Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cc94877-246f-34bc-9f39-d602484b99ef.roa
File:                     8cc94877-246f-34bc-9f39-d602484b99ef.roa (raw, json)
Hash identifier:          J9gkoUkotOLU8I4KomAryNqwPvgdqPqw99yz3fqj6a0=
Subject key identifier:   11:96:47:50:A6:61:94:9F:86:86:FB:F3:E3:E0:73:F5:20:BE:BB:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D825207C82F44572FA240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cc94877-246f-34bc-9f39-d602484b99ef.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.170.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:82:52:07:c8:2f:44:57:2f:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=0e04c692-c175-4836-b52d-4d078217fe25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:59:1a:92:82:e5:cd:f1:ae:3d:fd:ad:fb:
                    64:07:87:ce:f6:8a:7c:d0:35:6c:a0:c2:79:60:5d:
                    49:b8:ee:f5:12:ea:2d:9d:cc:a1:91:a9:3f:2b:8c:
                    bb:3a:03:5f:48:64:3f:cf:d7:fe:ce:04:a8:53:0b:
                    de:00:b8:67:49:66:ac:40:25:42:ab:08:7f:b0:65:
                    e2:ce:88:d8:65:ed:0a:cd:46:20:40:72:78:9e:d2:
                    35:c4:bf:16:b3:f4:37:a4:79:1a:a0:62:c4:f0:94:
                    a4:db:e3:61:56:62:b1:a2:ec:a3:b0:5f:be:64:81:
                    f0:c9:29:eb:df:96:06:0c:61:19:e8:8a:2b:87:f0:
                    0c:7f:1a:e5:9c:6c:b8:c2:0a:7f:c4:0c:59:1f:4a:
                    ff:b0:cb:c7:77:dc:04:8a:2c:a9:5c:ca:f8:72:24:
                    db:43:af:a0:c6:e1:60:30:42:04:94:92:46:24:53:
                    8c:13:21:3d:3b:dc:e8:5f:9a:a3:8a:71:31:cf:5b:
                    bb:0f:8b:0d:f5:eb:92:8d:73:4c:60:61:8d:ab:0b:
                    1b:92:64:0d:79:77:e1:e5:61:1e:29:ea:18:bc:2b:
                    46:1b:76:3a:7e:53:4e:de:94:af:1b:cc:2a:36:20:
                    c0:4e:da:1f:e3:87:34:3d:30:0e:6c:66:5e:82:c4:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:96:47:50:A6:61:94:9F:86:86:FB:F3:E3:E0:73:F5:20:BE:BB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cc94877-246f-34bc-9f39-d602484b99ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.170.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:0b:70:26:a7:0a:aa:17:08:e8:cc:6b:34:45:49:9c:9d:24:
         4b:16:8b:a9:9f:d7:59:5a:ae:23:bc:71:fc:a0:41:67:58:23:
         64:7c:2a:da:a7:fb:3e:10:1e:eb:07:87:3b:30:ba:57:c3:07:
         b5:bb:45:f5:88:cb:e5:e7:09:ff:e1:ff:85:27:e7:6e:6c:6f:
         12:e8:58:8b:01:04:f5:a7:b5:4d:d4:76:90:37:f7:f2:8e:b7:
         a2:2e:04:fe:13:61:4e:f3:a6:9d:b8:da:7e:93:94:bc:70:ae:
         6c:01:b2:79:38:21:71:72:29:52:df:25:ad:c2:e1:5e:72:2a:
         7f:47:ff:d8:a3:0a:f4:02:cf:bb:93:92:98:a7:c0:f6:3d:e4:
         6f:e6:23:d9:8c:ae:92:30:94:88:44:f2:93:d4:08:3d:3b:75:
         5c:84:4d:b5:40:e5:b4:8b:e5:c3:37:ff:d2:a4:aa:29:11:93:
         4d:dd:2d:62:3b:4c:c7:3b:59:a7:6f:6c:af:04:79:93:21:aa:
         6d:e0:9d:4c:0a:a3:8e:6c:c2:6a:e7:2d:40:0b:92:27:5c:3d:
         b6:eb:4c:39:a5:64:ef:5e:0a:91:0d:48:c8:aa:86:e7:30:40:
         48:d3:a7:26:ec:3a:84:7f:59:e4:2d:e9:9b:6c:f8:b1:28:d6:
         0b:a9:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:58:05 2026 by rpki-client