Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6172b44e-94f8-3888-99dd-dc8e8fb5efd4.roa
File:                     6172b44e-94f8-3888-99dd-dc8e8fb5efd4.roa (raw, json)
Hash identifier:          tLEtSkrXmZAh6ScsLI+hdFYMIHrHYYlqxB8q/9Zj49k=
Subject key identifier:   DF:FE:E0:FD:EF:F4:E4:A6:51:C4:E5:C6:B9:CB:EB:0C:07:6F:84:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA794CEEA5FE422AC886DD480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6172b44e-94f8-3888-99dd-dc8e8fb5efd4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33661
IP address blocks:        73.27.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:ce:ea:5f:e4:22:ac:88:6d:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0b624065-f6aa-47c0-a604-f7ef1bf6f98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:57:f9:9c:cd:86:a7:52:1b:a4:fd:4c:83:
                    ae:c9:73:d8:a2:6b:76:64:80:cb:e8:66:04:a6:02:
                    b4:ff:c6:83:7d:5f:bb:cf:39:88:29:51:8b:d0:89:
                    3c:0d:f9:12:41:d0:40:bb:5b:12:81:ef:0a:79:05:
                    42:95:8d:a1:0a:97:f8:03:a1:a5:f7:32:24:65:15:
                    6f:5d:a8:46:e4:d7:44:53:5f:f4:57:9d:9d:92:d8:
                    6a:47:57:09:92:b8:e3:1f:3f:2c:f7:7f:32:64:5a:
                    2f:38:a1:7f:c7:c5:09:77:be:06:b6:e2:87:43:5a:
                    b9:1a:27:5d:15:b1:f7:c2:a7:a2:f8:bd:14:70:00:
                    45:5a:c4:a7:d1:52:35:1d:b2:78:d5:47:e8:99:55:
                    f2:0d:fe:30:d1:d5:86:52:99:a8:c0:bf:ea:b5:9a:
                    fc:6e:e8:ea:7a:d8:e1:45:50:8f:08:3a:0e:0c:b2:
                    5d:d7:de:05:34:56:30:46:67:d5:e5:58:fd:c4:07:
                    25:e5:b2:47:b8:22:e4:44:52:3d:fc:6e:70:0a:99:
                    95:e9:11:5f:e3:9c:f9:56:53:ca:7c:6f:5a:05:33:
                    d3:2f:01:68:7a:f2:3b:7d:bb:06:07:90:06:98:c4:
                    fb:8b:4c:9d:2e:2c:17:16:29:fc:e3:38:0e:e2:6b:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:E0:FD:EF:F4:E4:A6:51:C4:E5:C6:B9:CB:EB:0C:07:6F:84:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6172b44e-94f8-3888-99dd-dc8e8fb5efd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:34:23:27:7c:c2:78:b8:67:fc:52:fb:27:cd:23:20:31:4f:
         fd:01:96:21:ce:28:0b:a1:7e:46:77:8f:2e:8c:4e:49:a2:47:
         e1:5c:4e:2c:9f:52:e9:b6:06:72:79:75:7d:fa:e5:59:d1:1a:
         f2:6b:31:e2:cd:a4:3e:8d:5a:b4:20:e2:52:17:8f:b2:92:a3:
         09:c5:da:18:32:2d:03:91:d9:b5:97:b5:d5:0d:aa:08:10:8a:
         dc:ff:1d:04:e1:89:5d:08:32:31:ac:64:ad:da:d7:bb:1f:9c:
         8d:04:a2:40:9a:22:04:af:86:b7:ad:6f:3e:72:b6:f2:b0:3f:
         9e:4b:12:39:79:c8:b3:59:49:b7:33:d5:4f:ca:8e:8b:ed:c0:
         55:42:62:47:8f:a2:1c:f4:f3:50:0d:44:d9:09:2c:6d:f8:b9:
         51:de:ee:6b:98:dd:be:35:15:75:96:34:22:9d:dc:46:02:64:
         a4:7d:6e:fc:9a:29:0f:e6:d3:9d:c4:52:e3:88:e8:74:22:15:
         ca:b3:17:6d:d7:fb:4a:54:35:d2:00:58:75:59:1c:04:2b:37:
         30:23:09:0a:90:e2:2c:d9:57:6e:61:1d:62:4e:7b:1f:b2:10:
         49:f6:ae:f6:68:aa:db:ae:3d:4a:08:cc:e5:0c:31:71:f8:3f:
         7f:27:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:31 2026 by rpki-client