Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa
File:                     96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa (raw, json)
Hash identifier:          XW5MEZTP9Eul+y0WOA9v+w8qEgGhDYDTfJrEqVfGP4k=
Subject key identifier:   11:20:B5:A3:EF:95:27:B4:53:6A:D7:67:8C:61:D8:D8:4A:21:14:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C1C870098608C795E1100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.210.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:1c:87:00:98:60:8c:79:5e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e9778928-678a-439c-be4e-03803bd54c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:29:47:f0:03:77:44:31:12:16:77:d0:63:
                    3e:d4:93:e4:6c:a2:0e:04:88:21:df:1a:8d:fc:42:
                    63:80:3c:43:f0:c0:c4:e2:3e:c0:8e:f2:e4:51:f0:
                    af:49:e5:8c:96:a2:b0:94:a8:e5:fb:39:39:17:82:
                    88:e0:5e:61:58:87:8d:cc:d5:c4:2f:11:25:2c:e9:
                    43:b0:80:59:f6:e4:b9:57:b3:5e:e5:42:2c:2b:42:
                    2f:2b:e3:06:5b:ad:b7:bc:bc:f5:95:63:f0:95:59:
                    80:dd:50:22:d5:01:f2:84:7c:76:fc:43:00:8f:5a:
                    98:cf:72:c2:3b:3e:b1:22:0c:74:46:f9:34:c9:41:
                    93:9c:eb:d6:3c:67:e1:a2:56:57:58:a5:f5:cd:11:
                    3f:2d:85:0b:54:14:2e:10:3c:f5:5e:29:3f:34:3d:
                    ab:6b:66:22:13:18:83:0a:68:ef:87:a8:a1:c8:5b:
                    ef:c2:40:90:25:3e:55:82:b6:25:f6:b6:04:1a:2e:
                    94:48:45:e4:4d:b7:03:45:c8:b2:94:bd:b9:00:d5:
                    5e:fe:ac:ba:18:a0:8d:a7:fa:15:04:96:9e:c8:34:
                    35:ca:58:81:20:a6:60:8f:05:ac:af:60:22:6f:20:
                    29:09:da:b3:6b:62:ea:f6:5e:6e:bf:4e:f8:b4:50:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:20:B5:A3:EF:95:27:B4:53:6A:D7:67:8C:61:D8:D8:4A:21:14:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:76:be:a3:bf:4c:41:41:c1:33:2e:12:af:10:42:ab:0a:
         6a:88:87:7d:34:f9:46:28:49:3c:82:1f:99:39:1a:e1:32:a3:
         35:bf:0f:0c:54:49:24:7f:9a:08:3b:d6:2c:68:d4:63:9f:cc:
         66:87:b3:94:e8:cb:eb:25:e5:30:6a:47:79:d0:b1:b8:4d:d6:
         08:c4:c7:07:d1:a7:c2:c3:7a:c1:dc:46:f4:25:70:c5:c3:1d:
         5f:f2:f4:1b:f3:1f:fb:da:6f:f3:3d:4d:99:0f:c1:98:7a:eb:
         c8:60:1b:2d:99:00:52:e1:c4:6e:6c:5e:0b:7c:e2:c6:01:c9:
         03:74:f1:e7:83:03:d9:8e:b9:c2:a8:92:ea:26:22:a0:71:33:
         1a:72:ff:e5:50:bb:d9:50:fb:6e:ab:64:9a:6e:66:ce:a4:97:
         0e:07:28:b3:ad:9a:02:d9:95:27:3d:2f:b4:a3:c1:e1:b4:78:
         b2:68:0a:81:54:eb:5b:fa:8f:13:6c:76:a0:10:e2:4d:e5:9e:
         a4:b9:0e:4b:71:25:a0:21:95:76:69:08:8d:e8:7e:33:80:b6:
         55:2d:26:14:78:84:ab:70:1a:f5:e1:17:d8:a2:b2:e9:a9:fa:
         e3:c9:2c:e9:c1:f2:82:31:3d:18:34:ed:cd:06:c1:cc:a0:04:
         ed:b6:1f:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXByHAJhgjHleEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTk3Nzg5MjgtNjc4YS00MzljLWJlNGUtMDM4MDNiZDU0YzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhswpR/ADd0QxEhZ30GM+1JPkbKIOBIgh3xqN
/EJjgDxD8MDE4j7AjvLkUfCvSeWMlqKwlKjl+zk5F4KI4F5hWIeNzNXELxElLOlD
sIBZ9uS5V7Ne5UIsK0IvK+MGW623vLz1lWPwlVmA3VAi1QHyhHx2/EMAj1qYz3LC
Oz6xIgx0Rvk0yUGTnOvWPGfholZXWKX1zRE/LYULVBQuEDz1Xik/ND2ra2YiExiD
Cmjvh6ihyFvvwkCQJT5VgrYl9rYEGi6USEXkTbcDRciylL25ANVe/qy6GKCNp/oV
BJaeyDQ1yliBIKZgjwWsr2AibyApCdqza2Lq9l5uv074tFAEJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEgtaPvlSe0U2rXZ4xh2NhKIRQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZjY2IyZGUtODk5MC0z
OGNiLWEwZjEtYjRmMDBlN2I1MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdKOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMrdr6jv0xBQcEzLhKvEEKrCmqIh300+UYoSTyCH5k5GuEyozW/DwxU
SSR/mgg71ixo1GOfzGaHs5Toy+sl5TBqR3nQsbhN1gjExwfRp8LDesHcRvQlcMXD
HV/y9BvzH/vab/M9TZkPwZh668hgGy2ZAFLhxG5sXgt84sYByQN08eeDA9mOucKo
kuomIqBxMxpy/+VQu9lQ+26rZJpuZs6klw4HKLOtmgLZlSc9L7SjweG0eLJoCoFU
61v6jxNsdqAQ4k3lnqS5DktxJaAhlXZpCI3ofjOAtlUtJhR4hKtwGvXhF9iisump
+uPJLOnB8oIxPRg07c0GwcygBO22HzE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:12 2026 by rpki-client