Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa4a681-1df2-38c7-9d23-0f9ec6b9f296.roa
File:                     ffa4a681-1df2-38c7-9d23-0f9ec6b9f296.roa (raw, json)
Hash identifier:          Vj1Y6oXUScn6pFuFQmffrn8wZYzaP4/Hrm6U2jj1nCs=
Subject key identifier:   4D:F0:A1:EA:DF:EA:53:92:46:47:CD:C3:9B:78:89:71:C5:4C:DD:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE59FA35C8D92ADCAF6ABBA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa4a681-1df2-38c7-9d23-0f9ec6b9f296.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.193.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:fa:35:c8:d9:2a:dc:af:6a:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5320b78d-d8ad-4301-96dd-fedb8f0ab874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:0a:dc:b9:ab:01:73:48:9b:e3:3d:2e:25:
                    49:57:d9:82:d9:b7:8f:74:c8:7a:e5:ba:38:e8:62:
                    fb:0f:29:3a:39:ee:cc:08:43:e5:ab:0a:10:32:01:
                    b5:31:c3:e3:c1:6b:99:c1:31:8f:f1:85:aa:c7:3f:
                    da:72:78:2f:34:93:2a:66:5c:b8:7d:c7:ad:20:64:
                    c5:bf:a6:64:3e:21:ea:d8:17:3d:a1:67:dc:93:bf:
                    55:9b:28:ff:bd:ad:ce:91:66:a2:f1:3b:af:7b:aa:
                    89:df:74:a8:7c:b3:8b:65:1c:7f:e5:33:98:47:3a:
                    1e:fa:60:b4:65:82:79:7f:25:97:48:3f:f7:18:85:
                    bd:5f:84:db:f5:53:e5:bc:13:1b:6e:df:23:56:a9:
                    cb:e1:0e:56:4e:32:c0:24:f4:f5:63:74:16:64:6a:
                    34:de:21:87:f1:97:85:7a:87:2d:63:98:8b:4b:cd:
                    bc:73:20:26:c6:8d:bc:97:10:b7:61:f3:b9:4b:6f:
                    54:a4:5d:c9:74:73:1f:bf:4b:b4:51:ef:4f:7a:a0:
                    11:55:0f:30:ac:2a:09:ef:dc:37:fd:45:40:16:d9:
                    61:f3:c3:32:38:3a:08:bc:8e:db:63:15:a5:39:73:
                    39:d0:05:1a:5a:aa:ce:0f:c3:fc:40:db:2e:1a:e8:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:A1:EA:DF:EA:53:92:46:47:CD:C3:9B:78:89:71:C5:4C:DD:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa4a681-1df2-38c7-9d23-0f9ec6b9f296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.193.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:62:dc:81:fb:a2:05:b7:96:3e:d2:ee:a9:06:1b:37:e1:
         df:79:21:eb:c2:4a:8c:1b:93:f0:0c:b9:0f:50:34:6f:70:60:
         82:52:d7:96:8c:a7:6d:38:ac:cf:7c:0c:33:1a:2a:e2:9a:83:
         a1:20:fb:fd:37:56:9d:6e:49:82:2f:c4:01:5f:ee:3d:54:ca:
         34:8b:8c:65:be:b4:75:c7:33:1a:5f:e8:ad:bc:d3:fc:d4:f2:
         11:c7:20:ed:2b:6d:d9:36:ef:88:a5:b2:a0:1b:bb:58:c2:4f:
         9b:cc:a2:88:05:08:f2:8e:fd:d5:a6:fb:02:cb:14:3b:b1:44:
         f1:bc:87:6d:30:99:83:50:5c:bb:86:e0:f0:45:57:90:a8:0e:
         c3:51:2e:f5:13:10:9c:98:69:d3:e7:20:99:7f:df:dd:c1:b1:
         a2:30:ee:30:f0:ab:4c:2a:48:f6:b2:ab:66:cd:d0:5e:3d:ab:
         3c:53:f3:e0:36:0a:fb:6f:b2:ac:c2:c4:ae:c8:32:bf:eb:07:
         55:92:63:ce:83:92:50:de:39:e7:69:d7:7d:c5:39:3c:f2:0d:
         68:02:0c:66:82:7b:67:0a:e9:08:42:92:90:f0:28:63:da:d1:
         f0:1a:56:a4:1b:95:3d:0a:f6:5d:69:7f:55:2b:7e:2d:3f:21:
         fc:26:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:13 2026 by rpki-client