Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b56d85-80e3-33e6-95ec-5823b66d5a4f.roa
File:                     f8b56d85-80e3-33e6-95ec-5823b66d5a4f.roa (raw, json)
Hash identifier:          o8icSva4UwxzRGCvwqLWoBqv0/lDJOElmyPwFl+DmBI=
Subject key identifier:   B2:63:68:63:B1:11:34:AF:F4:8E:07:BF:2E:83:E1:9F:C1:7C:57:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA6BA6BEF0DC3FEEA9A9F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b56d85-80e3-33e6-95ec-5823b66d5a4f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.25.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:6b:a6:be:f0:dc:3f:ee:a9:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7109073a-5a01-4227-9b0f-0bf02882a1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:ae:65:76:4c:aa:16:7d:e4:91:c0:e2:91:
                    cc:1b:3e:2f:f4:f4:58:73:c9:7f:fd:47:e5:a3:fa:
                    1a:23:7a:7f:93:f2:1e:69:2c:8f:45:71:41:82:63:
                    a1:06:56:c0:e8:37:5b:9e:c8:86:75:e6:14:a7:41:
                    e3:ec:b9:79:d8:fe:3c:6a:9a:18:8d:1e:19:0a:ec:
                    bb:56:42:a4:5d:31:1d:fb:51:7b:ff:d1:2b:ed:f2:
                    f4:24:8c:e7:c8:1f:c9:bf:87:98:fb:39:c2:79:77:
                    59:d3:c6:06:b0:19:94:7e:a9:7c:a0:5d:13:1f:21:
                    a3:a1:b5:b7:22:59:9d:e7:e8:56:c1:63:6f:c9:2d:
                    3f:65:e6:0b:3c:ed:64:d7:86:a7:8c:2a:6b:00:4e:
                    52:3b:f6:4c:ac:ec:ab:6e:d9:36:ac:d1:b2:6a:72:
                    ac:88:a2:1b:87:23:4e:d5:7b:f8:cf:d8:d5:c4:a3:
                    86:a0:9b:78:20:a8:6c:96:43:84:78:92:ca:23:8b:
                    45:41:3f:06:ba:47:55:10:c0:29:b2:4b:67:4e:8d:
                    1f:ef:0b:5d:98:21:d4:9d:31:d6:37:19:13:c4:c4:
                    90:79:66:6e:07:cd:8f:37:22:de:6d:ae:0f:33:8d:
                    72:eb:9f:37:3e:c6:c0:ec:dd:d7:3d:a9:20:14:61:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:63:68:63:B1:11:34:AF:F4:8E:07:BF:2E:83:E1:9F:C1:7C:57:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8b56d85-80e3-33e6-95ec-5823b66d5a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:19:f5:af:56:85:76:f1:e7:c7:18:a1:f2:b6:21:db:7d:
         f8:7f:f8:05:3d:c7:b6:f7:56:b7:06:55:f9:de:a3:92:0a:08:
         82:1b:23:b0:20:f9:e0:db:66:6e:6b:95:59:b9:d1:a0:a8:7a:
         ce:13:82:fa:c0:1c:d3:80:04:f1:43:e2:89:76:48:38:b2:7f:
         bc:23:b1:51:dd:c9:cf:40:7d:b0:27:97:b2:3f:72:a4:3f:85:
         ce:d1:ad:1b:72:67:b8:04:74:d7:f8:ec:c8:c2:89:ab:56:f6:
         98:a0:56:07:99:da:06:21:8e:0c:30:b1:b4:80:13:00:73:39:
         fa:dc:e1:93:de:dc:48:0b:17:fa:1c:59:76:60:32:20:ed:41:
         23:bc:35:4d:c6:e9:5f:41:30:75:e5:38:39:77:ec:de:b1:35:
         03:3b:cd:55:ee:ab:f4:8f:98:81:e2:e9:2b:8b:27:07:12:e9:
         5e:0d:a0:80:3f:f1:ff:b7:8a:f8:92:c7:84:b4:35:be:cc:f0:
         33:a2:b4:23:44:41:3e:99:76:53:8f:e0:20:6e:4f:ca:cc:b8:
         aa:de:60:e4:6d:9d:02:ed:39:24:06:0a:f5:66:07:2c:fd:85:
         3e:61:cf:28:a0:49:38:77:44:9a:b3:f8:c6:3b:6d:f5:9b:26:
         bf:c6:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:17 2026 by rpki-client