Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8616f2b3-197b-358a-b5ca-b8c68191f41b.roa
File:                     8616f2b3-197b-358a-b5ca-b8c68191f41b.roa (raw, json)
Hash identifier:          Z0yEPhz5H7s4/BpAHpj7IFnJ3eENZWtZWAqUkLwJUhY=
Subject key identifier:   84:98:D1:D0:21:2D:C8:1B:7A:EB:E0:96:7C:A2:CF:44:D7:F4:52:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9537E8309076F086810C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8616f2b3-197b-358a-b5ca-b8c68191f41b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        73.113.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:53:7e:83:09:07:6f:08:68:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=869b0c58-1148-453e-9b08-bf2c4bdc99c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:85:6f:28:f8:2a:75:e6:7f:0c:72:1d:41:
                    b5:e0:95:de:e1:db:be:3e:be:6c:4f:7f:37:b0:f2:
                    81:9a:1a:8d:e2:3e:7c:9f:3b:cf:ad:00:d1:43:31:
                    6e:dc:f8:75:61:57:b4:ee:63:96:f7:a8:5f:3c:ef:
                    5f:d2:f8:72:6e:16:ca:a8:c3:7a:e0:be:00:4e:2b:
                    e6:7e:f6:21:f9:fb:49:23:25:12:fe:e2:48:d1:a1:
                    02:c0:e2:d1:e0:75:13:0e:75:71:30:0c:8c:56:a0:
                    b1:9f:86:9d:3a:1a:23:7d:37:ce:7d:71:c7:44:47:
                    ac:3f:1c:a7:44:b7:45:c8:0c:b0:ef:11:28:d0:19:
                    92:0b:18:3e:d1:7e:9a:a8:65:76:a6:a6:71:77:a2:
                    f9:b4:e8:fc:76:17:c9:79:d7:cb:c3:0c:c1:f8:6b:
                    8d:7c:3a:22:ec:80:16:66:56:f8:c4:0d:61:ea:36:
                    ce:c4:76:82:86:3e:d9:c0:0e:2b:d4:3b:b5:be:b7:
                    25:ab:dd:a5:6a:65:00:d0:41:a3:32:d0:c2:04:d8:
                    03:4c:ce:ea:3e:c4:56:1e:11:f7:10:e8:f5:7f:f9:
                    49:28:4b:b7:e3:0b:54:0b:1c:57:06:42:dc:79:43:
                    1f:21:07:53:4e:cf:8d:13:d6:af:26:b1:21:78:af:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:98:D1:D0:21:2D:C8:1B:7A:EB:E0:96:7C:A2:CF:44:D7:F4:52:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8616f2b3-197b-358a-b5ca-b8c68191f41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.113.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:13:2b:75:c9:f7:ce:55:10:26:7a:9e:56:54:25:37:d0:4d:
         04:e4:09:82:da:4a:f5:d8:b7:e5:63:4a:d5:3b:18:4b:e5:22:
         63:8e:0b:5f:c8:f7:af:4c:79:69:77:e6:15:9a:8c:8e:2c:4e:
         58:b5:e1:25:2d:94:95:09:4e:60:1d:54:1d:59:06:c8:79:66:
         98:6b:94:19:d8:21:89:2e:9c:46:71:17:46:3e:32:23:33:5b:
         4e:8c:9a:f0:18:83:b3:44:50:f1:5a:e7:b5:36:c6:7f:d0:a7:
         fc:99:92:41:47:c2:19:83:02:5d:d9:6a:65:22:16:2c:3d:0b:
         39:43:22:24:c7:36:89:5f:29:dc:b8:aa:10:8a:13:e8:35:18:
         68:48:0e:a7:9f:95:98:e2:71:a7:69:5a:1d:0d:a1:52:cb:ce:
         3f:c4:8e:0e:a1:bf:81:ef:e5:b3:74:0b:c2:1f:5f:38:33:7b:
         19:b1:23:30:35:58:7f:c2:1c:5c:de:0c:e0:76:49:59:1f:da:
         e3:b0:18:c0:89:07:d9:d5:19:7f:50:d9:72:24:0d:74:f3:1a:
         ab:5e:63:df:ed:c4:25:6e:96:24:6d:85:9d:ce:9f:6f:3f:52:
         fb:60:dc:a8:32:b7:c6:bb:bc:59:e2:02:71:a6:66:89:f5:b8:
         eb:af:33:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96VN+gwkHbwhoEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
ODY5YjBjNTgtMTE0OC00NTNlLTliMDgtYmYyYzRiZGM5OWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qFbyj4KnXmfwxyHUG14JXe4du+Pr5sT383
sPKBmhqN4j58nzvPrQDRQzFu3Ph1YVe07mOW96hfPO9f0vhybhbKqMN64L4ATivm
fvYh+ftJIyUS/uJI0aECwOLR4HUTDnVxMAyMVqCxn4adOhojfTfOfXHHREesPxyn
RLdFyAyw7xEo0BmSCxg+0X6aqGV2pqZxd6L5tOj8dhfJedfLwwzB+GuNfDoi7IAW
Zlb4xA1h6jbOxHaChj7ZwA4r1Du1vrclq92lamUA0EGjMtDCBNgDTM7qPsRWHhH3
EOj1f/lJKEu34wtUCxxXBkLceUMfIQdTTs+NE9avJrEheK98hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISY0dAhLcgbeuvglnyiz0TX9FL2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODYxNmYyYjMtMTk3Yi0z
NThhLWI1Y2EtYjhjNjgxOTFmNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASXF7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYTK3XJ985VECZ6nlZUJTfQTQTkCYLaSvXYt+VjStU7GEvlImOOC1/I
969MeWl35hWajI4sTli14SUtlJUJTmAdVB1ZBsh5ZphrlBnYIYkunEZxF0Y+MiMz
W06MmvAYg7NEUPFa57U2xn/Qp/yZkkFHwhmDAl3ZamUiFiw9CzlDIiTHNolfKdy4
qhCKE+g1GGhIDqeflZjicadpWh0NoVLLzj/Ejg6hv4Hv5bN0C8IfXzgzexmxIzA1
WH/CHFzeDOB2SVkf2uOwGMCJB9nVGX9Q2XIkDXTzGqteY9/txCVuliRthZ3On28/
Uvtg3Kgyt8a7vFniAnGmZon1uOuvM4M=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:42:35 2026 by rpki-client