Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa
File:                     6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa (raw, json)
Hash identifier:          IDh7S3DnkEO0DIXX7k2vHG43hSpO2Y9nwWDY3BHxSx0=
Subject key identifier:   89:10:68:12:EE:58:E7:0C:C5:6B:6C:0D:07:24:E1:2D:AA:27:06:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BE91BB303FC572E315D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.111.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:e9:1b:b3:03:fc:57:2e:31:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=41307833-57e8-4217-a57c-5598dcc9ddde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:9a:d1:b5:40:60:7f:2b:cd:bc:47:cc:90:
                    aa:2b:09:94:4a:ff:c8:ef:d7:76:3a:41:40:dd:c3:
                    f3:18:66:b9:b8:ea:9c:32:02:0a:12:c1:c9:c1:52:
                    5e:97:41:8f:07:b6:46:fc:30:42:bd:72:64:2d:9e:
                    1a:22:00:dd:e3:de:d9:c8:a0:d6:08:f8:57:c1:19:
                    03:3e:8a:58:3a:8c:3b:75:a2:7d:07:0d:fd:d3:a2:
                    03:58:46:ab:47:4c:e9:b8:f2:59:5e:54:84:f4:13:
                    5d:e0:bf:67:42:d8:16:7a:54:87:4f:1a:f6:70:a6:
                    1f:93:d3:21:40:f8:5f:cb:c4:d0:2e:9c:0b:1e:7d:
                    d6:29:27:d6:0c:84:e0:41:1d:88:96:f3:6f:fc:03:
                    c8:0e:64:47:5f:16:5e:8f:74:f5:ed:e3:e4:37:0a:
                    4e:ce:14:63:6b:d5:4f:8d:98:da:dd:15:14:4d:f9:
                    a2:67:86:ea:80:ee:18:ff:a8:bb:90:90:38:85:9d:
                    df:32:06:f3:40:90:1b:a2:41:a2:d9:3e:8b:e0:7f:
                    ea:64:e5:d7:4d:39:a0:50:2d:ed:de:3e:2d:28:8b:
                    c4:28:8c:e3:df:41:8c:1e:f2:dd:19:f0:35:b3:03:
                    de:8f:18:01:68:c1:39:23:f7:e6:ee:03:55:56:87:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:68:12:EE:58:E7:0C:C5:6B:6C:0D:07:24:E1:2D:AA:27:06:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ff4bf6b-0f7c-34d6-8558-09b06aea6ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:73:70:0d:cc:d5:ff:4a:ab:0f:6d:b7:ba:79:06:c8:77:
         32:ed:7d:29:bd:d9:47:54:c3:be:6d:e5:e7:9c:98:4b:de:cd:
         7d:89:ad:6e:0c:dc:0f:5a:49:f4:ce:3e:5f:85:b6:9e:52:82:
         3b:c5:b1:96:6d:cf:f0:0f:2f:01:39:76:b6:a2:6a:62:e5:a4:
         cd:e8:ae:3d:71:0a:6b:73:b8:30:f0:b0:05:f0:3e:24:11:08:
         b6:40:09:43:a3:c0:ae:b8:9c:62:62:b2:e8:9b:f7:a3:12:85:
         92:2f:18:c3:e5:c4:3f:b5:dc:be:60:37:e4:54:18:3a:4e:3f:
         aa:55:aa:bf:16:ca:7c:28:7d:04:6f:b4:40:c7:e3:4b:f6:4f:
         a1:46:87:69:e4:64:d7:65:36:eb:98:ee:cf:b4:20:12:3b:a4:
         78:4a:59:14:bf:04:9b:b9:f0:87:5e:82:10:4c:dd:7b:44:37:
         2a:56:9e:dd:0f:ae:fb:be:3e:ce:d8:2c:85:be:24:e4:5a:1b:
         d7:fa:f2:6e:c5:db:11:9d:59:a2:00:44:3e:52:18:9b:7c:67:
         96:b8:95:b9:50:8d:89:4d:40:48:75:e7:97:eb:4c:2f:55:3e:
         eb:88:2e:7f:e0:98:91:08:a7:44:e3:28:3e:73:2b:19:59:a3:
         1a:14:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:27 2026 by rpki-client