Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ddfc3f2-6c47-3506-a7f6-8978eb86b2cd.roa
File:                     6ddfc3f2-6c47-3506-a7f6-8978eb86b2cd.roa (raw, json)
Hash identifier:          L88RcMSXR1/hOzuecfwPDJLE1emsTKnwHDGqEs3lNxo=
Subject key identifier:   86:AB:52:90:A6:64:5F:E1:93:3B:FE:73:EA:3A:10:CA:16:76:57:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6482D89F81401B5909340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ddfc3f2-6c47-3506-a7f6-8978eb86b2cd.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.209.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:48:2d:89:f8:14:01:b5:90:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6b77bce3-0a63-4ab0-a7fd-2d6302a04541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:1d:61:cf:bf:9f:30:83:c8:25:43:c8:38:
                    80:95:3e:1f:74:bc:53:9f:e8:77:c8:ff:91:31:88:
                    95:c0:13:10:c5:de:c5:37:93:b8:9a:3d:60:3d:dd:
                    bf:a3:b2:1b:75:c8:55:8f:5d:de:1f:c9:d8:82:11:
                    af:4a:32:36:f5:c5:0e:0d:ba:38:e6:15:da:70:92:
                    fc:42:4b:61:76:45:03:6c:fd:35:cd:20:9c:15:49:
                    55:c5:d8:70:44:5d:77:6b:2a:d0:20:31:d5:05:71:
                    2b:4f:12:b3:ec:0f:41:57:73:80:cf:d7:05:a1:24:
                    ab:9f:d8:30:c6:bd:7c:e1:40:a4:07:d6:54:64:0a:
                    36:39:07:36:29:50:a5:d3:0d:00:df:f9:d6:e4:a1:
                    3c:a2:d8:cb:79:2f:fa:7a:c0:1b:2a:25:9c:aa:2b:
                    c8:2a:7e:89:14:e3:52:71:7c:b7:56:4d:ab:4b:27:
                    2f:54:31:1c:b7:38:c4:6d:0f:61:e2:63:5b:91:8c:
                    d9:32:ca:6b:55:c6:8c:ac:d3:03:1e:01:89:31:ed:
                    59:d8:14:ff:3a:2d:12:19:cd:9a:38:0d:26:9c:6a:
                    51:79:91:44:75:90:a3:a4:bf:e4:da:02:64:34:79:
                    75:3b:7b:e9:72:66:ef:42:ab:f3:5b:27:7a:c3:41:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:52:90:A6:64:5F:E1:93:3B:FE:73:EA:3A:10:CA:16:76:57:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ddfc3f2-6c47-3506-a7f6-8978eb86b2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.209.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ea:5a:b8:36:39:66:c8:9f:ea:4a:b1:ca:18:c5:4b:b0:f3:
         8d:8d:3e:8f:1d:2c:81:43:a1:40:83:1d:a6:a5:a5:66:8e:81:
         e6:73:ed:17:a0:9a:af:57:21:21:9c:fb:10:2a:3c:1a:7e:eb:
         b2:ad:4f:9c:8c:52:07:82:52:db:f4:a3:bf:0f:b9:2e:a9:91:
         9e:51:43:da:e3:0c:e1:59:7e:fb:94:99:84:c7:86:db:99:ea:
         8e:52:44:5f:55:a4:9f:9f:82:d9:2c:7a:54:0f:0f:b1:a2:b0:
         de:be:4d:a0:c3:cb:f9:f1:d6:db:30:ad:64:33:6b:8c:23:fc:
         cc:c0:30:22:97:b9:de:eb:d6:34:88:ce:d1:40:0f:8a:0b:88:
         37:22:3b:01:88:cb:7d:5c:0e:a4:21:43:c1:8b:da:a2:53:05:
         5a:a8:b6:d0:5b:1c:1c:99:d2:5e:65:25:97:ff:17:2b:e1:eb:
         06:7f:0e:d1:44:c7:de:27:f2:e7:c4:1d:8c:6f:b7:e9:d0:bd:
         81:40:94:45:a7:b6:b3:12:6b:db:65:5d:1e:c9:8e:52:66:ee:
         82:65:88:94:ff:26:6d:5e:fc:ba:a2:29:46:6b:9f:d6:42:39:
         d9:08:99:d4:13:21:85:ad:2e:47:39:e0:a9:49:12:bd:0e:d5:
         d2:24:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:13:03 2026 by rpki-client