Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0d33f41-68ca-39e4-be34-3e84f88355af.roa
File:                     f0d33f41-68ca-39e4-be34-3e84f88355af.roa (raw, json)
Hash identifier:          AP0bdIDW5eaKl8GjBdC/jjh2AEcA4xE23T57yN5n2aY=
Subject key identifier:   F9:51:D1:B5:33:FE:A8:13:29:69:48:82:AE:5B:C3:5C:4E:5D:E6:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA32EDCA542A8470F48A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0d33f41-68ca-39e4-be34-3e84f88355af.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        75.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:32:ed:ca:54:2a:84:70:f4:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=129801dc-1c41-47a5-b7bb-0af10b460b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:01:a4:bb:46:c7:5c:c2:69:5d:f0:b1:49:
                    55:3f:06:22:22:e1:d7:ee:26:c1:3c:0b:b8:ec:ba:
                    6d:36:65:4a:13:c3:df:f1:35:4c:3c:d0:e5:9b:7d:
                    da:47:83:1a:d7:49:1e:59:4e:a2:a7:20:e6:78:a1:
                    66:ce:4a:7e:6e:39:8d:a3:5c:a8:4a:d2:43:6b:38:
                    ae:44:7f:2b:ff:39:27:a6:bc:43:4b:a0:90:3b:d2:
                    00:23:1a:67:0a:f7:f2:4a:f6:84:1e:58:10:cc:86:
                    25:73:91:7e:d2:8e:68:76:e6:a2:48:8c:a7:ef:fe:
                    18:b9:8e:24:2a:a0:3d:7e:38:4f:49:93:3b:1e:65:
                    f6:00:8b:dc:0b:5c:d7:b6:bb:ed:c1:5c:1e:97:ac:
                    4a:7c:a5:14:87:97:15:cb:de:d2:52:7b:22:3c:aa:
                    7e:7a:4a:91:58:ce:91:69:99:3b:13:38:1e:a8:6b:
                    b1:9f:75:ad:d3:17:a7:6d:72:8f:c5:14:55:c0:33:
                    b4:ea:4b:16:5f:dc:60:9b:2a:3b:6d:c9:02:ba:cd:
                    55:92:e5:0c:d3:5a:02:8d:ac:d4:2e:43:f7:69:a8:
                    34:19:d5:8b:d2:d6:f0:54:cd:9d:02:0f:25:70:b0:
                    50:cd:06:f2:a7:d4:48:73:85:2b:2d:51:d5:31:e1:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:D1:B5:33:FE:A8:13:29:69:48:82:AE:5B:C3:5C:4E:5D:E6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0d33f41-68ca-39e4-be34-3e84f88355af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:45:0b:22:0c:6e:c1:b9:11:bf:f1:9f:a3:8d:45:9d:3e:9f:
         f3:5d:57:d4:62:4a:1f:a3:1d:d2:22:48:2c:8e:54:0d:ec:22:
         24:71:a7:fc:1b:d7:20:22:8a:39:12:02:56:5d:43:b4:0b:c0:
         52:32:3c:82:2a:96:fd:0c:6e:98:8f:0a:2c:d5:d6:f5:43:e5:
         d1:9f:85:b9:74:2a:55:62:51:0c:2a:2b:b9:41:45:dc:40:ef:
         61:d2:d2:c9:21:ec:04:fe:ee:f7:33:4e:ff:59:ef:e8:80:d2:
         34:6e:21:79:5f:92:9b:4d:3e:98:e7:3f:a9:1d:67:0c:97:90:
         1f:54:33:9b:50:81:8b:4a:ec:4f:cc:b3:4a:0c:34:cb:a6:3c:
         99:27:e2:f8:55:b7:bd:97:00:39:89:f6:0e:bd:0d:89:80:0f:
         eb:c6:6d:c2:f1:e2:78:7c:aa:c8:39:ad:d5:31:50:30:cf:35:
         9c:5d:1d:db:1d:53:93:9f:77:9c:85:21:0f:02:44:19:96:44:
         b1:07:ac:75:3a:e2:39:5f:90:8f:ab:3b:f0:75:2e:f1:20:a8:
         d6:08:dd:1e:4e:71:fc:f3:22:9b:ab:78:cd:bb:11:34:e4:52:
         c8:9b:24:ec:cd:68:1e:b3:d8:06:c5:c7:5d:95:9c:41:bc:5d:
         e4:f7:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:34 2026 by rpki-client