Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa
File:                     5bfdf508-12ab-31cc-ac79-d842542ccf88.roa (raw, json)
Hash identifier:          sKeUCKvLNJU3V8IiqAR62tDhwXqPyeAdoMy8JftLi/c=
Subject key identifier:   1E:E1:E5:2F:FC:0C:17:0F:F8:49:4F:14:28:D5:74:19:24:84:D0:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360013F9BE3D08BE6F52DF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        73.155.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:13:f9:be:3d:08:be:6f:52:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d0990c7a-c973-41bc-a529-156718526388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:e0:78:55:0b:c7:6f:8b:f0:95:f6:fc:0a:
                    55:ab:b5:f3:e7:a8:31:0d:f9:87:22:d4:2c:91:db:
                    58:1b:43:94:41:98:aa:2b:a1:af:3f:49:d7:e6:78:
                    2f:a7:80:62:4c:71:14:9e:1c:93:17:a8:c2:0b:fc:
                    08:77:3e:ef:09:73:2b:1e:48:39:ad:18:a5:11:50:
                    dd:fd:e2:07:3e:ac:b0:3e:23:c7:95:a2:e6:6a:c0:
                    67:36:06:ef:cc:9c:5e:a5:7d:93:1a:eb:c4:e7:33:
                    6f:ea:0b:88:ad:66:64:2f:68:e0:1b:ca:e0:5b:1a:
                    47:6b:84:bc:24:bc:cb:87:11:f6:e3:22:58:09:d4:
                    01:c5:56:ad:1b:a4:c6:06:6f:50:ee:e3:8c:bc:56:
                    b5:e2:99:f8:3f:48:e0:50:31:bc:70:d2:e0:15:11:
                    a1:be:a5:70:38:1b:8e:66:5b:55:47:09:67:fe:44:
                    a4:ab:06:23:4c:4b:6e:83:f1:a7:0e:29:81:3f:47:
                    67:62:e2:fc:6f:70:b1:cc:d5:9a:e5:45:41:19:2b:
                    c7:61:3a:d2:45:9a:47:f1:56:47:81:39:c1:5f:91:
                    aa:9b:f9:fb:c7:8d:0d:95:a0:2e:0d:e5:5e:40:39:
                    60:c7:61:7a:1f:09:71:b0:27:75:93:51:59:8a:08:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:E5:2F:FC:0C:17:0F:F8:49:4F:14:28:D5:74:19:24:84:D0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bfdf508-12ab-31cc-ac79-d842542ccf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:5b:bb:fe:c6:53:36:71:c1:41:1b:7a:f1:b9:14:d6:5f:8b:
         cc:75:9f:57:89:c0:b6:f3:71:aa:24:bf:b0:d9:69:ac:90:67:
         3a:96:94:9e:7e:94:38:46:f7:b4:0a:c6:a1:a0:fd:63:69:2c:
         bb:09:83:04:fd:ca:f7:38:47:91:6a:7d:38:8f:cc:b1:20:c4:
         b7:ec:be:9c:9a:ce:7c:65:1c:9b:67:11:5e:d0:1e:d9:cb:ab:
         c9:e9:12:01:e5:bd:b3:d6:65:9b:6c:a7:96:5f:58:63:b0:57:
         49:c1:f4:73:e9:41:40:fc:9c:23:c1:20:04:30:78:15:b7:c0:
         f2:a5:79:be:2c:6d:39:eb:60:eb:83:5d:16:10:38:a5:5a:74:
         c9:ff:d0:55:d7:11:0f:2d:9b:7e:9f:7a:2e:0f:b9:ac:5f:55:
         21:ec:b7:d3:ba:5d:31:da:2b:c9:e7:f1:ca:6b:a0:8a:05:a3:
         44:99:82:d9:e4:fe:3a:a1:bd:d7:92:05:85:cb:c1:66:6e:37:
         52:19:9b:ca:f7:92:d1:1f:f4:e8:cb:cf:eb:f1:3c:9d:35:b1:
         ae:f1:59:0b:c1:1f:63:e7:c6:73:85:74:6c:35:b4:cf:51:9e:
         14:91:71:48:f5:e3:cc:2c:e6:4e:98:c3:50:09:c1:b5:39:7c:
         84:06:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:58 2026 by rpki-client