Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da2d6-7c11-3005-ab09-506bbabf52ba.roa
File:                     645da2d6-7c11-3005-ab09-506bbabf52ba.roa (raw, json)
Hash identifier:          bjb7vxBAXZQUtWBfi1Pfiz4sljvV9E7JLTwA0JLaP4U=
Subject key identifier:   D7:48:E1:9D:58:21:CB:B4:2A:22:31:30:0A:AE:AB:C3:7F:4B:EB:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DCC7FCFCFEA33CBDBE760
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da2d6-7c11-3005-ab09-506bbabf52ba.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.71.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:cc:7f:cf:cf:ea:33:cb:db:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=7bf4c53b-4904-4340-92e5-a429712c1671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:3c:1b:29:41:0b:26:3f:ea:df:14:62:3a:
                    4e:7b:79:23:df:4f:4e:d7:23:45:50:7d:7d:aa:29:
                    c3:76:d4:72:cc:3d:4d:7d:28:34:ee:bb:16:26:c7:
                    64:b8:fa:39:51:d5:da:2b:97:ee:73:80:5e:f6:81:
                    12:87:4d:de:75:5a:06:87:97:e2:b1:69:df:30:65:
                    a6:ee:b5:45:31:ec:20:80:1d:08:e1:7b:f2:db:6d:
                    dd:77:c2:d3:7a:cc:9d:9a:cb:66:55:9f:1f:64:0d:
                    78:1f:57:eb:5e:bf:eb:db:23:da:30:e2:35:43:0f:
                    4a:41:75:79:8e:fe:06:0f:57:fc:19:7e:7a:d2:f3:
                    03:61:a3:af:99:1d:6f:04:b0:ba:74:a5:52:87:cf:
                    b1:97:bc:d4:6a:e0:09:0d:96:63:f5:ad:29:09:cb:
                    82:ef:f5:38:f4:46:d4:c1:2e:8c:cf:52:33:57:82:
                    9d:bd:a1:70:d2:d1:1a:73:2b:a3:66:17:54:4b:e0:
                    bb:0c:3a:92:cb:6f:4e:01:2d:7c:2f:51:e5:79:5a:
                    9e:29:5b:ca:38:ac:b6:a1:d6:8b:e8:87:e0:96:27:
                    45:04:2c:cb:5f:6a:a9:19:a0:2a:10:88:dc:77:bf:
                    50:78:bf:5b:83:3a:62:a7:6c:95:74:3a:46:bc:73:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:E1:9D:58:21:CB:B4:2A:22:31:30:0A:AE:AB:C3:7F:4B:EB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da2d6-7c11-3005-ab09-506bbabf52ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:18:34:fd:b0:b1:77:fc:e6:88:b7:0f:2d:97:1a:5b:60:
         c2:bb:0a:ba:f4:70:93:cb:f3:c2:c3:38:56:73:af:d9:25:83:
         bc:ce:16:4a:e8:b0:b5:6c:80:11:9f:07:db:de:52:74:40:39:
         2a:e6:52:61:84:d3:76:81:7e:85:e0:e4:75:87:10:cd:89:bb:
         52:51:77:7e:fd:fb:23:98:75:39:df:86:70:4f:d4:5a:8f:f8:
         27:f9:83:dc:55:04:42:6f:34:52:db:78:22:47:79:0a:e8:a6:
         eb:a2:73:56:1f:e0:92:c0:81:6d:cc:e9:74:2c:48:16:30:82:
         40:c7:48:54:1f:53:62:db:67:14:ac:e9:6f:2d:20:65:43:f4:
         4b:66:6f:d0:f1:fd:35:ca:1a:3b:6c:7d:61:b8:7e:85:47:7c:
         45:93:83:46:ba:61:5f:8c:26:4d:6b:c1:70:f7:6a:3b:7f:7c:
         a1:38:73:6d:71:eb:24:fd:54:63:42:7f:83:15:d8:e0:19:d1:
         bf:54:4a:9d:08:f7:02:91:3a:99:7a:b9:17:10:4e:85:8a:06:
         e3:c8:e5:29:65:03:73:2f:65:b8:bb:63:9d:8f:7f:f8:5a:51:
         93:f2:1c:20:7e:f6:93:f2:e6:3a:2b:c7:1b:c2:b9:fa:98:7c:
         f9:ba:b5:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXcx/z8/qM8vb52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
N2JmNGM1M2ItNDkwNC00MzQwLTkyZTUtYTQyOTcxMmMxNjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8E8GylBCyY/6t8UYjpOe3kj309O1yNFUH19
qinDdtRyzD1NfSg07rsWJsdkuPo5UdXaK5fuc4Be9oESh03edVoGh5fisWnfMGWm
7rVFMewggB0I4Xvy223dd8LTesydmstmVZ8fZA14H1frXr/r2yPaMOI1Qw9KQXV5
jv4GD1f8GX560vMDYaOvmR1vBLC6dKVSh8+xl7zUauAJDZZj9a0pCcuC7/U49EbU
wS6Mz1IzV4KdvaFw0tEacyujZhdUS+C7DDqSy29OAS18L1HleVqeKVvKOKy2odaL
6IfglidFBCzLX2qpGaAqEIjcd79QeL9bgzpip2yVdDpGvHMAbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdI4Z1YIcu0KiIxMAquq8N/S+tMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ1ZGEyZDYtN2MxMS0z
MDA1LWFiMDktNTA2YmJhYmY1MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUfPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkrGDT9sLF3/OaItw8tlxpbYMK7Crr0cJPL88LDOFZzr9klg7zOFkro
sLVsgBGfB9veUnRAOSrmUmGE03aBfoXg5HWHEM2Ju1JRd379+yOYdTnfhnBP1FqP
+Cf5g9xVBEJvNFLbeCJHeQropuuic1Yf4JLAgW3M6XQsSBYwgkDHSFQfU2LbZxSs
6W8tIGVD9Etmb9Dx/TXKGjtsfWG4foVHfEWTg0a6YV+MJk1rwXD3ajt/fKE4c21x
6yT9VGNCf4MV2OAZ0b9USp0I9wKROpl6uRcQToWKBuPI5SllA3MvZbi7Y52Pf/ha
UZPyHCB+9pPy5jorxxvCufqYfPm6tUo=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:48 2026 by rpki-client