Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fedbb94e-8176-3b28-8c31-89f1f3cc019f.roa
File:                     fedbb94e-8176-3b28-8c31-89f1f3cc019f.roa (raw, json)
Hash identifier:          sV6T5YUoKmZV5zt38LAla+dSki/OO/+JSXFDp6Voviw=
Subject key identifier:   70:30:D9:E5:AE:69:A2:85:03:7D:2E:20:2E:2D:AD:C3:1B:F9:5E:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D9560EDF812AA79857540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fedbb94e-8176-3b28-8c31-89f1f3cc019f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.202.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:95:60:ed:f8:12:aa:79:85:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=11bc7fcd-756c-4b10-a434-169de8484c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:49:f6:a7:ae:32:98:ed:a5:f4:f6:cf:e0:
                    f6:ea:87:0b:cc:6f:72:1b:eb:57:bb:ea:44:b1:80:
                    18:7e:37:48:31:78:3c:55:ee:42:8d:6e:4e:25:8f:
                    d6:29:2b:50:12:d1:17:16:d0:d2:43:7d:f0:3a:ea:
                    00:5b:b3:0c:29:df:bb:8f:a0:52:5e:6b:52:b1:47:
                    99:c7:36:bb:1a:cc:38:84:2c:44:d1:4f:04:86:55:
                    fb:65:82:22:cb:ef:ee:44:09:33:00:c6:e8:75:ce:
                    c7:d8:db:db:25:e8:87:e8:bf:e9:85:ce:13:95:51:
                    fb:cf:68:40:1e:90:79:1e:31:c5:0a:a4:dd:83:1e:
                    bc:90:9c:18:46:ae:ea:e1:7d:a2:aa:22:04:c9:86:
                    1d:09:11:ec:74:8d:36:42:44:56:7d:af:52:42:c9:
                    d4:14:0e:1f:8d:ef:0e:2d:a4:b3:36:7d:7a:78:31:
                    dd:4a:84:4f:5c:27:48:f1:bc:da:ec:12:98:d0:80:
                    cc:d5:92:7a:ea:87:91:99:c8:f2:db:70:33:a7:af:
                    b2:8a:4b:27:3f:ce:2e:19:0b:49:36:85:df:b7:4b:
                    ac:09:b6:64:3c:f4:05:e5:31:f5:9e:b4:c3:bb:b8:
                    48:45:8c:be:ba:be:04:f7:67:d5:7a:ed:38:06:22:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:D9:E5:AE:69:A2:85:03:7D:2E:20:2E:2D:AD:C3:1B:F9:5E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fedbb94e-8176-3b28-8c31-89f1f3cc019f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:d7:44:d5:f2:0e:e2:6f:92:46:01:e3:b4:9f:08:f3:fb:
         24:91:64:bd:10:59:d5:ed:dc:9e:be:77:ed:d3:a9:4f:b6:ca:
         c2:0b:cf:25:2e:ea:dc:28:50:82:ee:7f:79:26:38:69:43:a9:
         06:2d:78:51:00:39:79:08:59:db:35:a2:eb:f3:61:b2:c5:72:
         f2:e2:10:cf:3c:e6:5b:e1:6c:33:82:2e:55:21:90:e2:5f:ee:
         0a:b3:ec:31:21:54:13:d5:18:76:ce:a0:a7:27:de:fc:18:b9:
         ff:5f:32:91:16:5a:34:07:29:77:ee:b4:12:6e:eb:bc:c8:31:
         1e:18:34:c6:64:ea:76:77:1f:a8:e5:ed:11:5d:33:b1:1d:94:
         7c:da:27:47:31:65:49:45:7a:28:47:f9:da:d4:3a:e3:58:3a:
         91:2c:b5:6c:79:b4:0e:a5:1b:a3:50:15:3a:15:7b:86:55:6e:
         f6:43:45:f4:32:df:23:4c:16:c6:50:29:b7:5c:2b:19:07:56:
         13:86:fa:24:54:19:86:05:79:83:41:74:c2:07:95:28:d4:b4:
         11:d1:22:35:5f:23:01:f8:8b:06:7c:19:66:9e:bb:cf:b9:3f:
         88:bd:3a:e6:f0:00:88:f4:26:57:a5:7e:43:da:26:52:07:79:
         fe:8a:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:50:12 2026 by rpki-client