Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89403b68-adb8-3a94-93d4-c377aed2b263.roa
File:                     89403b68-adb8-3a94-93d4-c377aed2b263.roa (raw, json)
Hash identifier:          ndbdrSBAEcLYuS3qea9mDBZAhiZuBkXLAA1eDnee5KE=
Subject key identifier:   67:77:7C:F0:5F:62:A1:29:0B:36:9C:C4:81:69:D2:C0:1D:4B:A9:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB4F545E8E5E5038531A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89403b68-adb8-3a94-93d4-c377aed2b263.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        73.206.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:4f:54:5e:8e:5e:50:38:53:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=6685486c-3cae-4824-b6e2-354f6caf8dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:fa:35:b0:81:8d:ee:79:4f:9b:96:65:4c:
                    fe:17:89:8c:31:e7:e6:d0:36:e3:7e:11:f3:6b:00:
                    2a:07:37:a5:0d:12:13:9d:77:7a:dc:f0:cc:06:55:
                    24:ad:93:41:e9:7f:fd:77:2c:67:3c:b6:6d:ff:6c:
                    0f:a2:d9:bb:58:0e:fd:be:29:11:0d:b8:9f:a8:29:
                    01:fa:4d:ac:40:e4:c5:55:31:5c:2a:c5:27:62:c1:
                    98:51:d6:4e:07:e4:93:2f:45:d4:1d:6b:53:0b:f1:
                    8d:a5:d5:ae:d1:55:ca:22:2f:da:52:27:3d:c8:62:
                    4f:29:15:86:a3:ff:a3:9a:2d:56:54:55:f4:21:f6:
                    77:4d:ae:18:0d:a0:3b:10:43:28:1e:48:3b:32:5d:
                    28:e1:fd:21:d0:29:c8:a3:38:91:56:df:60:e5:53:
                    44:17:ea:4a:da:1f:80:bf:99:3b:81:e7:04:cc:76:
                    08:10:fa:4e:bc:8a:35:a7:2c:ff:23:1b:7e:fc:93:
                    22:2f:c7:7d:3f:4a:8d:92:13:4d:dd:04:e7:04:90:
                    a2:95:42:89:5b:ef:3a:5a:8e:c2:11:de:d4:49:0c:
                    86:bf:b4:54:ea:42:26:38:fc:81:96:0e:b0:95:15:
                    b5:aa:85:33:79:17:67:00:0e:b2:fa:bf:17:e5:4c:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:7C:F0:5F:62:A1:29:0B:36:9C:C4:81:69:D2:C0:1D:4B:A9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89403b68-adb8-3a94-93d4-c377aed2b263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:33:8a:55:5b:e6:46:3d:c7:46:f6:9e:90:09:45:ec:7f:5e:
         89:a8:cc:e2:2f:32:93:29:ad:f1:e5:f8:79:98:67:3b:84:06:
         75:b5:f1:86:f0:e6:1c:2e:2c:75:92:f4:b2:f4:e9:89:bd:29:
         03:40:38:ff:ad:bc:b6:13:f7:54:78:c9:b8:ff:74:0e:1a:41:
         67:28:b9:24:56:92:62:b4:de:b5:8b:15:ad:ac:45:54:c4:92:
         e6:82:43:cc:c7:74:9e:d2:66:25:2a:b2:f7:03:6d:98:b2:ee:
         26:0e:e3:88:ed:37:bf:04:e3:f8:89:7f:d4:29:9c:0b:28:d0:
         95:b5:c0:c1:1e:f9:48:90:5c:fe:b4:00:2a:f5:14:4c:1a:cc:
         bf:1c:23:09:5f:30:45:05:68:10:bf:d1:ee:86:ea:0b:2a:a0:
         59:4c:11:db:e6:ad:18:10:08:2f:30:df:4d:7b:3c:5e:d3:3b:
         9e:56:9e:c5:d1:b8:d8:dc:50:1b:02:5a:65:88:27:54:dd:6b:
         c0:47:53:2e:d1:a1:15:f0:28:ad:fc:f3:c0:1f:05:e4:8b:08:
         86:2f:f9:b6:ae:71:8f:32:46:19:1e:80:97:1d:e7:18:7b:1d:
         e3:ec:62:8b:98:59:7b:e4:c7:2c:08:f1:ce:f9:50:fe:c5:0f:
         7f:1d:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:46 2026 by rpki-client