Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636b8c3c-da62-3064-a4ce-1ddbc5036b5b.roa
File:                     636b8c3c-da62-3064-a4ce-1ddbc5036b5b.roa (raw, json)
Hash identifier:          Ki6otR3CvW+NcTpxT8I5CkI1fnbR3GILB+P6EGfubk8=
Subject key identifier:   4C:6A:E0:AE:AE:6D:F0:2A:51:B4:24:83:13:FD:4D:10:25:67:26:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AFF645DAC5B631C384A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636b8c3c-da62-3064-a4ce-1ddbc5036b5b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        73.209.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:ff:64:5d:ac:5b:63:1c:38:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7781b7b7-6642-4243-9816-548eeed336a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:fc:e9:e4:c1:38:6c:39:98:dd:c1:9a:28:
                    e6:7c:c9:57:10:6a:35:99:4e:51:78:97:5e:9d:f0:
                    58:54:43:e2:17:80:e7:92:73:e7:85:c4:de:71:40:
                    80:7d:f3:16:0b:bd:90:cf:7f:fd:34:b0:9c:b2:2b:
                    2d:ed:06:1f:7d:d3:fe:3d:29:78:ec:1d:a2:ff:20:
                    ad:38:0a:10:c2:e8:60:13:7b:17:4d:2b:5a:d7:4d:
                    57:4e:14:12:ef:b4:cc:64:53:e3:94:e1:7b:43:b2:
                    cb:45:f1:a9:b5:1a:70:12:0c:54:64:79:14:cf:fb:
                    19:6b:19:a0:00:6f:d1:fd:3d:e6:b9:98:62:38:92:
                    a9:d9:5c:2a:89:6f:87:0f:68:d9:03:e8:72:b7:36:
                    fe:79:24:70:c9:07:08:8b:21:de:eb:d5:f0:1a:34:
                    63:2d:9d:98:8e:02:c2:23:70:1d:5e:4c:9e:dc:56:
                    f1:22:dd:98:10:44:df:d8:e1:1a:8b:cd:82:80:35:
                    7f:2e:cb:72:87:f9:44:fb:eb:9a:7a:4d:ff:28:f0:
                    c9:db:5d:cf:0a:40:ce:44:56:3a:78:bd:33:85:72:
                    25:f7:66:82:98:5b:53:f9:c1:a5:25:fc:71:08:d1:
                    86:b4:c7:3b:9c:7c:f9:61:3a:5b:92:a6:79:a9:13:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6A:E0:AE:AE:6D:F0:2A:51:B4:24:83:13:FD:4D:10:25:67:26:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/636b8c3c-da62-3064-a4ce-1ddbc5036b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ac:c3:30:05:e4:58:47:3a:49:22:f5:9e:0a:4e:36:86:cc:
         cd:8c:d4:23:2d:65:ae:97:c7:77:e6:5e:e3:7e:91:3a:2f:58:
         2d:93:a8:c8:a0:74:9f:40:21:19:48:f0:4d:11:c4:09:d0:b3:
         47:a7:bf:14:79:09:98:b7:56:51:33:3b:74:56:55:f7:1a:ca:
         38:a7:1a:05:7c:45:f2:0b:35:1c:e5:dc:3c:b8:6b:d6:53:80:
         26:83:5c:62:2c:1e:2b:6c:32:1b:7a:28:89:c7:21:16:22:4b:
         ad:32:2d:bf:78:f4:1e:2a:35:f3:e7:46:5b:8d:8c:77:23:88:
         4b:09:81:ff:0d:8c:eb:fa:be:3b:4b:fa:78:a8:0f:1e:7c:0a:
         10:ef:47:92:43:81:07:dc:eb:8c:43:4e:71:a5:ce:14:fd:8b:
         82:2a:ed:fb:db:4f:32:79:07:44:6c:37:88:47:e7:ce:18:a7:
         a2:98:0c:b0:88:cb:df:30:46:c5:98:fc:6e:27:0e:e8:90:52:
         0f:d6:a7:aa:1a:8d:f0:02:c6:ec:2e:66:d0:f7:2c:d8:16:9f:
         0f:cd:03:82:ae:8a:a0:79:17:59:c6:2d:7f:17:22:97:4d:59:
         9c:8b:c4:c2:b0:58:89:a1:7d:7c:b5:8a:b1:11:fa:a9:e7:4c:
         c7:2b:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:14:43 2026 by rpki-client