Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa
File:                     47e1314f-da30-3ccd-8424-26420e56bfad.roa (raw, json)
Hash identifier:          4rZY8OxEvyBy2a/bUTFxh+o72i/ODTRgDbewFXdtvO0=
Subject key identifier:   87:39:A2:74:34:E2:4D:EA:AE:45:7F:25:98:62:7B:30:BE:F3:72:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5B6FC6781C1C6EC51D100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.150.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:b6:fc:67:81:c1:c6:ec:51:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=0dd7ad3d-31a8-4af2-96c3-27e54e42f25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:8b:d8:d6:8e:5f:83:da:0e:ba:8a:af:3a:
                    e0:35:9e:4e:0c:d2:4f:3d:91:1c:80:f5:9f:bf:c3:
                    67:1e:67:2d:86:fa:c1:59:a8:ac:45:66:f2:09:3a:
                    bb:f7:60:e5:63:40:bf:c9:6d:d0:4a:c2:66:8a:5e:
                    79:78:9b:87:33:c9:b8:56:c3:4d:9f:10:ef:f4:fd:
                    83:72:40:29:64:46:3a:34:ae:cf:52:4f:1b:fc:98:
                    cc:ae:bd:f3:65:2d:65:5f:eb:64:3d:ad:b8:1a:47:
                    89:10:99:09:ff:b3:7c:b2:1f:81:74:a0:39:db:20:
                    42:40:94:6c:95:ca:66:08:2d:10:0d:73:dd:05:e0:
                    c4:ee:ab:2b:3e:bb:a1:65:28:b9:af:21:95:98:d8:
                    24:b9:ca:94:9b:5d:0d:5b:91:05:5a:08:fb:8d:d5:
                    63:02:04:bb:62:c0:8a:74:e9:43:75:b7:ea:7a:7a:
                    fb:85:3e:8b:a2:fd:06:58:8b:a0:29:e4:2a:a2:5c:
                    f3:fd:80:28:d0:72:7b:7e:3f:2a:e2:b0:0b:90:8b:
                    42:10:1e:f0:25:1b:1e:3f:aa:e8:fe:53:c1:40:fe:
                    fd:7e:8e:cb:ef:e9:e7:c9:d8:63:80:12:9c:2a:5e:
                    12:aa:5a:e3:fc:d3:a8:8c:c3:97:09:cf:99:c3:5f:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:39:A2:74:34:E2:4D:EA:AE:45:7F:25:98:62:7B:30:BE:F3:72:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e1314f-da30-3ccd-8424-26420e56bfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:f3:eb:de:11:f6:2e:ab:ce:78:c2:09:80:f4:fd:55:10:
         43:f5:e2:fa:de:a3:0c:71:6e:8e:37:df:0b:ee:57:90:d4:df:
         5b:e9:a9:84:ff:c9:76:45:8f:e9:f1:77:db:e8:20:cd:0b:79:
         df:26:16:eb:87:af:00:da:84:10:0a:4a:28:74:7f:65:98:4d:
         80:f4:33:b9:32:57:d5:89:19:01:1a:e9:88:2f:23:13:a3:ff:
         ea:79:16:cc:0b:6b:ee:78:f5:4b:eb:38:9f:32:fa:e6:29:13:
         89:b2:92:28:1a:58:b7:62:02:7c:a0:a7:0e:a2:c7:2a:46:a6:
         25:3a:e7:f9:a1:4c:41:60:44:31:f3:a8:c1:31:8e:91:a0:f7:
         41:2c:22:04:fd:12:a7:f8:3f:2d:f7:cb:f7:c3:c0:00:47:77:
         76:9e:51:dc:59:bb:c8:8f:6b:2e:63:a3:18:91:92:33:0f:1c:
         9a:46:6d:9c:57:7a:9a:9c:d0:ed:d7:cf:26:51:4b:5e:32:64:
         59:a2:07:2c:6b:46:ab:35:0a:a7:fd:ad:a3:68:44:1f:f2:89:
         4e:5f:0a:3f:92:a8:2d:bb:38:0d:05:78:41:58:e8:93:80:18:
         7c:c5:96:64:30:64:2d:99:33:b8:ad:1e:d7:30:a6:41:dd:c2:
         3a:40:45:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9bb8Z4HBxuxR0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MGRkN2FkM2QtMzFhOC00YWYyLTk2YzMtMjdlNTRlNDJmMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv+L2NaOX4PaDrqKrzrgNZ5ODNJPPZEcgPWf
v8NnHmcthvrBWaisRWbyCTq792DlY0C/yW3QSsJmil55eJuHM8m4VsNNnxDv9P2D
ckApZEY6NK7PUk8b/JjMrr3zZS1lX+tkPa24GkeJEJkJ/7N8sh+BdKA52yBCQJRs
lcpmCC0QDXPdBeDE7qsrPruhZSi5ryGVmNgkucqUm10NW5EFWgj7jdVjAgS7YsCK
dOlDdbfqenr7hT6Lov0GWIugKeQqolzz/YAo0HJ7fj8q4rALkItCEB7wJRseP6ro
/lPBQP79fo7L7+nnydhjgBKcKl4Sqlrj/NOojMOXCc+Zw19DowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIc5onQ04k3qrkV/JZhiezC+83KzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDdlMTMxNGYtZGEzMC0z
Y2NkLTg0MjQtMjY0MjBlNTZiZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSZZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ+8+veEfYuq854wgmA9P1VEEP14vreowxxbo433wvuV5DU31vpqYT/
yXZFj+nxd9voIM0Led8mFuuHrwDahBAKSih0f2WYTYD0M7kyV9WJGQEa6YgvIxOj
/+p5FswLa+549UvrOJ8y+uYpE4mykigaWLdiAnygpw6ixypGpiU65/mhTEFgRDHz
qMExjpGg90EsIgT9Eqf4Py33y/fDwABHd3aeUdxZu8iPay5joxiRkjMPHJpGbZxX
epqc0O3XzyZRS14yZFmiByxrRqs1Cqf9raNoRB/yiU5fCj+SqC27OA0FeEFY6JOA
GHzFlmQwZC2ZM7itHtcwpkHdwjpARQA=
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:17:51 2026 by rpki-client