Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a66fa16-c44b-38da-89cd-1cb9d2b020a1.roa
File:                     1a66fa16-c44b-38da-89cd-1cb9d2b020a1.roa (raw, json)
Hash identifier:          t0IpDt0cWqytrhEkoZ/8WBJLDcnPxpWWLdB4UNlhe7U=
Subject key identifier:   CC:38:70:02:04:50:50:DE:3C:1E:54:AE:0A:13:BB:35:B5:ED:B3:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7312DFCA272AC9BC95B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a66fa16-c44b-38da-89cd-1cb9d2b020a1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.226.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:31:2d:fc:a2:72:ac:9b:c9:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=54afb64c-cc7f-413e-9ec9-db4d637358d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:48:8e:be:49:63:d1:34:11:4e:63:07:f0:
                    a1:8c:e7:b2:d4:1e:c8:b3:ce:af:56:11:b2:8b:2e:
                    fd:b1:d9:85:75:f5:88:98:92:fc:a2:c4:84:a5:d1:
                    bd:d0:02:3e:bf:ba:e4:ff:2f:72:9e:55:6a:9f:08:
                    cd:52:7e:58:cd:ff:29:22:eb:52:f5:28:77:8b:06:
                    df:8d:a0:0b:80:40:d2:cf:f5:cb:be:03:ac:d2:35:
                    e3:35:e8:0e:dd:9d:ce:66:9c:bc:c6:ac:ee:14:7c:
                    0d:68:2a:b3:53:b2:45:40:d9:62:cc:1a:1a:2e:85:
                    85:f2:04:05:e1:4f:bc:c4:49:91:aa:f8:b6:64:3d:
                    42:01:d8:4a:df:53:30:18:f8:0e:2f:a9:c0:17:4a:
                    62:a2:b3:fe:55:e5:ef:64:a5:39:d7:4e:8c:eb:0f:
                    2f:5e:f9:54:0f:9b:21:9b:46:83:19:85:8b:60:17:
                    d5:3f:74:74:97:64:48:fe:d2:68:bb:5e:53:d0:d2:
                    19:b1:bb:e2:73:76:f5:b2:5c:c3:42:01:5c:2d:d4:
                    fd:95:33:12:22:9c:a0:50:e1:da:19:ba:82:42:39:
                    bd:d7:fc:19:f7:81:72:75:ac:f3:27:31:48:0e:54:
                    ef:2c:31:cd:0c:2f:fb:ad:44:a7:33:3c:a2:bf:01:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:70:02:04:50:50:DE:3C:1E:54:AE:0A:13:BB:35:B5:ED:B3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a66fa16-c44b-38da-89cd-1cb9d2b020a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:ef:0b:3e:81:43:84:25:8b:a6:0b:12:8b:27:48:90:67:
         17:b6:f6:f2:e9:56:22:34:b0:54:89:91:0e:ff:f8:65:8c:c9:
         63:25:6b:60:d2:bc:9e:b2:d6:1d:60:81:da:95:3b:e2:7f:57:
         fa:e2:60:6e:11:b2:40:5e:d6:8f:15:33:c9:11:c2:a0:e7:0a:
         48:4e:eb:9b:9b:e2:da:04:0f:7b:b4:c0:8c:a9:e0:6f:30:eb:
         48:3e:8d:8f:05:ec:fa:93:48:f7:27:cd:3f:48:8a:76:1f:b5:
         90:0f:41:85:72:7d:e2:fa:5e:26:e0:84:27:7e:fc:6e:73:5e:
         75:3a:32:2e:87:87:2b:f0:fc:2c:41:40:44:9f:24:14:3e:86:
         a3:4a:3a:11:d6:3d:2a:36:37:d2:6b:88:29:ce:0e:40:a5:46:
         1e:a5:03:5e:e7:32:41:2a:53:59:b1:03:f1:cd:59:93:59:b7:
         d3:db:24:18:53:9b:48:ff:bc:49:64:af:9c:35:04:22:14:b0:
         4f:59:9a:fe:2a:e2:63:bc:fe:d7:2d:60:d9:66:59:2c:23:2d:
         66:47:83:0a:ca:0a:c2:b2:c8:fa:bc:e0:0a:f8:09:9d:a0:d4:
         19:96:0e:fb:1d:80:7f:46:a8:04:fc:71:11:fd:43:06:87:6d:
         fa:69:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:17:27 2026 by rpki-client