Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc51a0e-ab7a-358f-9f90-b1f03db13d76.roa
File:                     8bc51a0e-ab7a-358f-9f90-b1f03db13d76.roa (raw, json)
Hash identifier:          o8wFEG4bAPoI/gjaz+2YuuIPymQXZ28HCTosVpn+q1I=
Subject key identifier:   E7:97:BD:D4:97:D9:7F:1F:1E:F7:89:0D:EC:20:5E:50:09:99:EC:28
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A750133DFD50331601800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc51a0e-ab7a-358f-9f90-b1f03db13d76.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        73.88.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:75:01:33:df:d5:03:31:60:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=28e94a39-0bf9-44cd-84bd-1ca20d88ac49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:ae:79:87:a8:7d:76:ce:cb:d0:92:98:53:
                    d6:3a:e2:8e:d9:89:e8:82:49:5f:83:f0:b7:cb:b3:
                    9c:24:8a:e9:c7:a1:4d:23:62:e4:fe:74:30:cf:f5:
                    f6:d5:42:18:2a:c8:d1:82:ab:3f:ca:65:2a:79:4d:
                    66:8a:95:24:b9:ac:74:00:2a:80:b1:ed:42:b1:17:
                    c5:7e:7c:80:00:51:ba:3e:41:75:64:82:24:6d:c6:
                    7c:04:80:c7:37:34:48:48:f1:ac:04:df:32:e8:d7:
                    2b:2e:43:29:26:05:6e:3b:47:1a:5f:d0:14:c8:dd:
                    a7:31:a3:fd:e2:76:10:2c:94:71:2f:3c:6f:74:7f:
                    e2:6b:07:c8:33:9a:f8:64:03:1b:ab:4a:50:8c:84:
                    f2:f1:c5:04:3f:24:ea:40:10:84:01:22:9a:52:23:
                    19:19:e8:03:46:16:2d:95:ee:e5:8b:20:fc:0e:31:
                    93:7e:1a:36:c8:02:84:aa:45:cd:94:30:cc:04:5b:
                    cf:66:c7:92:81:63:14:a1:3c:92:9f:7c:00:eb:47:
                    74:0e:fd:f2:37:2c:a8:b3:08:6d:7a:93:1f:cb:eb:
                    8c:0e:63:74:5f:bd:b2:98:b5:9b:47:a9:5f:d7:8d:
                    8d:06:7a:4f:38:bc:60:57:a5:c4:99:68:63:00:7e:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:BD:D4:97:D9:7F:1F:1E:F7:89:0D:EC:20:5E:50:09:99:EC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bc51a0e-ab7a-358f-9f90-b1f03db13d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:c1:4c:5f:f7:a8:9a:34:53:32:06:34:b1:e3:08:99:19:64:
         e9:f9:d9:e5:ae:81:f1:7a:f0:1c:b4:35:47:d5:00:58:7d:c7:
         6d:9c:6f:a6:06:c1:34:53:3d:5c:1e:ab:6f:73:b2:de:4b:2f:
         d6:1f:9b:f3:5b:bb:64:9f:ed:18:3f:5e:df:ec:bb:67:a7:b5:
         6d:f4:ab:0f:ba:1f:8a:a9:00:49:fb:69:d8:06:ae:3d:ea:65:
         c1:d7:f6:df:dc:01:dc:2c:8e:5b:5e:e7:ca:d1:e7:e0:e0:89:
         6c:af:e9:49:72:cf:57:e6:1a:fa:91:c2:a9:1a:ed:b8:cc:db:
         97:44:58:f1:42:fe:7e:a6:e1:5b:96:74:31:e9:2e:66:f4:fa:
         97:bc:f2:44:14:be:be:ab:a7:78:b1:79:43:f5:41:36:b8:2c:
         3c:ce:51:7b:a1:e4:cf:e7:dd:89:8a:f2:5b:8f:19:a3:bd:df:
         44:86:94:c7:30:6d:59:b1:cf:e1:e5:93:e6:95:1f:b0:1f:f3:
         f9:28:d9:0b:98:d9:33:2f:b4:0f:c4:d2:28:0f:bb:17:9e:b0:
         8e:43:db:a6:48:8a:e9:db:e7:42:09:c9:67:de:e6:9b:41:3a:
         23:4a:b8:34:1e:e9:fe:a3:40:60:d4:e7:3f:c2:64:04:3d:de:
         ad:13:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:52 2026 by rpki-client