Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af5e576-240b-3d62-ba69-acc93e0ec6df.roa
File:                     3af5e576-240b-3d62-ba69-acc93e0ec6df.roa (raw, json)
Hash identifier:          WJwTQMiErgbEH4E5TwX0zOtoCUrsts29SrVQg1ZFoFE=
Subject key identifier:   96:C6:A0:3C:3F:3F:17:84:EE:41:5B:0F:B0:AA:FB:9C:73:3B:83:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA79712574EA9D25EC2231C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af5e576-240b-3d62-ba69-acc93e0ec6df.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33651
IP address blocks:        73.71.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:12:57:4e:a9:d2:5e:c2:23:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=842a5647-8d51-4518-ac8d-dd4f779c0b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:63:d2:dd:b0:9e:16:8e:55:c8:94:c1:20:
                    18:8c:b3:00:c9:52:08:86:05:18:c3:e3:f0:a8:e8:
                    de:80:49:71:34:af:cf:1e:3f:16:85:d4:bb:97:71:
                    a3:f3:6d:7a:ee:df:b8:50:33:ad:95:13:4d:78:5e:
                    62:c1:d0:79:2a:5e:8a:cb:6d:76:59:7c:51:a4:08:
                    4c:64:c1:d3:1f:ce:12:3b:82:fa:b9:cf:4a:36:d1:
                    b7:25:04:d5:66:f7:3a:54:d1:4d:c1:b1:6e:41:25:
                    66:d4:1d:3d:d8:39:dc:5a:ac:00:37:99:b9:34:65:
                    e9:c7:1e:b8:c1:f1:cb:59:e5:87:8f:5f:fb:01:d2:
                    6d:70:5c:46:89:e6:cf:ed:3b:54:cc:42:18:18:3a:
                    1d:5d:d0:7a:b3:7e:83:57:f2:18:37:1e:04:0a:e4:
                    4a:26:ec:fe:0c:51:cd:7f:12:b6:41:59:e9:c7:e4:
                    84:70:2c:79:55:8b:40:be:15:3b:51:fb:b4:0f:d5:
                    72:67:99:37:14:0e:b9:d3:6e:19:d2:4e:62:37:e0:
                    9f:b4:27:19:e0:53:16:4f:5a:31:4e:1d:39:fe:40:
                    c6:86:53:84:5f:ba:5c:35:29:93:46:d1:41:d6:03:
                    25:4f:a9:87:18:fa:d5:6e:5b:3c:e3:0a:de:07:07:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:A0:3C:3F:3F:17:84:EE:41:5B:0F:B0:AA:FB:9C:73:3B:83:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af5e576-240b-3d62-ba69-acc93e0ec6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.71.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:99:61:c8:62:9e:21:16:87:8d:0c:2e:90:de:5a:0a:2a:a4:
         22:93:10:3c:46:80:b7:c5:63:36:f5:8b:b7:93:b4:ef:fc:8a:
         19:65:2e:a4:fa:78:1e:25:7c:98:16:b1:d7:c6:3c:44:89:4e:
         e3:66:45:37:36:b4:7e:00:60:04:f5:4d:6f:59:83:8c:05:33:
         9e:bd:62:08:bc:7b:28:39:e5:57:6e:22:92:71:5e:9d:ad:aa:
         9a:d2:3c:91:b4:04:3c:e6:25:d9:e2:e6:54:56:1b:8d:1d:13:
         f4:e6:06:62:bf:90:8e:fc:a6:73:bf:66:fc:56:f5:0a:b0:42:
         77:c4:93:26:db:e0:21:4b:1e:67:38:b1:c7:80:f3:f8:61:d2:
         20:80:54:38:9a:fa:42:e5:1a:74:54:5c:70:78:68:b0:0e:28:
         eb:3d:6f:56:8d:f6:e8:4b:40:97:49:04:24:7a:b9:04:1e:b0:
         c1:3f:ac:24:28:9f:be:ac:ac:82:10:18:e3:d8:28:d1:50:26:
         6b:5d:6a:e3:c8:ff:b7:79:c4:66:ba:69:ad:09:e4:0e:75:60:
         bb:df:ae:ac:8b:6f:b1:72:b0:e7:fd:75:85:42:1d:cf:51:31:
         00:0d:c5:0a:a8:26:e7:6a:28:b1:18:00:72:b4:1e:28:b2:05:
         b3:8a:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:26:08 2026 by rpki-client