Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1daec4-11d0-34d2-943d-0b00fccc9b31.roa
File:                     5d1daec4-11d0-34d2-943d-0b00fccc9b31.roa (raw, json)
Hash identifier:          HKbh8N9O7pKqP4o7QFqfPZ11g5MvhW9Al77O1LufvMM=
Subject key identifier:   13:70:6C:7F:93:26:6D:5B:7E:5F:7A:C8:7C:BC:F7:D7:38:20:3D:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58D11D8DE25BCBE3ECE7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1daec4-11d0-34d2-943d-0b00fccc9b31.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.158.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:d1:1d:8d:e2:5b:cb:e3:ec:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5e1ea447-3ae8-4fc8-9fdc-0ac6978de66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:e7:f9:23:3a:4f:eb:54:fb:5b:2b:f9:69:
                    0b:15:02:94:c3:09:7d:0c:20:92:7c:4b:89:c6:f5:
                    bf:2c:23:9d:95:d1:a8:46:77:5b:13:55:52:19:03:
                    51:dd:1f:81:f8:dc:7b:6f:d0:f2:82:08:85:38:0d:
                    90:3c:ee:19:15:78:7e:e3:c4:98:eb:86:2c:53:c8:
                    99:91:ff:01:15:da:ab:9b:da:4b:a7:7b:cc:ec:6a:
                    44:8b:f5:6e:c2:80:20:11:39:ce:71:48:a3:40:1f:
                    8a:ec:38:53:e5:10:a7:fe:c9:e8:76:75:ac:85:2f:
                    48:39:b8:6d:12:2e:26:ef:d9:9a:4f:7f:6c:47:cd:
                    2e:4d:ee:e5:db:9a:39:2f:72:5d:9c:27:6e:cc:ea:
                    31:96:4b:66:6f:0d:d3:ca:fd:95:be:80:ba:41:f0:
                    99:b6:06:52:fb:d1:f5:67:54:2a:2f:e3:c5:6d:fc:
                    58:f3:66:37:ab:15:98:33:47:1d:fe:02:cc:3c:bf:
                    f1:69:9f:bf:f7:d8:3e:67:23:98:17:db:60:f7:1e:
                    55:f5:e0:fe:92:ad:7f:e8:ac:cb:4c:c1:a0:22:9c:
                    c1:74:92:26:e1:74:04:46:89:e1:7d:1b:ea:79:99:
                    cf:88:24:98:a7:38:99:2c:ab:cd:54:c7:84:60:7f:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:6C:7F:93:26:6D:5B:7E:5F:7A:C8:7C:BC:F7:D7:38:20:3D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1daec4-11d0-34d2-943d-0b00fccc9b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:bd:1b:84:e9:a3:a5:ea:21:84:9b:21:4f:71:91:b0:4e:
         41:ea:6e:fe:0f:64:c0:13:dd:9b:f6:ba:5e:f8:88:91:3e:02:
         d7:60:15:42:dd:1e:36:e9:c0:61:1d:ab:34:98:fe:04:62:7d:
         34:6e:15:dd:78:f6:d9:9b:d3:6c:c5:70:ee:f2:57:2a:2c:45:
         a4:14:3c:6f:52:b0:65:06:64:4d:17:45:74:10:08:fa:2b:25:
         1d:16:a2:10:21:ac:33:05:8b:7e:bc:4e:51:3e:31:a3:7c:be:
         f0:2b:fd:a3:1c:b9:96:99:5c:8d:f3:f3:c4:dc:b7:2e:97:49:
         6e:bc:7e:51:9a:93:b2:2c:5b:df:f8:ed:28:de:95:d0:e2:c2:
         30:43:41:39:73:4c:69:9c:b1:f4:a8:80:14:f9:da:e6:5b:50:
         31:d8:08:d7:96:8e:a6:a4:7d:b1:c9:cf:29:5e:0e:93:2b:09:
         b3:e4:7c:a7:79:c2:48:23:e1:3e:20:a4:11:5c:6b:82:85:07:
         a4:8d:0a:5b:88:21:66:29:8d:5f:17:9d:39:b6:2d:49:0d:8c:
         da:97:a6:cf:28:00:3b:30:0f:f4:d3:48:a0:9d:ed:46:21:6e:
         84:3b:03:9b:4c:cc:7b:74:c9:ff:87:5b:92:62:33:33:7c:bc:
         2e:ba:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:30:43 2026 by rpki-client