Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa
File:                     59deb89d-ced7-3c1a-a021-595bd975868b.roa (raw, json)
Hash identifier:          qGRI7DsYOl3aJZ2G/BwJ+BBQWTxx8ji/quv57S4ga/k=
Subject key identifier:   54:AB:E0:44:1C:8B:0D:DD:48:B7:C7:C7:6E:90:73:58:6C:CE:DF:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A2B64A1C9EDB6BF67ECC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.198.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:2b:64:a1:c9:ed:b6:bf:67:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b3f257bb-7a3e-4bd2-8a27-0fd4f66f428f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:c9:ea:89:84:f5:9e:38:4f:d5:07:7d:63:
                    bf:fd:99:42:9a:b0:47:15:cb:58:4b:da:29:fd:34:
                    cf:3f:00:86:eb:27:03:0f:1c:0f:a9:7b:4a:93:44:
                    91:9d:1e:bc:25:77:16:b2:98:53:5f:5c:ff:77:cd:
                    84:1d:8c:bf:1b:75:19:5d:7b:f6:a6:20:04:ff:04:
                    18:28:4a:0b:31:ff:ad:ea:6c:65:da:a5:72:1b:32:
                    e6:97:0f:a0:dc:ca:1a:59:1d:e8:b4:fe:e5:36:46:
                    44:84:56:87:e6:a0:e8:fc:95:31:a0:85:92:00:56:
                    c7:88:89:67:4f:02:68:1e:4e:15:e5:b8:3c:2d:58:
                    48:d8:0c:e1:47:58:9f:85:73:b4:c9:28:65:ae:b0:
                    be:95:0d:f2:97:a1:0d:a3:23:af:56:57:24:e3:a4:
                    9a:ca:d8:3b:57:10:fd:f0:84:21:62:34:64:c2:f1:
                    09:f8:4b:0d:06:d9:e0:2f:96:d9:84:1e:20:38:ae:
                    89:12:04:32:6e:84:ae:53:e7:8f:cc:38:f5:12:8f:
                    19:0d:ff:3e:bb:be:b0:bb:26:2d:2a:b2:06:3c:18:
                    de:17:62:23:8d:5f:a4:c0:25:ef:3b:3e:cf:47:82:
                    b6:1f:f3:44:ff:73:e9:c7:9a:7c:ac:65:a1:5b:39:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:E0:44:1C:8B:0D:DD:48:B7:C7:C7:6E:90:73:58:6C:CE:DF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.198.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:3e:e8:dd:93:4e:7e:5a:fd:30:04:c7:07:72:ff:32:42:
         33:68:f2:3e:3d:55:33:f4:80:a7:a6:a3:11:06:07:33:da:55:
         3e:a5:7c:a3:63:5b:54:33:36:ab:6f:26:14:1f:2c:12:f6:c6:
         0a:79:b0:64:da:41:9a:9e:36:27:5c:f6:f6:9c:b8:63:62:ef:
         da:7c:d5:c4:02:bf:af:ef:cd:dd:81:14:98:53:4a:8a:94:f0:
         ff:87:e8:d9:1c:8d:51:ad:29:01:5b:59:64:9d:3f:4a:f9:fd:
         3d:a6:64:78:a1:9b:af:10:3f:3f:fa:12:f3:b1:8b:80:8a:91:
         52:19:f7:bc:6c:ec:d2:56:0c:0c:2d:27:3b:7b:63:60:1c:2c:
         bf:41:23:5e:f6:a9:eb:fa:85:a4:7f:f1:93:20:61:eb:3a:50:
         38:fd:86:4c:e5:f2:03:6d:3a:bc:37:a9:38:dc:bb:b9:77:98:
         11:2a:82:42:1c:0c:dc:ab:8a:e0:21:ed:f6:d7:e7:e5:44:ec:
         ca:63:d6:b2:f9:dc:49:e3:99:d7:5f:5e:35:e2:8d:07:10:6d:
         28:28:ec:8f:af:13:6d:be:fc:3d:43:7d:d7:33:da:0d:c0:e4:
         15:e1:66:ab:c5:a0:12:94:40:c5:4c:9b:9f:e4:7a:ab:6f:f1:
         30:f2:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:31 2026 by rpki-client