Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6961a9fa-b0bc-3657-840b-0671261da287.roa
File:                     6961a9fa-b0bc-3657-840b-0671261da287.roa (raw, json)
Hash identifier:          tAJO+UzJYwVyoCmqli1bH7KL9Kh9AFXEhkFi7GuyuSQ=
Subject key identifier:   5F:FD:1E:96:34:49:16:34:57:3A:F3:08:E3:38:BA:30:23:52:B5:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BC2EF15960A1BFE791800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6961a9fa-b0bc-3657-840b-0671261da287.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        73.194.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:c2:ef:15:96:0a:1b:fe:79:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bf7bd407-9a10-4d46-934c-99b7c85d2b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:1b:35:aa:4a:ff:46:91:6d:e7:17:2d:14:
                    97:22:fc:47:41:0e:51:b0:fd:30:c8:63:af:7d:17:
                    a0:c7:99:8e:3c:24:c5:3a:83:8a:4c:34:0c:78:88:
                    bd:8f:28:e4:1e:36:97:1c:f0:04:a4:ce:79:9a:77:
                    a5:2c:a4:62:a9:c9:cf:bc:1f:97:d9:27:d3:24:5f:
                    09:46:3e:30:a5:55:28:d9:6f:c1:83:fb:c9:d5:ad:
                    b5:91:27:8c:20:1f:8f:18:3b:ac:9f:f5:f8:cc:27:
                    a8:0f:ec:a1:62:32:0e:8d:12:7c:a4:5c:75:20:86:
                    0d:bb:d7:c7:a1:da:a9:90:6e:30:d2:35:a6:29:ad:
                    fc:5a:9e:1d:80:dc:92:dd:4b:36:f6:31:35:48:90:
                    ff:f8:34:49:c6:26:c8:5d:96:ef:c2:b0:f3:76:61:
                    f8:bd:73:d7:a6:23:c9:d0:d7:82:8e:ff:ba:72:f8:
                    73:18:a2:f8:ea:53:bd:5c:4f:70:3c:f7:00:90:67:
                    be:6b:70:54:7b:20:60:35:d9:3d:17:bb:85:a1:c5:
                    e9:3c:d5:11:07:b4:f2:ac:fa:9f:1b:09:ed:aa:5d:
                    50:ee:9a:c3:1b:8f:80:51:61:f9:85:8f:f0:23:21:
                    92:e2:0c:b3:2d:b6:c5:4e:db:79:7c:87:30:06:43:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:1E:96:34:49:16:34:57:3A:F3:08:E3:38:BA:30:23:52:B5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6961a9fa-b0bc-3657-840b-0671261da287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:c7:cc:f6:89:eb:a8:3e:38:38:d8:82:33:93:c3:cc:74:
         91:dc:7f:69:61:ef:53:f9:30:85:b0:96:16:03:34:26:15:0e:
         ae:ed:31:22:84:92:c0:eb:c5:b4:ae:86:31:73:cb:4b:f8:64:
         28:8a:c7:7b:3b:8b:55:2e:36:66:e7:89:64:8d:39:0e:cb:72:
         a3:60:7d:7c:1f:f6:a6:bf:2a:39:47:f6:2b:59:1c:bc:cb:94:
         05:10:33:03:2e:cd:8b:3c:b6:a9:1c:66:ea:ab:d3:8c:7f:9a:
         b9:8b:5e:38:24:f6:aa:db:6c:b3:41:ec:6b:c6:2b:74:a5:2c:
         3b:4b:c5:cd:8f:5e:94:28:0a:97:b9:03:41:c4:fe:45:2c:dc:
         1b:bb:ee:eb:87:f2:d0:2d:3e:c1:c6:d3:d7:e5:22:68:76:e9:
         33:8c:7f:87:23:d3:db:32:1f:03:74:9a:6b:36:49:bd:fc:95:
         e8:47:63:74:6d:c3:75:78:50:8c:ed:21:07:ea:76:16:42:32:
         64:20:53:58:7c:7c:cd:d2:69:01:31:0a:98:58:f3:2e:a9:51:
         d5:6b:07:89:02:53:2f:73:1b:44:54:ca:59:7e:eb:05:b1:2e:
         64:9b:7e:82:9d:a2:3c:a4:ac:64:db:30:15:08:ab:36:b0:e7:
         20:34:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:22 2026 by rpki-client