Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b3ed68-d6ee-3514-8ef7-6ebdcf240db8.roa
File:                     76b3ed68-d6ee-3514-8ef7-6ebdcf240db8.roa (raw, json)
Hash identifier:          Q8XwL6+NS2DhFx1PoaSXPmebM1w9iDI3DgqjY7gwO1I=
Subject key identifier:   CF:02:FC:C7:6D:1B:CF:E6:3E:DC:56:65:B9:9E:BB:B1:A5:A1:D8:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58CC71B625D73F57ADE300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b3ed68-d6ee-3514-8ef7-6ebdcf240db8.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.15.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:cc:71:b6:25:d7:3f:57:ad:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4cb349b4-39e7-470f-abab-d9e4330d4653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:62:83:d2:fe:1f:de:15:ea:2c:90:42:4d:
                    3a:2d:86:ab:da:1e:81:c2:18:89:d0:8d:53:e6:4b:
                    05:3f:45:b2:a8:3d:1f:76:83:a8:29:ae:2e:e8:b4:
                    44:65:7a:cb:3d:3e:8f:fc:a1:34:0c:e4:a6:a7:35:
                    10:18:23:46:e2:03:b3:d0:5d:91:42:1c:ba:8f:dd:
                    38:c5:3c:e0:a7:b3:cf:fb:86:5f:8b:ac:f3:43:0e:
                    e2:b1:72:bb:81:1d:97:a6:cc:2a:45:f8:9f:dc:19:
                    0c:fd:ff:68:7b:25:a9:86:50:d2:5d:f0:42:49:7d:
                    09:4f:c6:de:9a:5e:71:7a:48:90:0e:9e:01:4c:6f:
                    93:1f:4e:a3:e0:78:28:62:24:2a:ff:db:7e:71:74:
                    19:9e:a9:28:1a:d2:17:03:73:67:e3:33:e5:81:34:
                    a1:53:89:c5:69:5a:37:90:21:e1:b9:d7:f0:02:28:
                    6b:7e:48:6e:8b:68:43:4e:10:68:64:b5:0c:9e:6f:
                    7c:99:23:da:fc:5e:0c:57:20:f0:ca:58:b9:c5:84:
                    c8:ae:36:c3:ae:4b:49:49:43:b3:35:53:9e:30:12:
                    7d:96:d1:16:95:5d:cb:2c:65:5f:bd:e7:20:94:e2:
                    76:b3:1f:8f:35:29:22:02:d3:e7:6c:96:01:8e:2c:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:FC:C7:6D:1B:CF:E6:3E:DC:56:65:B9:9E:BB:B1:A5:A1:D8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b3ed68-d6ee-3514-8ef7-6ebdcf240db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:71:35:ab:b5:f7:a2:3a:c6:9b:51:7b:46:d0:f4:80:49:
         0a:1c:3d:66:a8:a2:39:71:81:45:1e:3e:4a:b3:79:87:80:86:
         b3:c6:65:4d:ee:25:52:54:24:18:17:08:4a:83:d7:de:72:32:
         91:66:3c:ec:ef:86:f3:29:42:71:3f:70:26:f4:87:4d:3e:0b:
         69:2a:81:69:04:f7:de:78:7c:6e:c2:5a:7b:6c:d1:93:de:d1:
         d7:25:7c:36:9a:e6:f0:e4:23:0f:91:78:4f:c8:35:b9:cc:95:
         43:23:ad:32:9c:eb:c3:24:f4:1f:7c:47:88:86:d4:27:1b:07:
         4a:91:30:08:56:2c:fb:9e:f0:8d:fb:0b:75:b4:ac:11:c3:b9:
         ad:81:bd:a2:e2:0e:ce:9e:e9:40:34:d2:1f:65:ff:12:92:5e:
         bc:2c:1a:70:7b:c0:1b:86:eb:21:9d:00:5d:c9:c0:2a:84:c2:
         51:61:a8:b2:22:b3:b1:af:a1:62:95:eb:bd:8e:98:e7:b6:3b:
         48:be:70:09:93:99:d5:ff:91:03:8d:93:78:65:5e:01:01:8d:
         6c:40:0a:8b:c3:10:f5:03:2e:83:e7:12:5e:73:9d:65:f4:be:
         a4:3b:a7:ce:b9:8c:7a:87:7c:27:d3:6e:45:c8:87:b7:71:b1:
         23:ef:12:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMxxtiXXP1et4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NGNiMzQ5YjQtMzllNy00NzBmLWFiYWItZDllNDMzMGQ0NjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLRig9L+H94V6iyQQk06LYar2h6BwhiJ0I1T
5ksFP0WyqD0fdoOoKa4u6LREZXrLPT6P/KE0DOSmpzUQGCNG4gOz0F2RQhy6j904
xTzgp7PP+4Zfi6zzQw7isXK7gR2XpswqRfif3BkM/f9oeyWphlDSXfBCSX0JT8be
ml5xekiQDp4BTG+TH06j4HgoYiQq/9t+cXQZnqkoGtIXA3Nn4zPlgTShU4nFaVo3
kCHhudfwAihrfkhui2hDThBoZLUMnm98mSPa/F4MVyDwyli5xYTIrjbDrktJSUOz
NVOeMBJ9ltEWlV3LLGVfvecglOJ2sx+PNSkiAtPnbJYBjiyLdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8C/MdtG8/mPtxWZbmeu7GlodhCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZiM2VkNjgtZDZlZS0z
NTE0LThlZjctNmViZGNmMjQwZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQ+6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElecTWrtfeiOsabUXtG0PSASQocPWaoojlxgUUePkqzeYeAhrPGZU3u
JVJUJBgXCEqD195yMpFmPOzvhvMpQnE/cCb0h00+C2kqgWkE9954fG7CWnts0ZPe
0dclfDaa5vDkIw+ReE/INbnMlUMjrTKc68Mk9B98R4iG1CcbB0qRMAhWLPue8I37
C3W0rBHDua2BvaLiDs6e6UA00h9l/xKSXrwsGnB7wBuG6yGdAF3JwCqEwlFhqLIi
s7GvoWKV672OmOe2O0i+cAmTmdX/kQONk3hlXgEBjWxACovDEPUDLoPnEl5znWX0
vqQ7p865jHqHfCfTbkXIh7dxsSPvEiA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:53 2026 by rpki-client