Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8c3e5a-dd68-3fdf-a83a-95985360f151.roa
File:                     8c8c3e5a-dd68-3fdf-a83a-95985360f151.roa (raw, json)
Hash identifier:          hUuF34CUahN4HDTm+fsRTi7BnwO+Kc67JuIVbUK/ivw=
Subject key identifier:   38:1C:12:EC:61:67:CF:83:42:F1:2B:D5:AE:7C:6B:93:B9:5B:3B:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EA5727AE1F69740101000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8c3e5a-dd68-3fdf-a83a-95985360f151.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.178.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:a5:72:7a:e1:f6:97:40:10:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=032f1e9f-5c0e-48fd-9899-1487501d961d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:6a:da:95:e0:1e:cb:7b:43:b4:6f:4f:f2:
                    ae:04:43:c6:76:37:ab:eb:e6:7f:0f:28:17:f7:e5:
                    c9:2a:22:31:af:04:4a:f3:2b:77:f1:23:08:52:b4:
                    73:0b:ab:8c:05:25:dc:15:6e:e4:23:17:c6:a1:e1:
                    13:c2:5b:25:ca:92:19:55:17:93:10:88:d1:56:78:
                    ef:e5:79:a1:8f:38:7e:09:ca:07:79:7f:b6:4f:e5:
                    2a:71:cb:a6:79:a6:fe:be:b9:bd:64:16:4e:bb:c1:
                    46:1d:07:67:6a:71:89:fe:a9:47:b0:60:63:64:53:
                    03:13:c8:bd:b2:2b:4a:9a:55:17:f5:8b:bc:14:23:
                    28:b7:67:c7:ed:46:64:ae:ee:8d:b7:ce:2c:69:b1:
                    71:ea:f7:d5:fa:8c:de:46:0c:e4:0d:cb:06:d0:41:
                    e1:1b:5e:73:dd:f2:48:67:13:71:f2:50:fb:1c:14:
                    a1:62:d7:b3:c6:00:79:42:4c:78:20:9c:7a:bc:10:
                    99:95:26:15:55:8e:f7:72:03:27:f7:35:0d:7c:6d:
                    6e:48:61:bb:df:85:b3:45:ab:8d:29:cc:05:ed:c8:
                    8e:a6:4f:ec:94:08:5a:8a:52:4e:db:63:96:d5:28:
                    d0:45:49:1b:cf:07:61:6a:dc:ad:a8:88:44:1c:db:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1C:12:EC:61:67:CF:83:42:F1:2B:D5:AE:7C:6B:93:B9:5B:3B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8c3e5a-dd68-3fdf-a83a-95985360f151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.178.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:75:a7:fb:e3:37:6d:91:f8:b7:ff:68:35:42:58:20:53:4e:
         8e:f9:61:b4:62:57:fd:d0:8a:f2:8b:9b:61:54:6f:97:c4:af:
         f4:5a:2e:5b:92:f5:18:0b:17:a3:0b:fd:b9:14:02:af:76:55:
         7f:3c:26:80:ca:66:a7:03:d7:cf:d7:62:ed:e8:74:95:71:c3:
         d9:6c:62:e0:1b:e7:eb:d0:51:0d:63:ce:a1:31:4f:ee:18:ef:
         39:68:ef:db:44:ae:3a:b6:96:92:c2:10:d3:0d:c7:b7:41:d3:
         78:98:2f:42:53:6c:0c:58:9f:c7:da:78:e8:ef:d1:dd:a1:22:
         7e:40:5b:d7:dc:ad:3d:90:55:c2:93:a6:44:95:f7:78:73:8a:
         c9:73:4e:45:ab:52:81:b4:bc:5b:ba:e0:ba:27:54:60:aa:53:
         05:ad:74:a4:be:b9:23:21:9b:c2:b2:c6:81:60:cc:d5:7b:2d:
         0c:50:db:6f:23:16:f2:17:04:78:c4:53:28:5c:81:ab:ce:2f:
         f0:15:d5:ac:f3:b6:d6:5b:3b:95:9e:42:5c:75:b4:49:61:3f:
         bb:6f:f6:4c:7f:31:99:68:a6:b8:7c:f8:8e:b6:ea:29:0a:c5:
         5b:72:e2:ac:4b:e3:5e:6c:a0:d0:4d:f8:e6:93:44:c9:9b:3d:
         67:9c:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:48:58 2026 by rpki-client