Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b5dcd0b-1449-3cac-baeb-b69642baa67f.roa
File:                     5b5dcd0b-1449-3cac-baeb-b69642baa67f.roa (raw, json)
Hash identifier:          2bfPw4iY5CDlx4f5gqLmRZhEHDLpRcb3uqww2owUbyo=
Subject key identifier:   74:DD:82:77:02:4C:6D:E6:41:3D:4D:D0:4E:2D:D9:F2:B0:7C:9C:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C3D390ACF12645A9669C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b5dcd0b-1449-3cac-baeb-b69642baa67f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.246.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:3d:39:0a:cf:12:64:5a:96:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=069acc1c-fc71-49bb-9e9c-6aef15eaba02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:c6:de:12:ae:34:d6:15:a8:d2:b0:cd:92:
                    73:ed:0d:2b:84:8d:97:27:d3:4d:18:d3:63:0a:3c:
                    c5:e2:a2:5d:87:d0:ad:54:c3:99:49:8e:31:8d:40:
                    b8:03:7f:78:94:c2:fd:9d:82:bb:63:b9:65:ad:59:
                    f8:75:fa:b1:a3:ac:38:01:26:5b:ef:fd:ce:56:c3:
                    f3:f4:aa:f4:71:df:0f:c3:62:fd:22:13:f6:0d:99:
                    c9:a1:86:8a:5e:f7:2e:8d:fb:81:d3:e5:25:85:b1:
                    3b:d1:5b:e9:2e:04:19:f2:46:7f:8f:14:de:81:bc:
                    da:3a:3f:da:44:5a:70:5e:bb:d5:4c:da:dc:19:58:
                    c1:b5:5d:58:32:49:5d:80:90:e0:93:bb:fb:91:7a:
                    ae:2f:19:1a:67:30:3f:fc:d2:f1:40:1b:a0:96:46:
                    be:b3:af:da:f9:da:65:5e:00:13:40:cb:93:16:d9:
                    3e:8a:aa:56:0c:1d:49:b8:17:d1:93:6a:af:c3:c0:
                    93:95:ad:11:07:e1:65:4f:be:61:ab:bf:4b:d9:8d:
                    9e:1c:0a:9a:f1:fd:c8:04:7b:8e:b2:43:be:0c:e0:
                    16:6a:d9:14:c2:f1:3b:22:cb:34:01:cc:cd:c7:fc:
                    eb:0a:de:33:2d:63:be:a0:5b:c4:4c:97:1c:0f:08:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:82:77:02:4C:6D:E6:41:3D:4D:D0:4E:2D:D9:F2:B0:7C:9C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b5dcd0b-1449-3cac-baeb-b69642baa67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:95:04:07:d0:11:0a:d2:8b:e4:f0:04:65:a5:8d:24:60:48:
         ce:a5:ae:01:ec:2c:13:f7:1c:08:8c:78:25:8e:93:18:5c:58:
         5a:67:65:a6:b6:01:0f:e6:6c:d3:bc:bb:a6:ce:15:a5:c2:49:
         38:07:83:85:50:89:14:54:7d:33:a3:79:de:f2:f3:3f:25:dd:
         b5:3e:d3:fc:96:71:ce:bf:5c:36:c1:e5:8b:80:ad:2a:7b:ff:
         6d:e5:c2:cb:21:71:03:e0:ec:12:ac:d4:f9:ac:4a:52:38:f9:
         71:04:a6:b5:78:dd:71:48:29:6f:da:19:09:9b:66:f8:6b:49:
         5b:05:b9:76:94:14:74:19:07:f7:23:c8:5b:b3:fc:97:d5:64:
         aa:ae:f5:d7:bc:ac:ea:fd:fd:11:b6:f8:f4:a7:5a:2f:ed:84:
         97:2d:2e:ef:22:0c:a1:fc:86:84:20:26:18:77:54:c7:01:5e:
         4e:2a:05:45:4b:6a:e0:29:28:9b:0d:60:c5:6a:b5:86:d9:f0:
         72:44:49:7d:39:60:e2:e6:3b:5f:cf:48:ee:02:53:a3:54:7d:
         bf:48:e0:7b:1a:10:ef:08:65:7b:97:83:1c:78:0d:1a:f6:ad:
         6b:9f:bb:1f:e3:5c:f0:bb:f0:c3:07:ea:d1:4b:21:d2:d4:00:
         28:3d:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:32 2026 by rpki-client