Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a30c7a02-7560-3c4b-a1a5-772441cde8be.roa
File:                     a30c7a02-7560-3c4b-a1a5-772441cde8be.roa (raw, json)
Hash identifier:          h+khG8gZUF5Lb1Z7DHP2TtilpVBWuD5YTPsmAjlK9vo=
Subject key identifier:   0A:00:00:D8:A4:41:C6:F5:8F:F7:AB:E6:0E:DA:5A:FD:FD:D5:D3:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86FC05F3CFD5321BB2F820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a30c7a02-7560-3c4b-a1a5-772441cde8be.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        73.108.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:fc:05:f3:cf:d5:32:1b:b2:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b3893265-db85-4d73-9fc9-a1515fad4cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:f2:71:55:96:cf:3c:07:a9:2e:ae:b6:8a:
                    be:bc:8b:ac:aa:69:d1:3f:93:03:94:df:1b:d8:62:
                    59:51:7a:df:a3:11:ee:79:be:8c:ad:96:96:73:3a:
                    c0:e1:76:c3:4c:77:e5:53:9f:14:88:8b:2e:c9:9b:
                    85:8d:f4:aa:00:74:91:a9:b3:5b:ce:4d:cf:41:26:
                    14:ef:05:fd:c5:af:5b:65:20:c7:f5:8a:e1:7f:ba:
                    15:a2:bc:e7:8d:5d:77:36:f0:6b:41:b0:bc:eb:1f:
                    21:02:92:55:3f:8e:0b:d0:40:0e:35:4f:e8:2e:ca:
                    fa:29:9e:cd:1c:de:86:ed:bf:ba:82:e0:88:8a:b6:
                    3d:f1:fe:da:82:6f:44:08:7e:6e:90:b8:c5:12:d1:
                    21:dd:ad:1c:cb:f1:95:23:4a:6a:0a:52:0a:0f:78:
                    82:a4:14:47:77:41:bd:5f:8f:73:8b:b6:f6:5e:72:
                    92:b8:94:f3:ee:ca:be:4b:42:ca:46:8f:44:06:7f:
                    eb:66:61:b0:57:b3:26:bd:81:bf:7b:36:11:a8:8c:
                    ab:72:27:0c:4d:de:c7:05:ae:2e:39:e1:cb:38:03:
                    b6:a3:5c:e0:a2:01:33:da:27:ba:d2:25:dc:00:b9:
                    dc:b3:bf:ea:92:8f:98:e9:eb:d6:2a:a5:6d:ce:f0:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:00:00:D8:A4:41:C6:F5:8F:F7:AB:E6:0E:DA:5A:FD:FD:D5:D3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a30c7a02-7560-3c4b-a1a5-772441cde8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.108.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:62:ca:c7:f3:15:5e:7b:a6:ab:d1:a9:ff:15:d1:7d:94:0d:
         4d:8a:b8:40:77:f3:55:f0:96:46:d9:4d:53:3e:0d:56:f8:39:
         81:bc:7d:d8:6f:ac:d1:3b:2f:68:3f:a3:b1:34:ce:27:16:4f:
         bc:f3:41:fb:07:f6:c2:4b:ae:42:57:1a:d4:e9:6f:92:80:68:
         a6:d4:89:97:36:0e:f7:c6:fe:49:f5:09:e9:2a:54:be:ff:4e:
         b0:d6:ce:c6:ab:97:c8:dd:eb:eb:01:39:5c:05:ed:f8:3b:37:
         8d:d0:97:25:b4:fa:75:cb:d3:4a:ef:87:19:d9:06:2d:84:a5:
         f6:fd:de:ed:62:16:fb:46:c5:20:7c:86:58:c1:82:22:a2:95:
         3c:91:e8:ff:1c:ec:3c:e8:52:26:b8:97:b5:2d:58:36:20:c4:
         53:fc:49:1b:3f:b1:4a:f9:e4:04:de:0e:9b:c5:fc:43:79:ac:
         ee:a1:dc:b6:c4:43:ce:71:50:8e:55:42:42:7f:cc:7c:04:39:
         8e:ba:95:2e:1b:d4:0e:8a:46:49:f8:04:a2:cf:04:b6:63:82:
         fe:1b:98:99:a9:fc:f1:6d:51:48:9a:c8:72:a7:3f:22:69:56:
         d9:63:98:95:7b:db:b2:4e:d4:39:ec:7a:b1:27:75:79:8e:05:
         17:3c:5b:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehvwF88/VMhuy+CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
YjM4OTMyNjUtZGI4NS00ZDczLTlmYzktYTE1MTVmYWQ0Y2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSTycVWWzzwHqS6utoq+vIusqmnRP5MDlN8b
2GJZUXrfoxHueb6MrZaWczrA4XbDTHflU58UiIsuyZuFjfSqAHSRqbNbzk3PQSYU
7wX9xa9bZSDH9Yrhf7oVorznjV13NvBrQbC86x8hApJVP44L0EAONU/oLsr6KZ7N
HN6G7b+6guCIirY98f7agm9ECH5ukLjFEtEh3a0cy/GVI0pqClIKD3iCpBRHd0G9
X49zi7b2XnKSuJTz7sq+S0LKRo9EBn/rZmGwV7MmvYG/ezYRqIyrcicMTd7HBa4u
OeHLOAO2o1zgogEz2ie60iXcALncs7/qko+Y6evWKqVtzvAk8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoAANikQcb1j/er5g7aWv391dNeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTMwYzdhMDItNzU2MC0z
YzRiLWExYTUtNzcyNDQxY2RlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSWzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhiysfzFV57pqvRqf8V0X2UDU2KuEB381XwlkbZTVM+DVb4OYG8fdhv
rNE7L2g/o7E0zicWT7zzQfsH9sJLrkJXGtTpb5KAaKbUiZc2DvfG/kn1CekqVL7/
TrDWzsarl8jd6+sBOVwF7fg7N43QlyW0+nXL00rvhxnZBi2Epfb93u1iFvtGxSB8
hljBgiKilTyR6P8c7DzoUia4l7UtWDYgxFP8SRs/sUr55ATeDpvF/EN5rO6h3LbE
Q85xUI5VQkJ/zHwEOY66lS4b1A6KRkn4BKLPBLZjgv4bmJmp/PFtUUiayHKnPyJp
VtljmJV727JO1DnserEndXmOBRc8WyU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:43:46 2026 by rpki-client