Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3db19d-160c-3060-b4c9-cecb581b98d3.roa
File:                     ad3db19d-160c-3060-b4c9-cecb581b98d3.roa (raw, json)
Hash identifier:          9GvAp/1FFKIVSmxMScrjbe1LtQV/hYO0/RQAfmjAPzA=
Subject key identifier:   3D:97:43:4D:A4:FE:CF:A1:8C:7B:38:65:F0:C1:98:C0:76:62:5D:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58EA686ED7E57D35871580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3db19d-160c-3060-b4c9-cecb581b98d3.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.241.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:ea:68:6e:d7:e5:7d:35:87:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=58b736df-7967-4b33-8309-e95c7383c013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:c6:d6:5f:5c:4e:9a:6e:ac:f4:93:cf:2f:
                    c1:ea:e5:15:ac:96:97:41:c0:fb:ca:aa:b9:6a:54:
                    44:c5:47:d2:f0:ea:3d:62:5f:c4:84:b5:8e:52:7f:
                    a8:47:38:7b:26:2d:d0:fc:66:2d:c4:3e:f6:3e:0c:
                    e9:da:33:b5:40:85:44:aa:a9:82:df:1b:0b:91:fc:
                    0f:d7:81:5b:4b:7b:f5:aa:04:75:c1:77:bd:01:45:
                    15:23:a2:15:23:b0:42:c4:91:d2:4c:65:a7:e8:78:
                    1a:4c:f1:5f:15:13:54:45:a8:ea:1f:15:4f:de:a4:
                    36:48:21:6d:d8:69:7d:82:f1:b0:9a:56:3b:68:17:
                    bc:4a:cb:bf:44:ca:d6:e2:16:92:f2:4e:61:80:d3:
                    13:7e:11:98:b4:f9:ac:0a:f0:7d:34:26:82:ae:ea:
                    93:0c:bd:68:1d:81:ea:67:6e:ad:a2:ee:c9:84:8f:
                    f3:1e:fe:27:e9:e7:94:1e:1a:dc:fd:78:63:c8:60:
                    16:26:40:09:8a:84:5b:29:bd:2f:9b:10:e7:ee:c0:
                    4c:63:42:e2:37:88:31:d8:98:ff:23:2a:f8:1e:96:
                    c0:8b:a0:72:3b:64:a1:0e:8e:ea:0a:c3:9d:c0:8a:
                    33:f7:06:a0:a7:43:34:62:36:d1:26:66:8f:d3:5d:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:97:43:4D:A4:FE:CF:A1:8C:7B:38:65:F0:C1:98:C0:76:62:5D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3db19d-160c-3060-b4c9-cecb581b98d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.241.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:74:5f:41:7c:fe:d9:9b:1e:ac:a3:be:fe:27:fb:f8:2b:
         b2:0f:5c:ab:ab:86:39:2d:c2:19:ea:e0:bf:fe:c6:2a:d7:e8:
         34:7e:35:98:77:ae:58:8c:b0:87:ed:09:7d:84:02:10:0c:7f:
         93:ef:41:b0:64:b7:33:bf:ff:8f:6c:ba:48:64:0d:a0:d3:d2:
         98:6d:9b:ba:dc:b1:b1:3c:19:ae:7a:06:af:cb:95:94:7c:0b:
         fd:c7:09:a9:49:6d:46:24:ed:41:d4:69:52:bf:4c:99:3f:26:
         e6:7f:81:a6:43:65:37:94:a5:44:c2:dc:bd:1e:ae:df:0b:c7:
         1c:d4:95:97:29:8f:33:ca:91:56:53:19:1b:c0:60:9a:5d:76:
         78:fd:6e:8d:e8:38:40:53:5d:ff:66:d4:20:d1:25:1a:66:88:
         0a:d2:06:72:09:bd:77:f1:22:e9:e9:e7:6f:95:7e:28:f9:80:
         cc:0e:57:ac:39:90:27:95:05:0c:c6:72:fd:0a:f8:13:e4:e9:
         e8:74:e1:e8:30:4c:e0:c1:fa:96:6b:7c:83:5e:24:73:98:5f:
         41:22:3e:8d:2d:4b:ce:5d:a5:dd:77:c7:50:ff:8a:07:e8:f5:
         9e:69:da:05:19:fb:40:4f:2f:1f:7e:28:81:21:dd:20:0c:6b:
         27:c8:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:41 2026 by rpki-client