:83:12:8e:49:6d:6f:76:81:f4:88:ad:
         71:1c:a1:e8:4d:f0:bc:08:57:a6:8f:c7:34:35:94:57:58:d1:
         70:05:f4:91:d4:52:83:c6:9c:32:2b:36:31:20:1b:b0:08:d0:
         ec:b2:da:1e:64:dd:5a:7b:8c:9a:8f:6e:2c:db:5c:5d:ef:50:
         2b:4a:b7:4a:d7:46:39:01:29:d7:ab:e9:a9:36:a3:7f:9e:87:
         fe:19:de:7e:6b:cf:89:ba:9f:8f:c2:7e:c9:ba:ac:09:73:9b:
         fd:58:ad:31:10:0b:de:be:a1:8e:48:9b:4d:e7:0b:ec:7e:e0:
         42:73:b9:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VunVZDvu9KzWvKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
Y2JhZjJhNDktNmQwMy00Yjg0LTk1MjQtYmMxYzFjNzI3ZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BF7Y1o8U6fqHn5kuafop2cUY/v+iZrUq5xv
5K6HglBp+okxr3Eny32guNnMnQvS57eoUk7OvNM88I1HvfpUF0eEAxkATLcfILgf
2wLMRA57j1Te6/8dlspZKEVq7bfgN6QFY6kJT3XwqKYNDgKpR2AW+HAzHax3zWoa
RTCNTprtC1A+2UcxoS12PHtvlFLv+72LlFmBVmSdQp//hSL9oyUr94vbzoNYpTug
oqffnMnm6cJKoaU5KhQsCIZWLzQryLlb9rFoDVvR8kM9v9f/juRFq46gTH4l9Inq
XuKgImsaBAEiABTlyqrdel+qRcoZnZcpQpvI8MQLO9WBNfonswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfEOakGsD/oFGNXc0bvsZEChho6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg5NjRlNDUtYmY4MS0z
NjdmLTgyZTgtMjJkZjQ1YjE2N2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASWBeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrEVhOV8nWDz6cZZ10BJReXcxkjZbosWTUq6v8MLE9fVmG+weh0fACL
I6vNN6kgYmRSzQ2I9yFPRHZpL6ujQOAY+bqlMlXBNZfUosyfsPQGAQFb264vOSnJ
qYHgy44ot6tq2kYFPdk1l/PFMITd3d0Hmo6oYQMMFUh7s1EX9S93lzeg/3ODEo5J
bW92gfSIrXEcoehN8LwIV6aPxzQ1lFdY0XAF9JHUUoPGnDIrNjEgG7AI0Oyy2h5k
3Vp7jJqPbizbXF3vUCtKt0rXRjkBKder6ak2o3+eh/4Z3n5rz4m6n4/Cfsm6rAlz
m/1YrTEQC96+oY5Im03nC+x+4EJzuSU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:43 2026 by rpki-client