Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c036b697-a9ac-308c-adb5-a0eac2d13b55.roa
File:                     c036b697-a9ac-308c-adb5-a0eac2d13b55.roa (raw, json)
Hash identifier:          s/xSi4pgivhrQP2YJsfjpOPRayl8LxzqePdMrU3pYNo=
Subject key identifier:   E2:49:45:31:67:D6:F0:F9:42:FB:DE:B4:7D:7E:B0:61:C4:A9:91:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86B5B69EA48880DA3B6600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c036b697-a9ac-308c-adb5-a0eac2d13b55.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33657
IP address blocks:        173.10.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:b5:b6:9e:a4:88:80:da:3b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5487fddd-8777-4c45-ad19-732a3519124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:e8:4b:17:f9:e1:7d:31:63:d9:23:56:24:
                    a0:2a:c4:f5:88:49:a7:69:3c:93:e3:3b:91:af:8c:
                    23:47:6e:1c:60:37:da:39:af:67:2b:78:cf:4d:a1:
                    b8:08:70:3e:bf:94:62:7b:fc:57:45:76:be:9c:76:
                    73:61:8f:8e:82:70:a7:2c:fd:2d:dc:38:ac:e6:c9:
                    d4:e6:d1:c9:62:d1:94:a8:e4:dc:d1:be:ba:36:97:
                    7e:b7:e2:bd:94:04:05:f8:f7:d7:6b:cf:29:46:06:
                    03:50:82:03:19:8c:62:13:d1:51:99:6c:44:bf:4d:
                    1c:46:5b:83:46:e6:e9:41:8b:ca:14:d3:32:b5:08:
                    dd:92:2a:71:b4:93:36:0d:d2:57:1b:01:a7:e6:b9:
                    7f:18:a9:c1:ff:55:38:55:62:57:6e:a6:e3:16:68:
                    76:8a:91:8a:ec:21:c3:d4:ff:28:52:e3:39:b4:04:
                    d4:51:22:49:e8:d8:68:81:a5:d8:86:49:fa:b4:a1:
                    36:58:02:96:55:85:f7:41:29:c4:6c:d6:ff:80:76:
                    40:16:80:5f:ac:57:f3:4e:36:8e:46:88:cc:f6:74:
                    24:cf:c6:23:e1:8e:c4:ec:3a:c6:4d:f7:ea:58:8e:
                    93:18:17:49:34:5b:1f:39:63:8a:60:8e:4e:c3:55:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:45:31:67:D6:F0:F9:42:FB:DE:B4:7D:7E:B0:61:C4:A9:91:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c036b697-a9ac-308c-adb5-a0eac2d13b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.10.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fe:1e:ee:61:07:51:6a:71:fb:95:3e:54:8c:90:bc:12:92:
         14:2b:39:ad:34:65:2c:05:e7:7f:fd:38:d0:06:93:82:6b:0f:
         05:11:02:99:fa:51:3d:57:cb:6b:83:90:04:3d:6d:bb:ac:e2:
         f8:9f:1f:b1:a4:f1:87:62:9d:3d:37:9c:bb:08:86:2c:66:69:
         15:6d:e1:84:64:28:49:32:bf:12:21:3f:ae:10:b4:9d:22:87:
         8e:46:8b:a4:b8:a4:ed:40:85:cd:44:59:d3:e3:d5:a0:76:f1:
         12:0f:59:de:5d:21:76:c4:cf:95:2e:fd:a6:1b:38:78:d8:3b:
         f1:23:d5:aa:5f:9e:68:e0:80:f1:af:8b:b9:d3:c5:4a:a4:6f:
         f7:b4:bc:8d:0c:cc:62:46:53:6c:cf:b6:60:41:4d:95:c6:e8:
         66:4a:9c:4a:22:f3:7c:aa:92:13:1e:ca:04:b5:ab:ee:60:d2:
         4d:00:11:01:d4:48:b1:a7:2e:31:24:d4:89:41:d0:ec:22:ba:
         f3:45:37:f3:fd:8f:65:e0:8b:42:55:c8:e3:34:9f:1a:19:e7:
         49:b1:1e:4f:95:38:6b:8f:84:bc:05:e0:4d:7f:6d:63:f0:75:
         71:07:b5:01:fc:4a:10:c9:a2:70:ec:92:fc:eb:97:c6:e2:f8:
         ce:58:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:34 2026 by rpki-client