Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e74469d4-ad2c-3b3c-971e-41b9c647ade1.roa
File:                     e74469d4-ad2c-3b3c-971e-41b9c647ade1.roa (raw, json)
Hash identifier:          ahzH8Gb+EaigT6xAAiFF5vQOsb+Aa2ESPlJbb/GZwEY=
Subject key identifier:   5C:09:56:1F:14:48:51:53:38:B3:5B:9F:88:9F:00:81:3B:2B:A7:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5773002EBC0B8A2B27BB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e74469d4-ad2c-3b3c-971e-41b9c647ade1.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.33.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:73:00:2e:bc:0b:8a:2b:27:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c6aabb78-57ae-490e-b4c9-30d47f54f5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:4f:44:6b:ed:dd:8f:72:97:13:4d:8a:17:
                    33:e2:1e:34:09:39:d3:4e:be:de:96:a4:c5:95:b2:
                    9c:29:d8:6c:cf:ab:c0:e8:e5:df:0d:bf:f2:8d:66:
                    a8:98:ae:65:2b:e8:71:10:de:86:54:f5:fe:de:f2:
                    07:5d:a5:23:74:cc:62:f3:4f:53:3e:21:8e:36:da:
                    45:5a:9b:22:42:70:1a:4d:47:30:4f:71:6a:38:be:
                    92:60:ef:3d:c3:0d:87:d8:02:45:ae:fb:2d:59:dc:
                    1e:77:86:25:10:5d:a2:e0:c4:59:95:2e:06:44:bb:
                    4a:cb:c3:2b:69:3b:aa:e0:95:eb:b7:7d:37:56:80:
                    27:89:f6:5e:07:3b:2a:da:f5:58:b6:3a:13:c9:98:
                    40:a5:b1:8d:b0:d1:21:d2:98:4f:a0:35:ac:00:fa:
                    99:36:2e:40:46:21:e3:08:98:03:d2:3c:5d:89:a5:
                    4c:be:34:18:f5:56:f2:e6:61:60:87:89:d7:cc:53:
                    ab:a5:92:4e:54:19:40:40:c8:83:a9:c6:bd:f4:b4:
                    a6:c3:0e:e9:49:b2:8d:2d:fa:8c:27:87:ae:57:21:
                    58:39:4a:87:81:5f:ed:a0:b5:e6:77:9e:02:71:dd:
                    00:bf:4e:54:2a:a2:21:98:8f:83:9e:39:47:2e:80:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:56:1F:14:48:51:53:38:B3:5B:9F:88:9F:00:81:3B:2B:A7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e74469d4-ad2c-3b3c-971e-41b9c647ade1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.33.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9a:0c:37:44:68:c5:36:d0:84:a0:a7:02:02:54:18:b2:37:
         42:f0:33:79:9f:bb:01:c0:31:7f:ba:d1:94:0e:a1:83:7c:6e:
         12:20:ed:41:21:c3:51:04:b0:ab:bc:a3:49:9e:9c:0a:ab:49:
         4a:26:7f:eb:c1:9f:d1:f9:2f:4f:bb:fd:b5:df:1c:f4:6c:3d:
         42:a0:33:7a:fc:12:ce:08:38:32:6d:2c:87:3f:f0:33:7f:42:
         46:d6:a1:e2:a1:35:5c:17:e1:af:da:f4:16:9d:31:9f:92:de:
         4c:0f:fc:ca:91:c1:c8:9c:09:3f:44:ad:91:b2:74:f3:1b:fe:
         4e:08:b9:90:48:0e:58:92:ff:6b:b2:57:a3:75:2d:fd:df:46:
         53:15:56:5b:eb:e2:25:19:90:19:d8:01:c8:cd:e5:91:54:b3:
         7c:0b:b9:eb:a9:39:02:1b:59:c2:c6:cc:ef:d1:da:e7:8b:e0:
         5e:32:b9:f7:b9:fe:c4:70:87:e0:18:c9:3b:6e:fe:f1:b2:c8:
         41:20:02:80:47:7d:38:0a:c1:2b:f3:a9:e0:0d:4b:08:5f:db:
         a3:8b:71:0b:00:6b:a8:25:fa:83:94:7c:df:7c:2e:92:32:8b:
         d9:81:b2:87:70:74:16:5e:f0:e2:69:40:c8:eb:ae:e3:4a:a8:
         36:5b:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:12 2026 by rpki-client