Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa
File:                     918c988b-0921-3937-8aee-46f40fdd3524.roa (raw, json)
Hash identifier:          VlJDr3RUOvltdQaomZ3c6r73medakpEu08+mEbhC2VE=
Subject key identifier:   85:72:C0:DC:4C:87:3C:09:55:DE:77:E3:12:DD:B6:77:DB:7C:76:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC145A8F418D89DF00C0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.68.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:14:5a:8f:41:8d:89:df:00:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d38b5acf-07f5-4fae-b2bc-6d832a45c031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:16:68:7b:f4:c4:3f:ed:c3:6d:8e:b7:3e:
                    ab:47:5d:ac:fb:93:d8:f7:42:42:53:3f:6e:14:27:
                    95:77:5c:74:43:b1:f9:d3:d7:fa:e0:80:26:d9:16:
                    9d:64:c8:57:95:70:03:0c:1a:6d:5c:87:d2:11:93:
                    cd:f6:e0:e5:a2:b8:b3:21:d2:29:0f:73:e3:49:4b:
                    c9:f2:88:6e:4f:4c:ea:dc:61:76:f1:2f:f6:d4:17:
                    47:af:da:2f:3d:a8:be:de:cb:d0:b3:39:75:e1:27:
                    2b:72:b7:71:71:fc:64:d8:06:ff:0a:e6:6e:9c:77:
                    79:4a:c3:16:8a:ae:fd:24:31:ba:5c:66:2f:91:f6:
                    ad:26:24:43:9c:dd:24:fc:c1:11:9d:7d:14:ec:11:
                    ba:4c:2c:f1:58:ea:7b:0e:bf:76:55:41:fa:24:87:
                    92:cd:c7:01:34:42:7f:29:2c:65:82:ad:e8:49:06:
                    4e:cc:07:8a:93:9e:c9:ee:b8:5b:4b:5e:2b:b6:c9:
                    4e:76:81:7b:9b:91:3a:80:18:3f:50:74:b9:c7:50:
                    e9:92:d3:d4:92:9d:de:f7:42:fb:86:f3:f6:57:7a:
                    43:60:17:e6:d0:9d:89:e8:6c:d3:c3:f4:a5:19:a6:
                    34:dd:bc:94:69:c4:1c:57:24:77:cf:06:0b:a6:44:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:C0:DC:4C:87:3C:09:55:DE:77:E3:12:DD:B6:77:DB:7C:76:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/918c988b-0921-3937-8aee-46f40fdd3524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:68:19:69:81:62:b4:19:94:df:2e:90:db:fb:03:75:18:56:
         9f:ce:e9:eb:c0:6f:95:4c:d8:77:f7:cd:53:c7:6f:19:aa:f7:
         22:85:19:a8:75:db:78:60:e6:dd:e7:05:53:f4:d7:ee:52:ce:
         4c:91:54:ca:27:c2:6d:ab:85:d0:59:c9:fd:65:f4:67:d8:6a:
         f4:e2:8f:1a:92:ed:69:69:3b:2e:cd:8b:ae:1f:c3:65:cd:d7:
         4a:32:8a:ab:4e:aa:ba:c9:a8:91:31:e3:04:78:11:f0:9c:cb:
         22:fb:e3:c5:32:f9:dc:b7:00:20:6c:19:26:4e:66:2f:7a:e2:
         5f:34:cc:e5:0d:4f:7e:70:36:24:29:a9:fe:7b:c6:10:0e:6e:
         45:e8:33:f0:34:8b:27:2b:9a:a0:b7:68:85:bf:13:ee:81:15:
         98:b3:90:f8:48:80:ce:97:68:6a:2b:cd:48:be:63:ed:5a:79:
         5c:8b:1e:de:3b:a9:c2:05:f8:a7:9e:32:bc:1e:6c:6b:56:b0:
         a0:5b:e7:ec:70:1a:c0:7d:27:43:42:97:ad:46:85:1d:22:49:
         38:30:77:3d:40:0b:c3:95:8c:fa:f7:59:73:be:c6:2e:67:ec:
         20:e8:8b:b9:ab:d8:41:68:1f:58:f0:05:05:6d:71:48:0a:90:
         fa:71:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:16 2026 by rpki-client