Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3312e471-6347-3ba6-b4b6-5f2592f78fd7.roa
File:                     3312e471-6347-3ba6-b4b6-5f2592f78fd7.roa (raw, json)
Hash identifier:          +vhzjxlMuhVw8/lDADWZK6iB4cJ9tcZ1iPPhiOa/A6Y=
Subject key identifier:   E0:0E:7F:6F:C8:69:C9:4C:6B:A5:A4:4A:4F:C4:24:E3:EC:14:52:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F5199A25E17CEB26B7E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3312e471-6347-3ba6-b4b6-5f2592f78fd7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        73.50.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:51:99:a2:5e:17:ce:b2:6b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b2550a9e-5c21-4b27-a453-e2a486fb4e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:b7:95:4c:fd:c6:01:12:74:b8:55:f6:81:
                    21:73:d4:3b:bf:9a:73:26:ee:30:39:3d:dd:48:18:
                    3e:f3:7a:bb:32:94:0b:c9:9e:45:75:03:b0:db:b7:
                    26:21:a6:68:94:8a:55:fc:03:94:f4:ee:e7:67:d2:
                    54:74:04:c7:df:b3:fa:2f:3e:97:50:31:fd:6d:23:
                    76:7f:6e:40:ce:73:a7:b8:87:8f:06:3d:76:fd:ce:
                    ba:19:3c:84:19:10:b5:4c:de:ae:08:83:51:92:f4:
                    cb:76:9e:db:f7:cc:0d:8c:38:47:ca:59:00:e2:bf:
                    ea:bc:01:f2:37:4f:b4:4d:1a:6a:b7:0a:1c:3c:cc:
                    36:08:d8:d9:2f:75:b2:38:72:3d:4c:a4:e2:82:2d:
                    b2:07:52:f6:bc:32:b5:83:39:6c:54:55:1e:cb:16:
                    df:db:93:be:0f:e1:ba:11:d0:da:9e:eb:62:0e:c0:
                    82:05:c1:20:f7:16:8c:9a:d6:f0:a4:c6:81:a4:ec:
                    f8:b6:9f:85:2f:06:b9:17:75:81:71:47:3b:44:8e:
                    74:65:b3:0e:8c:42:13:97:23:40:59:88:79:32:1b:
                    e6:f8:55:fd:72:43:1f:22:5d:de:8d:20:0c:f1:9b:
                    55:da:ee:9b:d0:a6:e0:f0:e7:2a:8e:dd:a9:87:86:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:7F:6F:C8:69:C9:4C:6B:A5:A4:4A:4F:C4:24:E3:EC:14:52:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3312e471-6347-3ba6-b4b6-5f2592f78fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:76:40:e0:9a:93:9a:cc:1c:d3:12:98:ce:92:ad:43:c3:95:
         4f:0d:5f:9a:db:2b:93:74:61:d4:be:4c:e3:ba:00:f5:0b:33:
         38:70:51:c9:bd:fe:fe:91:ae:61:42:1f:6b:6c:c7:7a:4f:0a:
         f5:dc:6f:cb:69:e4:60:e4:17:40:51:07:4d:ed:96:2d:b6:98:
         ff:39:ab:19:de:6d:7b:33:89:44:70:25:5c:ab:56:49:f5:02:
         32:8e:eb:de:28:b9:aa:95:06:7f:4d:86:77:26:39:a4:f0:33:
         c9:76:f6:27:29:5d:07:6c:d1:30:ae:d5:a5:9d:61:0c:f4:c4:
         4a:9d:93:58:2f:87:45:64:7a:19:53:6c:39:93:34:de:e8:aa:
         09:63:30:39:a7:7c:1f:db:7b:d5:cf:f5:28:fa:18:85:24:75:
         53:3e:85:df:b2:81:4a:01:1f:58:e0:a4:f1:f8:a2:40:bf:a8:
         56:e4:42:7b:4b:5a:f1:58:37:5d:c8:cd:c8:be:2a:f9:72:40:
         59:04:5c:c4:e1:32:3d:38:f8:f3:8c:26:0c:18:ba:3e:cc:8c:
         49:36:8a:30:9b:08:b4:f6:3b:5d:47:57:86:fc:07:94:cc:7f:
         61:44:df:63:d5:4d:77:9a:bb:92:ef:9e:ab:7d:4d:5c:46:5a:
         c1:a3:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:08:31 2026 by rpki-client