Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63e8f9a3-f1a4-3dca-8869-61e3419ec2bf.roa
File:                     63e8f9a3-f1a4-3dca-8869-61e3419ec2bf.roa (raw, json)
Hash identifier:          G0MYbA+8SV2IUoJa+1/zTmqsuY7a+LN7mGxYJrI8mlw=
Subject key identifier:   38:1C:D8:52:3F:FE:B9:CB:8C:D0:DE:B7:39:97:BA:B9:41:CD:8B:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE584F4C94FDCECD2EB22500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63e8f9a3-f1a4-3dca-8869-61e3419ec2bf.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.211.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:4f:4c:94:fd:ce:cd:2e:b2:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=601e6a7c-72e5-48d8-ba0a-901f229eeee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:52:3b:b3:da:ad:b2:f2:55:05:fb:a7:29:
                    d3:45:8a:57:1b:a3:91:19:81:32:5d:25:a0:68:9f:
                    0d:9f:f0:e0:6b:61:fb:b3:64:14:c9:bd:eb:8b:db:
                    10:2f:e9:1c:c8:47:c8:d7:38:5e:26:d0:0d:f0:0a:
                    92:a2:67:a8:a5:29:54:45:e3:a9:e6:c4:28:26:a2:
                    5c:45:40:08:81:4a:ae:0f:93:79:ea:e7:35:6a:a2:
                    ac:3b:df:46:a7:b6:d5:84:21:a6:2a:4a:e2:cb:bb:
                    2e:c1:80:db:88:3e:6e:47:4c:49:c2:1e:8e:2e:47:
                    65:68:b2:b9:19:2a:63:8e:23:03:db:cc:93:01:48:
                    81:f4:a5:45:03:d7:9d:88:ce:fd:14:ac:09:1d:58:
                    ea:f2:a1:1c:01:a7:e0:c8:10:c4:aa:e9:4f:15:8e:
                    60:f1:83:97:90:43:d1:25:b5:5d:ad:3f:a3:6d:2e:
                    63:9a:68:53:d3:e0:59:da:b6:21:30:47:71:99:82:
                    a8:69:0c:c5:ea:b6:78:2f:66:34:aa:49:39:a2:64:
                    19:32:60:44:98:6e:a6:97:90:e9:d3:7b:76:9b:32:
                    3a:03:a8:1f:e5:75:e2:82:e2:5f:26:c6:c5:fb:dd:
                    1c:45:e1:34:2a:15:35:93:8e:04:69:39:09:44:8c:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1C:D8:52:3F:FE:B9:CB:8C:D0:DE:B7:39:97:BA:B9:41:CD:8B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63e8f9a3-f1a4-3dca-8869-61e3419ec2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fd:d0:91:99:7e:d2:11:d5:ee:10:33:81:82:a1:34:f0:25:
         ad:52:4c:08:e7:2e:93:0f:65:23:eb:f6:87:3f:96:b2:a5:78:
         c2:ca:87:ff:e7:26:ae:85:de:fb:4f:67:c1:c6:89:b3:63:c3:
         c1:64:f0:85:32:95:8c:2e:c3:81:81:4c:6d:da:ff:56:35:37:
         0a:8d:03:97:79:98:84:9b:2b:60:f1:80:40:23:92:40:b0:c5:
         eb:4c:fc:42:23:71:9e:fd:59:c9:e0:81:85:cf:29:8a:27:22:
         fe:c3:ae:d9:aa:78:7b:7a:fa:e0:ae:01:b3:6f:74:02:cd:e0:
         4f:23:60:4e:d8:7b:04:f2:29:c3:79:fa:73:89:77:e6:0b:a7:
         94:2c:9f:ca:11:ae:ae:fb:10:02:07:b3:bb:b3:eb:78:61:d1:
         dc:69:76:86:ae:78:68:8e:e4:b0:6a:30:be:83:cf:c4:78:44:
         1e:94:41:e7:ba:41:9f:37:71:1f:3d:00:8e:46:e4:6c:d4:af:
         74:0e:bb:3f:de:cf:9e:d5:ea:0e:0e:bf:9c:8c:90:7f:6d:b3:
         27:4e:83:b3:d4:4b:f0:8b:3a:c4:9c:60:19:ee:b7:bb:23:bb:
         a2:b7:05:61:8a:7d:87:68:75:65:6f:6f:87:c7:12:48:f2:36:
         6b:f7:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:08 2026 by rpki-client