Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004eec53-d2d6-38e2-8314-dc7dcff3dc6f.roa
File:                     004eec53-d2d6-38e2-8314-dc7dcff3dc6f.roa (raw, json)
Hash identifier:          AhLZBimP9YdEuhNdUqs3uSrIOUQo/I2kfwsBV1z1AtE=
Subject key identifier:   7D:28:99:8E:79:8A:BA:64:43:A7:A4:24:FF:AB:08:0D:C4:5E:2B:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B747F1E2A8335F3A0E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004eec53-d2d6-38e2-8314-dc7dcff3dc6f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.63.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:74:7f:1e:2a:83:35:f3:a0:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=3a0bc21a-8eae-4051-8413-8e4eeb03bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:ea:77:ca:6c:d0:39:f6:25:a7:32:7f:a5:
                    48:82:11:61:08:84:a9:d4:43:84:f3:a7:d4:6b:a6:
                    ff:99:a6:40:8d:20:de:4a:1c:5a:5c:26:02:dc:4c:
                    74:e0:bd:55:ca:4b:9a:e8:a8:e4:31:8a:02:18:17:
                    43:89:c5:8d:5c:77:35:1b:80:ed:fe:5f:e0:68:bb:
                    ca:2b:c9:78:21:f7:37:68:b3:03:00:76:5d:d8:20:
                    33:a8:c9:9d:af:92:20:aa:b7:51:c5:6e:00:c6:1d:
                    05:33:a9:48:b9:ff:68:e4:2e:a9:e8:7f:01:4c:55:
                    14:ed:e0:a8:b5:7d:30:a9:d7:d8:5a:c3:97:51:a6:
                    2a:b2:38:9e:e6:60:21:a5:32:83:41:ee:b4:96:dc:
                    ce:33:05:6a:15:4d:e4:40:a8:91:cd:a2:f0:fe:30:
                    58:68:fb:0b:23:10:25:3e:7a:4b:35:d3:6f:9b:9d:
                    1a:a8:32:b7:25:8d:f6:a9:61:15:d0:c7:2b:00:7c:
                    5f:66:e0:3a:db:8e:15:52:fa:94:1e:6d:8d:46:e9:
                    42:26:0b:bc:0f:16:e7:d0:be:1c:d8:d0:32:c2:1b:
                    d5:18:2b:57:c7:11:79:5b:69:9b:12:70:eb:33:86:
                    f9:f9:d5:f2:5c:17:f9:b0:15:40:a2:ed:0a:15:89:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:99:8E:79:8A:BA:64:43:A7:A4:24:FF:AB:08:0D:C4:5E:2B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004eec53-d2d6-38e2-8314-dc7dcff3dc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.63.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:11:a7:af:5c:b5:5d:ab:37:79:a2:84:25:f3:a7:e3:fd:b0:
         c6:a8:a5:00:a8:84:5f:e8:e7:1f:e1:87:c1:82:b7:7e:32:ce:
         b8:e9:4c:c1:40:69:dc:52:91:74:b5:4c:19:ae:31:fc:96:0d:
         cd:e5:35:4b:6b:27:c5:ed:f2:ad:b5:de:f4:4d:f5:2d:e2:93:
         a8:c9:95:84:43:52:98:11:47:3d:79:1f:36:0d:86:41:e7:5e:
         10:77:5c:07:80:6e:b7:87:3e:a9:ae:6f:2d:f1:0b:89:6f:35:
         dc:87:c5:3c:f8:0f:83:5f:ca:65:a8:c5:7c:33:bc:36:5b:50:
         68:29:54:d5:28:12:2c:ee:48:c4:f8:c7:99:52:3c:22:0a:52:
         7c:fc:38:63:6e:0f:61:06:0f:97:04:73:d4:31:21:8e:d5:72:
         4a:8b:c7:ee:64:7f:e1:63:b1:69:6e:b9:88:7a:8c:57:de:bc:
         f5:8c:67:51:44:56:ff:60:34:d1:54:32:8c:8a:bd:74:4e:ca:
         5f:3e:59:ed:57:bf:2d:dc:fb:f0:7e:d2:d8:ea:7c:ab:8f:f4:
         de:10:30:9c:7a:d2:67:13:f9:91:da:3c:a0:bd:43:67:d4:88:
         94:2f:ca:d7:10:72:bc:ce:94:c2:0c:08:23:cb:66:57:5a:05:
         c5:4b:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:04:04 2026 by rpki-client