Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa
File:                     1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa (raw, json)
Hash identifier:          IP6SoDD/nE/MrhQJY05KWZiLa4AplVdMvGAvYV1Dkzg=
Subject key identifier:   75:AA:02:9F:12:BF:47:22:64:DA:51:DF:C7:54:97:8D:19:7E:D3:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7CB07D08D62548EEA8F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.45.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:cb:07:d0:8d:62:54:8e:ea:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2bb94b51-399c-4efc-8bf2-8e3c8b0c0386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:80:a9:28:80:4b:4a:c3:76:2c:ee:3b:6f:
                    74:5b:d5:79:4c:7c:7a:3d:e0:1b:6e:81:42:60:d9:
                    a0:87:77:fd:4d:0d:80:31:ca:a8:02:7a:db:e5:59:
                    54:ba:0a:51:ac:d9:e3:80:7b:f9:fa:89:c4:e0:b7:
                    de:9a:fe:2b:b3:21:34:8f:97:1b:78:45:68:f0:e1:
                    a2:b7:c0:b8:66:8a:d6:3c:74:d4:ed:a7:88:9f:b1:
                    cf:79:d0:75:35:28:23:31:6a:dc:18:cd:38:fa:9d:
                    2a:8d:ed:b9:c6:9f:9d:ca:c4:9e:9a:e1:35:ed:88:
                    44:40:88:8e:b4:71:c5:f4:9f:99:c5:ca:85:7e:f4:
                    44:19:8a:bf:e3:8a:a5:2a:68:75:dc:1f:ad:a8:90:
                    6b:cf:96:7c:01:af:bc:98:a7:81:e3:a5:5a:f2:cf:
                    f3:bf:95:be:90:f2:de:a9:2a:c1:56:b5:42:12:75:
                    14:80:3b:5e:6b:f1:cd:57:66:c7:95:76:5e:db:73:
                    5c:a7:01:12:49:0b:cf:3b:60:f6:07:2e:2b:4e:90:
                    d8:37:a0:0a:50:31:a6:26:31:d7:c6:e0:89:de:ab:
                    a2:2a:47:9e:5c:4d:02:15:11:bf:d4:1e:77:ba:23:
                    0b:66:e4:98:10:27:35:42:ab:3e:7d:2c:4d:01:ee:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:02:9F:12:BF:47:22:64:DA:51:DF:C7:54:97:8D:19:7E:D3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.45.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:54:af:14:e0:8a:59:36:f3:74:e3:50:20:7e:4a:03:ca:90:
         fc:90:0a:b2:a8:cc:34:7f:af:be:57:8d:9b:da:8a:01:1f:5c:
         aa:ba:cf:7a:37:84:c9:af:22:a6:fa:f6:30:d7:c1:ec:d3:89:
         18:f9:72:04:3d:f6:7d:90:00:f7:e9:69:9c:03:24:ff:0c:f0:
         7c:36:56:91:b8:c0:97:e0:b6:1d:15:18:d4:3e:77:27:93:68:
         ef:dd:10:6f:d6:ea:e8:b9:af:38:b8:47:e7:34:19:4a:e9:1f:
         06:3f:2c:3b:ef:c3:78:9a:f6:87:f4:f3:7e:f4:24:18:7a:36:
         62:61:50:e4:ef:0e:06:52:00:be:db:05:b8:6e:73:52:c1:b1:
         01:bc:45:b1:bf:55:5c:0f:40:f8:a3:7c:04:27:42:03:97:3f:
         da:88:f9:10:ce:a6:56:eb:28:17:90:bd:35:8a:3d:e3:25:a8:
         1a:65:6d:76:29:28:49:9d:d4:16:35:98:11:d1:5e:d4:12:c8:
         91:ac:4a:0e:3a:27:a9:4c:39:74:2c:fa:d1:23:d0:f8:23:98:
         1b:ab:be:7f:62:5c:bb:f5:bb:da:37:27:7f:55:dc:e3:69:9f:
         f4:70:b3:c8:28:72:bb:6a:cf:b2:44:86:ad:3c:5f:68:e8:d0:
         25:48:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:19:33 2026 by rpki-client