Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae716fe9-40ce-328d-8d16-77355ecbfae5.roa
File:                     ae716fe9-40ce-328d-8d16-77355ecbfae5.roa (raw, json)
Hash identifier:          FHDCB3GeltB8WeaMwYHgJCSmKqGeSdD+UzUSSsLCQ0k=
Subject key identifier:   E3:7A:7F:5D:68:10:0B:49:1B:EA:8C:6E:69:31:3A:6D:DE:12:77:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BDA9D984688EC33111080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae716fe9-40ce-328d-8d16-77355ecbfae5.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.102.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:da:9d:98:46:88:ec:33:11:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a93833cd-bf04-4166-9e11-9551052a4272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:3a:b4:6b:47:18:69:54:0c:87:0c:0b:86:
                    88:51:32:6c:e8:a6:a9:72:d7:2a:de:a2:94:23:24:
                    83:7a:c9:57:6d:99:b2:5a:04:e5:ea:f5:47:76:a1:
                    af:c6:13:08:8b:d3:dd:c4:56:e2:d0:50:40:b6:13:
                    b5:e8:78:ad:1e:28:b7:2e:7c:cf:fb:69:b9:f6:c9:
                    55:db:fe:d8:93:65:19:bc:fb:48:13:f4:c4:19:4d:
                    12:0d:18:a0:6c:e7:e1:9a:99:73:5a:42:5f:11:c5:
                    fc:cf:b5:14:b7:7b:b2:ae:54:60:a5:47:6a:62:5e:
                    62:82:eb:08:25:86:84:e7:5f:18:6d:22:06:93:64:
                    26:03:3f:2a:70:62:5c:b2:9c:13:ae:05:40:df:ac:
                    49:ea:7d:5b:0b:65:43:15:6f:29:15:dc:e8:64:0d:
                    a1:29:f3:a3:ee:80:85:f0:7f:cf:f2:e7:6e:ca:18:
                    dc:4f:fb:5b:51:6b:b3:05:7b:b5:4d:46:41:a6:34:
                    88:ed:a8:18:e0:58:8a:ad:02:fc:b4:c9:85:69:18:
                    41:d4:2d:ad:85:31:55:50:d3:ed:45:26:3c:06:1e:
                    ee:2d:39:65:9e:be:67:f2:fa:c1:d7:8b:a4:c0:14:
                    a3:32:56:21:53:33:22:e7:e3:01:0f:e3:4d:f4:a6:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:7F:5D:68:10:0B:49:1B:EA:8C:6E:69:31:3A:6D:DE:12:77:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae716fe9-40ce-328d-8d16-77355ecbfae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.102.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:2c:28:54:40:54:4e:36:18:84:03:69:5f:88:a3:f4:3b:
         f9:34:05:22:93:50:32:28:82:f1:cf:8b:c2:cc:1b:56:3b:66:
         ba:7b:71:bc:71:34:8e:83:0a:f7:13:8c:d4:be:5d:3d:ae:ad:
         4b:20:31:5f:dc:68:53:8e:32:f5:3b:70:c9:64:af:65:01:19:
         5e:94:9a:59:af:07:9f:88:81:0b:e3:99:8c:7a:a8:0f:b3:b5:
         42:dc:fb:f9:3f:77:ef:49:89:80:a5:a8:98:0e:db:8d:06:4c:
         3c:86:61:8c:0f:92:66:ca:d3:fe:f0:82:ba:ff:0d:11:ee:80:
         a6:2f:fb:9f:7f:f2:9c:15:06:9f:82:88:21:b3:ed:bc:3f:51:
         c2:4a:1d:93:37:4c:e9:58:df:4e:fe:6d:04:41:82:4e:4b:f0:
         83:34:b4:f7:a5:a7:43:ae:a8:f8:93:e3:be:4a:bd:ac:88:e9:
         40:7e:18:db:5e:60:45:47:c3:32:b5:89:ca:f8:92:0c:41:eb:
         b2:34:b3:90:d8:6a:b6:2e:26:aa:f7:94:97:fe:09:62:5e:45:
         82:fc:45:7d:70:40:b4:80:98:9d:ba:59:56:82:b7:07:28:1f:
         59:17:7e:da:c6:b9:ff:c8:9f:5a:d9:3a:63:ae:62:57:68:5e:
         3e:c9:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:07 2026 by rpki-client