Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7082a1ec-5ca3-38a7-90ab-14629d805910.roa
File:                     7082a1ec-5ca3-38a7-90ab-14629d805910.roa (raw, json)
Hash identifier:          fkMWR9KDQd3kzxwhAHCR5kCdIru5GxQGVJXP3Ln0Za4=
Subject key identifier:   C1:27:CF:5A:DB:D5:47:E3:40:F5:87:1C:BF:CC:3F:21:7E:B1:0F:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DA735F8348C37449CD240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7082a1ec-5ca3-38a7-90ab-14629d805910.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.223.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:a7:35:f8:34:8c:37:44:9c:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=f099b39f-bed4-413b-aaf3-ea3f094eda76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:c5:be:d5:e7:3e:2c:c1:32:3b:ef:2e:47:
                    11:b1:b2:35:56:65:b2:0e:ad:64:7b:74:21:0b:99:
                    f5:11:df:b7:ff:2f:49:fd:48:80:a4:f5:1b:7d:c8:
                    48:c4:c5:43:74:8f:0c:24:5c:55:ee:a0:86:ae:6d:
                    27:33:11:92:c0:d6:fb:4d:be:41:86:a5:1e:a8:cf:
                    20:51:4f:67:68:48:de:ca:72:33:be:d3:e2:68:7f:
                    48:e5:17:32:b1:a7:ab:4d:15:14:f3:9b:fc:a4:4f:
                    1d:f8:4c:ee:59:6f:bc:ad:9f:52:55:9a:aa:c7:c5:
                    6c:b2:a3:55:4f:37:71:ee:20:8c:5c:d5:5b:31:33:
                    35:09:54:91:1e:cd:0a:43:66:62:6e:f7:b8:fe:a6:
                    53:f7:d3:9b:63:5e:ac:99:b0:0a:23:fa:4f:ad:70:
                    f6:54:a7:66:aa:f9:39:ce:29:f9:84:e0:f5:e4:8e:
                    20:66:a6:7c:e2:84:fa:31:d3:f9:21:21:27:97:c4:
                    8d:4e:f3:ab:ca:88:11:80:62:a1:48:0f:4b:66:1d:
                    aa:04:e7:88:51:08:b3:fb:ec:b6:df:90:90:20:98:
                    70:cf:d0:d3:17:c3:a5:39:68:e9:a5:66:f9:bb:a3:
                    8e:1b:38:84:48:23:49:c5:fd:f9:3a:7a:37:46:13:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:CF:5A:DB:D5:47:E3:40:F5:87:1C:BF:CC:3F:21:7E:B1:0F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7082a1ec-5ca3-38a7-90ab-14629d805910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.223.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:93:7d:fb:34:de:1a:54:89:cf:53:66:1d:8d:ac:3f:78:
         0a:d1:0b:08:11:83:4f:1a:06:5e:6a:c8:ec:38:09:9d:0a:5f:
         9e:88:66:e8:a1:a6:35:5b:fb:e5:bc:a5:b7:0f:cf:7b:3b:b8:
         9b:20:5c:64:fc:30:0c:bb:73:27:60:dc:1b:ad:a3:b1:07:9e:
         d6:d7:af:ac:5c:37:b1:4e:44:6c:fd:d8:7e:8d:98:2b:69:b8:
         d2:a1:93:68:16:db:18:9c:80:6b:e3:b7:f3:16:8c:8f:e9:fd:
         b9:c5:ec:9d:d3:f8:8f:a9:b0:a0:f8:e0:ea:94:e5:aa:fd:cf:
         e0:01:0c:5a:44:3c:f6:f3:ea:df:49:8e:4a:a9:fc:22:2b:91:
         b5:d7:d6:f6:bb:ca:fd:71:94:80:70:50:b2:6c:f6:51:62:46:
         0c:43:a6:f9:e9:16:22:e0:03:46:79:1f:a7:63:ff:c4:bd:8e:
         48:2d:9a:71:f4:8f:e9:45:8a:a2:17:f0:5a:97:6f:86:c1:18:
         dd:7e:b1:31:98:ee:6c:b6:31:09:49:8c:f5:2c:ec:d1:39:d8:
         d7:87:f9:ba:42:a5:4c:74:4d:40:b8:1a:4a:2a:a5:52:e0:24:
         87:95:cb:88:f0:9b:a8:6c:78:3d:49:ac:d7:ee:04:b1:f2:80:
         af:93:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:30 2026 by rpki-client