Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a7c84-11d2-3e56-bae2-b3aeb86e07a7.roa
File:                     a90a7c84-11d2-3e56-bae2-b3aeb86e07a7.roa (raw, json)
Hash identifier:          RypMqHNukzOOEhNDsfxlUlRxUMDfzq+zGtToBK1Twl8=
Subject key identifier:   F6:04:9D:3B:76:00:62:C3:35:6E:B0:E6:7C:03:7D:41:99:1F:50:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57E2BDCAC5EE534E3C1580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a7c84-11d2-3e56-bae2-b3aeb86e07a7.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        174.173.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:e2:bd:ca:c5:ee:53:4e:3c:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2653e3a5-40ec-4899-8d80-b9a2baa4e7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:1f:e9:bb:01:e3:0e:e9:84:4a:95:cc:16:
                    a7:68:6f:a6:bf:68:8c:29:f0:94:31:d4:8c:1b:b2:
                    02:2a:44:89:5c:e8:5f:fb:f0:78:e4:af:a6:21:8a:
                    4e:54:54:1e:37:0d:55:71:9e:1a:60:ed:84:22:07:
                    b3:2f:b8:ec:dc:a5:ad:c2:27:c1:c3:c0:2a:30:e4:
                    ad:b8:cd:93:6f:f9:e2:dc:91:e0:33:13:28:dc:db:
                    4a:ff:73:2f:c4:b3:39:d7:93:b9:b6:4e:cf:34:39:
                    fe:23:cf:79:e2:39:21:1b:ae:3d:9a:0d:90:74:e0:
                    45:ec:16:85:86:46:08:80:3c:a0:a7:5b:ff:34:a3:
                    ab:da:0e:2f:77:23:7e:58:6d:bf:3c:5b:20:a7:17:
                    00:f2:74:77:16:91:03:79:60:22:67:98:83:43:8d:
                    96:5e:d5:79:f0:bf:7d:4f:86:19:d8:0b:6a:88:94:
                    0a:ee:38:ef:4d:55:6f:a9:a4:69:e4:67:e3:94:69:
                    55:95:bb:7d:7e:a8:30:89:a9:08:ca:57:75:d7:d0:
                    ca:8a:9d:c8:be:57:b3:fc:0c:37:40:35:f8:08:5d:
                    a2:cf:cb:75:77:b5:aa:de:76:bc:3c:10:53:54:63:
                    e0:2a:83:ab:6b:dc:d6:ca:f4:09:c5:94:15:18:99:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:9D:3B:76:00:62:C3:35:6E:B0:E6:7C:03:7D:41:99:1F:50:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a7c84-11d2-3e56-bae2-b3aeb86e07a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:96:64:cf:a6:20:0c:5f:87:aa:af:86:1e:54:4e:1d:04:22:
         3f:dd:a0:31:36:cf:26:aa:14:81:f9:2b:ac:f1:22:eb:54:18:
         ca:5d:0b:4a:d6:ee:b3:dd:62:4e:9d:2a:a2:b7:4b:72:3c:1f:
         54:97:de:74:20:a7:71:69:a1:da:5e:39:b7:1f:a5:8f:f0:f5:
         94:78:db:1f:3e:21:1d:9c:40:8b:0e:2d:10:44:8a:7d:1d:b5:
         11:41:64:ef:5d:6f:d5:d5:24:8f:87:9c:e1:da:f2:63:84:74:
         c4:2c:71:ec:d5:88:48:fa:c7:53:3d:0c:50:67:1d:d5:eb:71:
         00:15:57:b7:16:fd:a6:f0:a4:4b:83:73:e7:35:2f:78:55:a6:
         24:43:20:b9:1d:7f:40:6d:94:87:d8:16:ff:64:f2:c2:ef:ef:
         3c:14:93:a5:ca:da:be:02:c1:e2:bc:f0:89:e5:9e:7a:0f:ad:
         a8:03:2c:d5:4d:f0:65:b7:79:c3:af:79:6a:13:bc:28:4b:cc:
         7a:df:7c:c8:98:a3:aa:56:03:09:a7:37:bd:0a:46:a0:87:9e:
         fd:d9:f2:96:4f:f8:46:fe:a0:37:3d:0b:67:88:6c:9d:fc:85:
         69:19:5d:eb:84:04:be:fc:9c:c4:67:de:90:55:6c:38:45:99:
         a6:33:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:34 2026 by rpki-client