Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2958d405-97e9-30d4-915d-dda94f09156e.roa
File:                     2958d405-97e9-30d4-915d-dda94f09156e.roa (raw, json)
Hash identifier:          xwG7ZuELOBNqfJ+sS0bS4udZGnd5FoAQPFpUDYFTngw=
Subject key identifier:   26:FC:78:07:94:F0:92:59:7D:52:3E:3C:77:B0:07:AA:A8:C8:E7:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B059D07C5041C0CFC9F18
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2958d405-97e9-30d4-915d-dda94f09156e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.22.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:05:9d:07:c5:04:1c:0c:fc:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=44b66ba5-44e6-403f-aef8-0b207761a227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:37:07:5b:bb:7c:1e:02:d4:f5:8b:53:1f:
                    b0:93:b0:86:93:b2:0d:1a:a1:bc:da:d0:a9:8e:34:
                    9f:d9:6f:91:0a:c6:97:cc:69:47:80:21:d2:c1:1c:
                    75:bc:2e:6d:0f:aa:33:9c:fb:50:8a:fa:e3:74:7c:
                    6a:e4:62:87:5f:6d:19:86:13:98:19:0f:bb:d5:e8:
                    da:f8:fe:b3:57:92:59:f5:8a:f3:38:83:75:93:f5:
                    ca:28:de:48:a1:a0:c7:fa:f4:c7:7c:87:24:76:dc:
                    79:cd:b3:ea:cf:ea:92:df:0a:dc:d8:13:0a:3e:95:
                    f5:1f:38:c4:20:7e:c7:22:2e:80:c3:3e:d7:ec:b4:
                    f7:f4:47:2f:56:56:7e:97:dd:de:98:86:68:62:9f:
                    06:a0:4f:10:da:bd:da:20:cf:af:95:5e:b1:1b:ff:
                    83:30:fd:5a:23:6c:9a:16:88:e1:1e:f1:67:4b:2d:
                    fa:cc:18:c6:5e:e2:69:5b:71:5c:b0:ef:06:87:b0:
                    bb:98:63:0b:1b:2c:1a:fa:cc:4d:1d:b1:98:09:2c:
                    12:fa:59:9b:ff:dd:ed:a8:c9:08:d2:b6:b2:25:d6:
                    dd:74:09:0c:2d:43:0f:bb:2a:e6:56:73:b2:31:8f:
                    b0:9d:52:67:b3:f3:a5:14:78:31:f3:87:b0:28:a6:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:78:07:94:F0:92:59:7D:52:3E:3C:77:B0:07:AA:A8:C8:E7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2958d405-97e9-30d4-915d-dda94f09156e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.22.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:82:1f:b7:30:f3:57:b0:59:53:48:eb:88:f9:a7:d2:9d:
         d8:74:66:da:b9:65:4d:26:b6:52:54:8f:28:84:82:42:9e:dc:
         3a:31:6d:52:ac:8b:17:a6:42:e1:0a:1c:66:ef:d1:fa:36:31:
         ff:bc:68:4b:01:93:0e:b8:c3:9a:97:c1:98:1a:87:e4:72:84:
         d1:d1:45:38:87:16:74:f4:97:0e:26:fd:2e:b3:bb:f8:ad:eb:
         d0:24:f0:42:7f:75:3a:07:63:ee:91:bd:5b:86:a1:36:a3:7a:
         9a:9f:bd:26:b5:c0:a7:40:1e:d0:99:e0:d2:9e:a2:58:e6:52:
         64:25:7d:2f:26:39:95:0d:24:d0:6a:a1:61:ef:72:0a:13:ad:
         cb:33:6d:fd:2b:09:36:50:05:37:ee:d5:f8:13:a3:fb:43:42:
         d5:e2:5b:9a:47:11:25:c2:87:23:91:84:28:1f:71:e9:3f:99:
         0b:fd:db:6e:bb:4d:9b:69:5e:8e:c8:a9:e3:19:dd:41:b2:4b:
         fd:e4:58:77:59:a7:ef:62:93:8c:b2:29:9a:8b:8a:92:e9:a3:
         e0:77:db:18:e7:71:3c:d3:b0:8b:7a:4d:bc:0d:38:b4:20:26:
         1f:a3:9e:4f:cb:40:d6:0d:e3:56:39:d8:b8:d5:e5:1a:6b:24:
         74:9f:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:09:53 2026 by rpki-client