Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d492520-79af-318f-a651-ceb4b4227ceb.roa
File:                     7d492520-79af-318f-a651-ceb4b4227ceb.roa (raw, json)
Hash identifier:          Y8UEnmSUeVxnfArVPbT4HeV2rTean8J1u1ljlP1ke74=
Subject key identifier:   87:55:1C:30:A2:33:08:99:6F:DB:CF:59:FE:6F:A4:79:E2:8B:18:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7A596626B8D3E0D8F5FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d492520-79af-318f-a651-ceb4b4227ceb.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.111.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:a5:96:62:6b:8d:3e:0d:8f:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=04402f9c-2c0e-4b66-979d-5a4a9b762da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:54:63:61:e3:c7:0a:d8:c5:2f:7e:e7:bf:
                    7b:29:7b:00:88:4e:07:46:0c:04:9d:63:c1:de:8b:
                    8c:8e:fb:a6:96:fc:9b:37:c9:0e:3e:e3:de:48:bf:
                    b5:d8:38:c0:e1:42:a6:6c:87:1c:02:96:c4:8a:25:
                    0e:83:86:ce:3b:89:3b:c0:8e:fa:c2:a4:b9:ab:60:
                    8a:f0:6b:0d:45:41:98:6e:a8:97:7d:3f:2d:44:c1:
                    f8:9f:f4:99:39:e6:75:87:ff:5f:5a:66:37:a6:c9:
                    62:8c:df:eb:ce:77:fb:88:db:0c:97:24:85:68:c3:
                    7e:fa:02:7d:71:52:c1:6e:a0:8c:6e:b7:8a:75:ed:
                    63:10:4f:ff:2b:2d:28:ca:d1:91:40:aa:4b:6c:28:
                    cb:51:08:d3:57:eb:f0:3b:a5:e0:fa:dc:89:c6:af:
                    e4:99:d7:cb:9c:8c:a5:84:15:49:df:75:36:95:a4:
                    5a:14:15:29:26:f3:d9:af:7e:b2:5b:1b:d5:21:64:
                    fe:43:41:00:4e:16:6a:9a:93:1a:7c:12:d4:b0:c4:
                    59:1c:ca:9f:49:4a:fa:7d:19:e8:c2:8e:bc:7e:3e:
                    19:bd:51:c2:56:fa:f1:9c:32:c0:c2:ba:29:91:2f:
                    ba:32:0e:f2:04:05:ac:ed:5b:9f:ad:61:12:5c:35:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:55:1C:30:A2:33:08:99:6F:DB:CF:59:FE:6F:A4:79:E2:8B:18:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d492520-79af-318f-a651-ceb4b4227ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.111.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e6:02:53:86:3d:e5:8e:de:ac:d5:5b:92:19:53:6f:e7:53:
         45:10:2b:34:37:52:01:56:32:96:56:05:5f:7d:e1:a2:25:01:
         34:13:64:92:3a:87:d0:71:a9:32:c2:9e:40:2e:40:b1:c7:21:
         1e:20:3c:67:94:ba:60:45:ac:a5:ce:c5:de:06:d1:58:25:83:
         6f:89:f2:a8:8b:02:73:09:8a:9c:87:dd:37:06:cd:95:cf:db:
         2d:ad:d0:35:a7:39:21:36:35:27:42:48:00:1e:24:93:b9:7f:
         77:5f:41:57:27:9f:e3:3a:08:65:14:9a:0c:f1:8d:89:a3:77:
         5a:dd:3f:7f:e7:43:c6:50:4f:b8:04:ec:10:16:5b:1a:e2:bd:
         bf:25:06:ce:91:1b:e6:b5:58:ee:af:91:ea:38:11:a8:ad:5b:
         82:9b:dd:36:a0:7f:02:a4:71:c6:37:89:6a:fc:8f:05:bd:98:
         93:76:35:7c:55:da:16:0f:4a:24:93:01:b2:ec:31:94:aa:74:
         1a:b9:1f:95:57:0a:77:94:6e:8b:ed:c6:ea:6c:9b:e0:b1:37:
         57:1b:19:32:8e:c9:81:56:72:f8:0c:19:95:02:0f:a8:a6:15:
         bd:e0:31:14:c9:fe:89:43:09:33:48:9f:6b:c9:69:03:e7:0b:
         88:b1:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:00:52 2026 by rpki-client