Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f00201-db36-394b-a89f-8b9f77a60a3e.roa
File:                     f8f00201-db36-394b-a89f-8b9f77a60a3e.roa (raw, json)
Hash identifier:          59Pw7ogeo8Wie/NFjSKWQ5mA1yzRi7dXYOveYvcKTjY=
Subject key identifier:   08:E8:6C:4F:E0:79:5C:4D:51:43:8D:5B:17:D4:66:70:13:0F:E1:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE94D52D9BE77A7AC660C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f00201-db36-394b-a89f-8b9f77a60a3e.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        73.58.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:4d:52:d9:be:77:a7:ac:66:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=f97aa20f-4c8b-47fb-a562-6582955ebc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:48:d2:74:99:2d:8b:37:3e:05:7e:d3:26:
                    33:03:16:99:ff:33:1d:52:91:58:95:15:42:3a:b9:
                    2a:ef:86:b8:1f:f4:b5:37:9e:ef:ff:ab:bc:d6:ce:
                    d4:d9:44:29:21:3e:51:b6:b7:88:37:d5:7e:55:36:
                    db:ca:a9:d1:5f:5d:61:0a:f3:e3:57:12:df:42:d4:
                    32:16:e9:34:0f:21:6f:0a:6b:f0:95:b0:b8:e2:cf:
                    2f:2c:93:37:58:80:60:7f:bb:46:5a:1f:10:80:55:
                    aa:d1:7d:28:1c:a6:61:2e:00:c8:ec:ca:99:c0:5b:
                    24:99:15:86:b6:21:57:b0:6f:58:05:51:9c:d5:2d:
                    07:b2:e3:3d:6b:13:a3:4f:f7:54:59:a0:08:69:c8:
                    c3:c3:ca:63:df:a4:78:b6:05:f6:28:e9:fc:65:76:
                    bf:c6:9b:67:69:78:fb:27:c0:3d:8b:fd:7d:c3:de:
                    65:5d:44:07:ab:52:08:7f:72:05:51:bc:ca:b2:8d:
                    80:a0:30:41:a8:12:91:93:e7:af:5e:e5:57:c4:7b:
                    79:b9:82:5c:be:cc:e0:79:8c:8c:a0:58:65:9c:ee:
                    2f:36:f8:31:93:7c:50:ce:3c:4e:39:30:bc:cf:38:
                    68:aa:ae:e1:42:e6:59:e6:48:dd:a0:60:6d:e1:a6:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:6C:4F:E0:79:5C:4D:51:43:8D:5B:17:D4:66:70:13:0F:E1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f00201-db36-394b-a89f-8b9f77a60a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:e2:b9:8f:d9:4c:b6:b2:08:8b:14:c8:02:9f:0a:4d:53:
         41:87:a3:df:00:ca:d9:48:c4:e1:a9:f7:ea:49:0a:2f:80:8f:
         d9:7a:af:65:dc:79:80:2b:46:ea:6b:2f:be:86:10:26:a4:f1:
         9f:72:a7:71:52:29:a3:11:59:0e:80:da:c9:65:5d:d5:90:48:
         2a:1e:a5:64:fb:1e:f0:b7:ce:25:43:e9:5b:e9:13:82:2d:49:
         27:77:f3:92:03:e3:d8:f9:67:ec:53:5e:04:45:81:22:a7:6e:
         05:ed:0d:3a:10:6a:a8:d2:6f:a7:c7:e2:a3:1b:36:07:c3:ca:
         de:8c:36:b3:56:4a:e2:87:3c:2c:cc:e7:84:8a:4d:f8:f7:e5:
         13:ad:c2:d6:03:f3:aa:44:8f:fb:c0:84:69:b3:ce:97:18:26:
         e9:fb:57:ce:b0:c6:00:b7:81:2a:4d:58:b2:8c:cc:01:c9:70:
         90:e5:fa:48:0a:5b:ff:ae:1d:bb:8b:44:c9:7b:aa:61:7f:9f:
         1b:fb:99:22:6a:05:c5:b8:e8:b5:9f:90:85:6c:6b:a7:e2:bd:
         03:c7:82:5d:e5:93:52:b9:fb:49:de:61:8c:18:c9:cc:a6:51:
         73:b5:04:21:21:83:f2:40:86:2b:3b:4c:a1:7a:82:97:39:e3:
         e8:08:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:54 2026 by rpki-client