Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47db1c7-90d3-3fec-b95c-9dabf39bbc26.roa
File:                     d47db1c7-90d3-3fec-b95c-9dabf39bbc26.roa (raw, json)
Hash identifier:          qVqBNNFJ2y8qTi30GdiT86KQ7iV6zGkqjpNp3NjM8Nw=
Subject key identifier:   8E:B0:A9:A6:3B:97:AB:D4:19:8E:99:88:0B:87:A8:D0:10:1A:09:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58779B84E0CEEA7EE52980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47db1c7-90d3-3fec-b95c-9dabf39bbc26.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.8.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:77:9b:84:e0:ce:ea:7e:e5:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=bec56a7d-733d-40cf-bb0e-1509f331931f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:40:67:d6:ba:6e:ac:e1:bb:0a:92:b7:0c:
                    90:4d:bf:b6:69:28:ed:75:b2:85:62:8b:95:c8:19:
                    97:62:c8:68:68:c0:c9:a7:1a:8d:e9:4f:27:1f:3e:
                    44:ca:ff:6a:da:7e:e3:df:8c:03:83:2f:f0:0b:2a:
                    d8:e6:fe:09:2d:d3:b6:f1:5b:32:f6:32:e5:27:75:
                    4a:bf:a9:af:0a:cd:af:30:39:45:5f:63:ce:ab:81:
                    ec:97:2c:29:55:2f:22:93:f3:b2:8f:e5:4c:2a:34:
                    dd:f0:5d:ca:79:89:e2:48:eb:7d:d8:c2:81:23:70:
                    c0:fe:5c:f8:41:08:77:05:49:2c:7d:05:b0:b4:f1:
                    00:38:b3:2d:81:dd:62:ba:a2:70:af:82:fa:bf:7b:
                    23:5b:9d:c1:e3:5a:9e:73:00:79:8a:59:b8:2f:d3:
                    a5:c7:ad:df:fa:f0:d2:37:cb:6e:36:97:92:20:c3:
                    36:46:f3:c2:d4:c5:d4:f3:ae:7c:9b:56:df:34:f9:
                    6e:8a:a2:cd:26:e9:22:79:fd:f2:b5:84:f3:6c:37:
                    de:3a:1e:70:97:85:db:52:bd:83:e0:58:0d:a8:ec:
                    97:e0:1e:08:81:75:c4:7a:fc:ac:5c:b2:04:2b:0c:
                    8f:31:64:9b:36:66:20:6b:e9:db:57:31:0b:7b:a8:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B0:A9:A6:3B:97:AB:D4:19:8E:99:88:0B:87:A8:D0:10:1A:09:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47db1c7-90d3-3fec-b95c-9dabf39bbc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:46:e0:34:72:2f:46:3e:36:df:8e:6f:6d:97:33:30:d5:29:
         7e:23:99:32:00:3a:53:ee:aa:50:8b:73:d3:dd:4e:35:ee:23:
         26:50:66:43:ff:d5:2d:a6:63:18:86:c2:94:32:51:d9:fd:ab:
         cd:b8:47:5f:7d:7d:0a:8c:0a:4c:1c:43:7f:f6:c2:b1:9f:5c:
         9e:89:00:dc:99:31:f3:6b:fa:0c:ea:36:5d:57:e2:f9:c5:b5:
         59:e3:a0:49:77:e8:30:f8:00:67:09:af:e2:12:77:1a:a9:aa:
         c0:f4:3d:73:8f:91:38:1a:de:15:51:9f:fe:3a:b5:ea:01:1d:
         f9:ca:b9:6c:b9:f5:ab:97:d8:a8:a5:92:a6:32:71:11:38:39:
         ad:74:59:ea:38:74:ae:bc:c2:dd:e5:58:96:a3:6a:a8:fc:95:
         30:e7:03:b1:7f:a4:df:06:9f:5c:79:1e:0c:83:bd:e8:54:78:
         e8:e9:0a:d9:e2:53:85:b4:9b:c2:97:66:ea:9e:4b:98:ba:89:
         0f:f0:43:71:55:e5:b2:0b:a3:e8:75:87:df:64:16:33:ef:c8:
         2a:a7:c5:a1:87:e7:f2:46:70:38:de:56:a2:c6:23:a4:5d:22:
         1f:35:01:68:31:bc:27:1b:df:8d:ad:3e:40:aa:35:9f:0d:37:
         8e:98:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:46:53 2026 by rpki-client