Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa
File:                     ba964f85-f54b-312f-87b2-f3a04f505044.roa (raw, json)
Hash identifier:          xo3Rkf5IzoRRDgguuIKncWTlYzjhZtXEGLwtid2jw8g=
Subject key identifier:   93:28:EA:92:B2:46:F3:13:F8:2E:0B:4F:35:94:3D:B6:C0:C5:3C:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C68C92CDDBA197D563700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.51.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:68:c9:2c:dd:ba:19:7d:56:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=490e4eee-645b-46ef-8e9b-d859b871bd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:51:3e:be:3b:3d:59:97:a7:f4:db:96:f6:
                    f7:a4:35:01:e2:07:f0:0d:eb:40:28:df:87:71:c9:
                    6f:cd:15:75:96:ee:9a:c0:82:f9:09:e2:f2:28:00:
                    e0:5d:32:76:d7:ba:e2:fd:ef:fb:3f:08:63:12:a7:
                    17:4f:78:47:16:f9:5e:32:c4:e5:2f:8a:b1:56:f7:
                    c6:66:8e:71:d4:ab:5a:ff:f2:5e:f1:10:09:81:9b:
                    d9:f5:d4:0a:f2:3d:8e:11:32:70:94:03:a5:8d:05:
                    8f:01:5c:1d:39:9a:f0:b1:32:d8:63:f0:02:ff:bf:
                    b2:32:d5:5d:61:be:01:fc:8c:d8:e2:cd:5b:de:5b:
                    f1:d9:1e:71:3a:74:7f:38:1b:ea:22:48:eb:0a:9b:
                    88:7b:f4:1c:c5:9f:a5:45:08:a3:c6:18:70:21:96:
                    df:5d:bf:c7:6a:3e:44:27:92:ec:6e:56:6f:f6:d0:
                    1b:26:6c:9d:e4:3d:4c:64:45:ab:f8:07:6b:99:46:
                    04:f0:92:f6:4a:bf:57:de:5b:be:37:58:73:47:22:
                    9c:ec:68:7b:bb:00:89:4b:49:d6:0a:70:2f:3b:06:
                    e8:0e:ac:0f:33:d6:c8:d3:2b:8d:37:ed:15:a5:42:
                    ae:75:41:2a:64:47:cd:d1:9b:ce:a4:c6:4f:89:a6:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:EA:92:B2:46:F3:13:F8:2E:0B:4F:35:94:3D:B6:C0:C5:3C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:cb:48:7e:eb:6f:eb:e1:4c:23:42:ec:65:07:a5:d1:92:
         bc:7c:ba:3d:55:c1:69:3e:eb:56:25:4f:e5:fe:cd:36:02:13:
         52:27:c5:e1:77:e1:10:c4:c2:97:cf:ef:68:2a:21:ab:cf:0e:
         d2:aa:a5:6d:f2:7c:0c:56:9b:ef:0a:4c:65:32:72:16:81:60:
         37:08:a5:94:11:01:36:41:be:e9:aa:22:1d:2c:9d:99:2f:b2:
         c7:b4:9f:6b:71:56:44:6c:ae:b7:46:b2:27:e3:83:fa:ca:6c:
         c8:fc:c4:21:0b:7f:9e:0f:26:09:34:cd:a5:fa:0a:d0:76:ed:
         89:77:8c:b4:4d:ec:75:0c:d2:fe:98:37:12:f3:bd:f2:c4:5b:
         01:c8:b6:61:c7:07:a5:3b:b7:a8:35:8d:9e:24:34:07:c9:36:
         20:19:0f:40:b6:d4:de:03:69:66:8b:47:eb:19:40:79:c8:86:
         f3:ee:ad:b6:55:0b:60:60:62:14:dc:6d:fe:61:e4:74:28:e8:
         93:b3:ec:11:9a:4b:b1:19:6a:00:d9:9b:84:05:b3:ce:53:15:
         ee:a3:73:f0:3b:56:6f:16:cf:b1:1c:15:97:ba:1b:17:cf:c4:
         f6:59:70:c6:3f:fc:24:e1:ed:84:99:d2:21:26:8f:43:ed:91:
         d6:d9:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:58 2026 by rpki-client