Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e4dddff-6a8f-3f80-9d93-76fb8b3e57fa.roa
File:                     4e4dddff-6a8f-3f80-9d93-76fb8b3e57fa.roa (raw, json)
Hash identifier:          53p5Lm8rouUDcH2a3oZ3KDfE5fpA+Fc7PSAqHZL5Fy4=
Subject key identifier:   50:45:7E:47:07:D4:25:72:2A:6C:AE:AC:D1:6F:40:F1:F0:D0:E5:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E25BB8133A07952E45200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e4dddff-6a8f-3f80-9d93-76fb8b3e57fa.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        73.249.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:25:bb:81:33:a0:79:52:e4:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=7e4f18b9-7a64-459a-8ecd-3ece62eaa86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:88:ea:9c:61:2d:94:4b:73:03:49:2f:59:
                    fc:8d:9c:62:64:98:64:74:a3:93:e9:12:28:15:af:
                    bc:f2:51:de:7c:7e:60:bf:e0:09:9c:e6:8c:e3:0a:
                    2d:4f:ee:22:16:80:1c:ff:0a:3b:fe:41:dd:ba:2d:
                    60:ef:df:8a:11:6a:ac:b2:0a:57:1f:2d:30:2b:0b:
                    25:d6:d1:db:0a:80:58:88:2b:5c:c8:92:70:3b:b7:
                    a3:ec:a1:72:1f:09:cd:78:a7:ed:aa:83:91:4d:dd:
                    bd:64:d6:53:e3:40:b2:04:ba:1d:79:b4:74:58:38:
                    85:28:8a:c3:25:82:d0:12:c4:75:10:24:a7:ab:5e:
                    27:e3:8f:2c:95:be:04:99:d4:11:23:0f:78:08:03:
                    13:25:b0:9e:36:a3:fe:fb:a3:c3:16:c9:d6:1d:98:
                    e8:f4:34:b8:99:0e:fc:69:bb:0e:36:4b:a9:51:aa:
                    f1:e3:4a:16:28:b0:13:f2:54:48:f1:a9:30:e9:57:
                    11:7f:42:90:dd:db:7d:f5:6b:02:62:f5:f8:00:3d:
                    72:73:78:27:8b:8d:c6:61:fb:12:09:94:b1:13:cc:
                    96:7e:4b:48:99:3b:ca:f7:65:5e:8a:2b:1f:bd:86:
                    5b:18:08:29:e6:b1:14:b0:28:57:c5:46:18:f0:9e:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:7E:47:07:D4:25:72:2A:6C:AE:AC:D1:6F:40:F1:F0:D0:E5:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e4dddff-6a8f-3f80-9d93-76fb8b3e57fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.249.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c5:e9:37:6f:a0:c6:28:c6:3c:d6:e0:f0:de:ab:d6:8b:37:
         3a:a3:85:cf:c7:8d:09:16:1e:fe:77:3e:77:85:4f:38:fe:27:
         48:22:71:82:53:2b:c0:43:87:20:4e:b3:b0:b2:94:24:f7:46:
         ec:ae:13:e5:3f:93:fc:a8:38:5c:3f:a4:04:5a:ab:ab:1e:48:
         b3:aa:05:87:6a:0b:07:ec:cd:e4:4b:aa:87:ae:ee:70:90:40:
         5c:6d:8c:71:ac:75:b1:ed:59:04:2e:1a:c1:5e:eb:a8:b9:44:
         ef:7c:87:3d:9d:20:df:d8:08:69:ee:b9:9a:0d:8a:a7:30:f9:
         eb:e2:69:28:dc:85:bd:7c:df:94:ad:f6:df:b7:6e:50:99:2d:
         a7:17:cb:5a:b6:33:4e:cf:db:e6:9a:b0:95:83:a3:79:2c:86:
         29:9b:57:cd:8f:20:e3:3a:19:34:07:3d:7b:7d:fd:e3:d3:7f:
         e6:d2:7d:18:f4:2e:ea:be:b7:b6:18:76:79:b1:70:ec:2d:2e:
         e7:47:68:aa:1a:39:a8:44:9c:93:f7:eb:f7:51:5c:83:2b:88:
         4e:e3:b4:92:b5:af:64:2a:00:a2:0f:0d:24:8a:04:59:3f:ad:
         aa:26:e3:e9:9b:fc:e5:59:37:c5:a9:5f:bf:c9:15:5a:c9:e0:
         c0:5e:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:11:37 2026 by rpki-client