Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5965a-021a-3d98-9539-3206a9ccab5a.roa
File:                     e8a5965a-021a-3d98-9539-3206a9ccab5a.roa (raw, json)
Hash identifier:          EZtu70HHW5I7qI037+npEiMTRIaOkzT51tZfiUTzqz0=
Subject key identifier:   20:1A:12:DB:9B:DF:5F:03:00:1F:B1:9A:39:03:E4:14:18:86:AB:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE579DD31A4B016C07EAE940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5965a-021a-3d98-9539-3206a9ccab5a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.226.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:9d:d3:1a:4b:01:6c:07:ea:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d09d1c4c-eccf-4ff6-a49b-9dd935e60d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:88:5f:7e:02:77:1d:6c:7a:2e:43:e4:2b:
                    05:0f:a3:27:db:46:f9:a9:d3:67:e4:63:81:0c:5e:
                    40:d7:2f:24:cb:33:0f:d4:fc:71:a3:ff:89:ac:19:
                    5e:90:65:1f:43:58:b0:a1:66:d9:bc:0f:32:2b:12:
                    47:05:6f:d7:7a:a3:21:e3:66:d3:27:13:fb:87:dd:
                    03:7b:08:86:59:3f:6e:5f:29:60:86:9b:a4:ce:c3:
                    8c:b6:ff:e6:74:06:85:ff:0d:34:5c:40:be:1a:36:
                    41:96:7e:22:4d:21:4a:be:69:ae:6e:00:20:74:a0:
                    fd:4c:ac:76:71:c0:a5:eb:47:f1:63:1c:2d:a9:77:
                    e1:34:76:4f:aa:3b:78:eb:2a:0b:b1:5c:12:56:36:
                    16:00:b1:47:a3:f8:a2:bd:4b:a0:64:ff:41:e0:c2:
                    a9:db:ad:b9:bf:c9:c7:ec:5f:b4:79:fa:2a:9b:2f:
                    45:ce:1f:6a:21:c7:e3:2f:56:70:5e:c6:7b:09:4a:
                    15:ac:9c:aa:28:f3:77:cd:18:f8:7d:45:ca:9e:3c:
                    3f:e8:ee:92:1d:cf:16:52:a8:18:c8:7c:ca:a4:70:
                    c9:f3:32:4b:17:fc:5f:63:a2:d5:cb:1e:db:9f:04:
                    ac:47:a3:59:c7:30:31:b8:28:1b:47:94:38:c4:25:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1A:12:DB:9B:DF:5F:03:00:1F:B1:9A:39:03:E4:14:18:86:AB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5965a-021a-3d98-9539-3206a9ccab5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:aa:c2:6c:a0:de:1c:61:cc:cd:6d:e8:b3:f2:6b:d3:33:d8:
         a6:08:8b:a1:c4:a8:ab:80:d1:66:9f:e6:98:41:6c:55:70:8b:
         61:45:44:33:66:94:fc:02:ae:5c:05:37:7c:f7:28:c2:78:d3:
         c7:84:85:81:e0:74:5b:12:e1:c4:e6:fd:f0:c8:4a:2b:17:1f:
         4b:37:a7:7b:a2:86:c3:63:f1:67:e5:c9:4f:ab:c3:16:5a:ec:
         35:51:ec:ec:fc:84:ac:18:35:f6:2f:c7:d2:0a:70:26:61:e8:
         16:30:73:4a:68:f8:c1:66:9d:98:ce:59:13:5a:61:ed:79:d9:
         7c:ee:05:bf:24:19:40:83:eb:14:90:9a:b4:09:97:e3:0b:cc:
         89:a2:ed:1f:9c:95:9c:71:17:9b:5c:0f:76:d6:94:22:3b:f0:
         35:5c:6d:71:87:ee:44:dd:be:b0:c5:e3:b6:2a:67:5e:5c:d9:
         5f:a6:bb:39:87:4c:68:3c:3d:ec:42:fd:39:e7:0f:54:eb:65:
         65:67:4b:29:7a:ea:87:18:3e:ac:cf:42:a2:60:c8:19:4e:0f:
         9a:02:54:11:37:3c:a6:80:d0:ba:c2:29:64:c6:0f:f0:66:63:
         1e:f4:e4:58:b7:fa:31:1d:cd:80:7a:d0:cb:1a:97:1e:44:60:
         f9:ce:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:50 2026 by rpki-client