Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddb8c703-97fa-3239-b029-6aa24c20ccc9.roa
File:                     ddb8c703-97fa-3239-b029-6aa24c20ccc9.roa (raw, json)
Hash identifier:          LvMoi52RPCirZ+kK60YunMWFi55Q6rU2MoBU9vhKWU4=
Subject key identifier:   C9:50:D0:DA:C9:16:33:D1:B1:02:21:78:E2:90:AF:67:8D:D1:09:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAB2AAA87C1F39D4CFB3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddb8c703-97fa-3239-b029-6aa24c20ccc9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.149.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:b2:aa:a8:7c:1f:39:d4:cf:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0a6246fc-a8c9-4c70-95be-eca91fa47067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:73:9f:e4:33:a9:b4:19:cd:7a:0b:c2:a3:
                    36:fd:5a:c6:25:8d:e4:a6:5b:a3:7a:9a:52:8e:b1:
                    a1:0b:fb:df:09:6d:6c:1e:7c:7f:bb:35:75:c4:68:
                    7a:c8:a2:98:d9:f0:92:b0:6c:27:bc:cf:07:77:1a:
                    8d:bf:f3:62:72:d7:85:a4:7b:73:a7:97:d8:db:53:
                    14:f1:ee:43:de:af:c6:5a:44:6c:58:b5:b3:72:db:
                    04:9a:15:ff:fb:5a:66:30:99:39:bb:1e:03:da:0f:
                    98:72:ce:13:a3:14:b0:3e:24:16:c1:a0:7d:d4:5c:
                    9e:1b:9b:3b:b8:e3:33:38:7c:36:3a:0e:00:14:9a:
                    c9:d7:5e:2a:09:cd:8a:77:30:ff:df:f9:16:b3:a0:
                    92:4c:f6:e1:f2:5d:2f:15:12:fd:ad:d1:d3:14:e9:
                    69:65:d4:f3:18:a6:b1:45:69:b1:e3:92:b6:54:1a:
                    2e:0a:4a:28:6c:70:68:80:ea:83:f6:db:84:9d:99:
                    fc:0a:33:eb:19:9b:13:90:25:f4:61:27:9a:40:9b:
                    5b:a6:e6:28:9a:79:5f:71:7e:45:86:d2:36:0e:4b:
                    34:ea:cc:c3:c1:7f:bb:3f:12:63:90:36:f3:ab:c3:
                    00:d2:a3:19:ab:2e:c1:f8:06:14:4e:46:50:92:a4:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:D0:DA:C9:16:33:D1:B1:02:21:78:E2:90:AF:67:8D:D1:09:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddb8c703-97fa-3239-b029-6aa24c20ccc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.149.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:1a:77:5e:b5:7d:3d:b7:cd:2e:21:ea:86:ed:8e:64:04:
         97:65:72:21:72:5b:3a:1e:c4:81:1f:0b:cd:34:58:70:0a:ab:
         ec:2f:37:73:90:4d:0f:10:75:a0:35:c1:73:a6:6c:25:8b:89:
         a7:40:58:f6:c6:f0:9d:00:d7:90:c4:32:21:9c:23:7b:b2:78:
         9a:47:d5:d5:0c:7a:5c:d7:36:d3:d3:0d:10:ac:75:8e:41:a1:
         eb:a9:96:18:ed:b0:fd:c6:f1:1c:4f:96:89:d5:54:c1:1e:e7:
         13:91:41:3d:d1:9b:55:f6:8e:36:e7:c7:d0:39:fe:a9:ec:f1:
         f6:ae:c1:c1:a6:92:ed:d6:3f:33:e8:75:00:28:15:62:47:3e:
         cf:9c:3c:19:ce:f3:2d:39:2c:15:ec:54:e3:26:86:2b:02:58:
         1e:19:79:65:af:40:d2:62:8f:3d:7c:24:24:1c:4c:e8:ed:ea:
         48:59:5f:2a:38:3e:82:b4:26:48:b0:63:8e:13:0d:f0:e0:d0:
         34:d2:a2:b5:a2:3b:6d:c4:74:e2:d1:87:1a:8d:ea:94:ae:10:
         93:16:dc:41:1e:c6:0a:b0:91:5b:47:d3:bc:bd:5f:5c:93:2d:
         4c:d1:f5:60:1d:5b:4b:8a:1a:cb:05:da:ba:1c:d8:c2:e4:72:
         5c:b9:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:45 2026 by rpki-client