Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa
File:                     a7f13488-afb2-307a-924a-2f141f81f635.roa (raw, json)
Hash identifier:          EZ064A+Jb8MShsmsJ9GLlUoY5OL3VQ9Jw0HV4NUFowY=
Subject key identifier:   6A:FF:A4:D1:26:94:AF:66:AC:E6:5F:21:E2:70:10:FA:3F:C3:FF:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EA055D3AB3D92FE25C380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.33.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:a0:55:d3:ab:3d:92:fe:25:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=bcc0b260-8b66-406f-97ca-c9769b777b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:f4:31:08:46:f5:49:14:ff:ac:37:13:06:
                    1f:9c:30:36:8b:b9:4b:6f:f9:eb:7d:92:74:cc:ce:
                    5f:c2:ac:5d:11:d8:5b:ea:2f:78:4b:90:19:1f:d7:
                    05:a4:94:b7:7d:28:6d:11:8e:84:c5:fe:21:f3:d1:
                    a8:40:8f:30:34:0d:84:24:c0:c6:30:df:df:98:a7:
                    e2:a1:f7:08:12:de:ec:50:3e:8f:3d:49:ad:c9:6d:
                    b2:08:d2:08:ba:f3:27:a0:96:26:61:46:df:9d:c3:
                    ce:b5:6e:41:52:42:ba:00:39:87:95:d2:7f:52:53:
                    dc:27:d7:ff:20:c2:3a:58:43:de:21:93:84:31:ed:
                    d0:dc:7e:b0:43:84:1d:6b:43:13:8b:eb:a5:f9:51:
                    c6:0b:cf:62:34:cd:d5:6e:a2:63:5b:8d:99:67:11:
                    7d:25:d3:f8:e4:67:34:c0:08:b1:54:53:26:ed:51:
                    ce:7e:56:b3:c2:ec:37:c1:d0:12:d4:3b:d3:76:aa:
                    0f:27:fa:af:ea:99:40:6f:09:4e:9f:f3:c6:3d:63:
                    3c:96:75:b8:78:c8:55:49:28:1f:60:ad:78:5f:14:
                    ac:5f:f6:79:86:b6:0a:46:56:9f:b3:bc:78:fb:8b:
                    48:18:30:76:d4:d6:d6:01:a1:a8:00:db:6d:f5:7a:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FF:A4:D1:26:94:AF:66:AC:E6:5F:21:E2:70:10:FA:3F:C3:FF:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.33.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c9:0b:99:cd:cd:09:6c:af:93:72:e9:cc:56:b5:5d:39:d9:
         53:70:bb:9f:b0:4b:5c:38:32:43:69:0f:55:b1:25:48:92:0e:
         94:26:30:8c:ba:df:d6:ff:44:ed:98:ac:da:58:42:b6:f4:ad:
         91:5e:0a:d1:08:11:19:7c:43:4a:e9:e9:25:6f:81:51:72:49:
         66:f0:cd:cc:84:cc:85:c3:d5:83:1d:23:d8:0a:bc:31:77:bc:
         93:19:9d:ab:1f:e9:44:5e:3f:be:b3:0a:f0:c1:65:24:f9:44:
         03:09:5d:85:46:78:05:d3:94:89:96:bd:8a:ea:21:09:ac:09:
         4c:44:0f:6d:13:c6:8f:d7:3f:43:d4:35:7c:99:ad:aa:15:8a:
         8f:0f:3c:ae:5d:2b:c4:6a:87:a3:60:8a:c4:74:e5:7f:c8:96:
         58:0e:2d:5f:21:fb:a4:fe:4a:dd:03:ed:2d:10:5d:93:6f:38:
         75:57:d0:0e:18:58:78:c6:03:7b:79:8d:8d:51:2b:c2:e4:fb:
         2a:19:32:70:c0:97:d2:a8:07:eb:42:ac:0b:74:9e:b7:f3:de:
         36:c9:1d:e2:eb:18:7b:af:10:59:9a:1e:59:d1:54:72:63:a5:
         48:cf:5f:5b:a5:cb:c2:07:4a:b0:f4:ce:9d:e5:a2:7b:44:84:
         2a:aa:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:29:31 2026 by rpki-client