Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c8f425f-0cd9-3e90-8007-445bf5e8da85.roa
File:                     4c8f425f-0cd9-3e90-8007-445bf5e8da85.roa (raw, json)
Hash identifier:          66STOFkwfHzJcWwKeRDM6y3LzxG4VSEfpWoRJsbTiWQ=
Subject key identifier:   20:7D:24:64:01:75:DF:E5:E4:CF:5E:E3:2C:69:28:2F:E6:78:80:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5C4BE6C1061D539FF3600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c8f425f-0cd9-3e90-8007-445bf5e8da85.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.196.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:c4:be:6c:10:61:d5:39:ff:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c661c427-5ef1-493c-8f24-5bea084feb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:ee:f0:cc:b6:8d:34:9b:cb:9f:5f:7f:f1:
                    bc:6d:5e:79:60:4f:55:58:81:19:01:ff:fa:0a:5f:
                    90:94:48:ec:a5:d5:c2:5d:ac:70:81:ba:ee:bf:28:
                    39:07:bb:0f:e9:8d:55:11:32:32:a2:e1:c8:96:f0:
                    e6:4a:0f:fc:12:9b:0d:97:80:64:2a:f8:31:5f:de:
                    b9:8f:5f:3b:f3:f2:db:ef:d5:83:36:c6:e6:02:29:
                    32:65:45:c0:51:e2:84:98:04:7a:d2:f6:10:a9:55:
                    d7:ec:cf:5e:25:c0:f2:26:08:fc:38:c1:11:16:9a:
                    14:d9:b5:a5:de:b8:3e:ef:19:58:a2:59:69:06:b2:
                    61:70:09:9a:12:a5:bb:13:0b:22:32:da:f0:45:9a:
                    7f:0d:86:6e:ae:db:01:aa:69:36:9e:c9:ed:76:f8:
                    33:c8:1a:7c:ae:fc:23:11:07:9f:e1:60:1e:b5:ee:
                    ca:33:af:1e:d7:ab:52:4f:76:90:45:e3:bb:d7:4a:
                    b0:75:29:35:3f:e5:42:40:76:45:b5:80:22:e9:c8:
                    b6:c6:e8:50:54:b9:7a:cf:da:4c:95:76:fb:e4:b5:
                    39:8e:3d:fc:04:6a:52:a0:ea:5b:44:b9:af:6e:ac:
                    bf:9d:bd:21:eb:dd:2d:0c:e8:64:44:98:5d:9d:c9:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7D:24:64:01:75:DF:E5:E4:CF:5E:E3:2C:69:28:2F:E6:78:80:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c8f425f-0cd9-3e90-8007-445bf5e8da85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.196.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:24:c7:ee:57:69:48:e9:46:c8:9e:8f:dc:94:ed:3e:81:b5:
         34:39:1e:5a:03:e9:0a:91:cb:ce:e9:c9:2e:8b:a5:9f:dd:a4:
         06:d0:d9:97:ea:ee:b7:b5:95:3e:69:55:dd:42:2b:da:6c:07:
         6c:83:b3:38:06:c3:a9:e5:50:7e:7b:5c:69:23:ab:dc:dd:17:
         7c:c8:33:d9:be:ba:ff:9e:df:88:7e:21:39:79:6d:77:c4:46:
         20:ae:b0:dd:80:2c:6f:15:03:af:b2:ff:f2:4f:6e:39:7b:e2:
         5f:d5:fe:76:38:b3:b0:81:8c:4f:55:c7:b7:78:d5:5d:76:a4:
         da:7d:34:c1:5f:80:19:c4:9b:d0:95:16:28:a0:ec:4c:2e:b5:
         fd:ba:a5:45:08:19:a4:f6:23:9b:33:83:df:ae:a3:82:f3:49:
         26:56:bf:b6:0a:c4:d4:c5:73:e2:47:d0:12:6e:f8:d0:71:f4:
         8a:57:e4:89:c2:29:af:0d:5e:3d:49:f3:ba:e8:f2:8b:83:90:
         74:cf:05:59:3f:13:30:1b:c3:4b:57:01:70:89:46:47:1e:e8:
         4b:11:34:6c:98:a5:9a:4c:9c:7a:c2:3b:b5:83:18:48:80:c6:
         14:84:1b:06:7e:eb:63:80:7c:d5:58:e5:51:a1:bf:3d:83:a8:
         ce:e0:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:20:55 2026 by rpki-client