Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942b992e-2aae-3c39-83db-e8c027ac52a2.roa
File:                     942b992e-2aae-3c39-83db-e8c027ac52a2.roa (raw, json)
Hash identifier:          t8jJnA5PuDMct6UhNfFX4k6V47FjXcdVNv3PaSXSX9Q=
Subject key identifier:   FB:3D:53:1D:0A:97:5D:93:A1:D2:82:32:E9:F6:4E:B7:53:EA:21:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5957777C355E2F1377700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942b992e-2aae-3c39-83db-e8c027ac52a2.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        73.63.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:95:77:77:c3:55:e2:f1:37:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=edf0c783-fcc0-4ce1-bbb3-aa68b0657985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:d7:5b:1f:df:19:f5:c3:97:6e:be:d8:c7:
                    eb:73:15:d6:24:65:63:98:3b:8f:e9:80:01:c1:0d:
                    dd:9a:66:c6:47:a3:32:24:cc:c9:9d:c4:1e:3a:35:
                    5b:62:1d:c4:2d:74:c3:58:35:c6:70:37:fb:c5:be:
                    7c:15:83:0c:b0:07:65:5f:09:17:93:54:09:12:a8:
                    1f:ae:74:03:72:ee:1c:5f:0e:cb:a5:4f:3c:dc:c2:
                    83:db:a4:01:48:72:4d:37:e4:73:08:5e:2b:34:af:
                    c2:45:3a:ee:cf:51:ac:46:f4:d5:e7:36:56:ee:72:
                    d8:37:26:7c:40:ef:29:d5:c7:45:a3:89:a8:bf:a8:
                    e5:67:9f:8c:10:e5:1e:35:4a:1c:0b:ff:31:70:0f:
                    53:12:69:34:0d:ee:43:23:f4:9b:7b:27:c6:06:16:
                    76:fb:13:fd:4e:d5:d5:60:75:f3:63:c2:1c:59:2f:
                    65:fa:58:b1:94:c4:d1:12:ec:8d:48:da:60:ca:3f:
                    76:35:6a:4f:2a:be:d4:72:4f:f5:8e:0c:7a:10:46:
                    26:8c:47:2f:c7:54:fb:8e:aa:64:c3:30:8a:49:cc:
                    d2:a9:9e:f9:ab:eb:8c:2b:26:d9:46:05:e1:5e:70:
                    b8:42:96:07:77:5f:a0:c3:c2:5d:6d:96:b6:ff:b1:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:53:1D:0A:97:5D:93:A1:D2:82:32:E9:F6:4E:B7:53:EA:21:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/942b992e-2aae-3c39-83db-e8c027ac52a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.63.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:b6:22:89:e0:80:f7:2e:2e:2d:9f:6d:63:5e:ed:33:54:
         91:47:35:8e:d2:77:16:1d:23:43:d3:02:d4:2e:a3:50:23:dc:
         5e:e5:5d:df:b2:51:69:ba:15:20:b7:e1:1b:f4:14:73:99:cd:
         56:66:39:88:1e:07:e7:1f:22:68:37:40:91:6b:80:69:de:0b:
         0b:ec:55:75:b2:8a:ed:22:6b:ad:9b:5e:c9:73:4f:7a:d3:2c:
         86:ef:8d:ba:97:92:d8:2b:8c:3b:57:9d:0f:1e:e9:fc:60:fd:
         55:93:4f:ea:b9:62:b6:1c:f8:af:b4:a5:35:c2:b1:a6:b5:a6:
         99:81:80:ba:de:19:ba:09:fa:b8:09:76:f5:e4:9e:b8:8c:28:
         fa:09:9c:09:33:a0:0a:bc:ea:42:89:f6:f5:c6:57:3d:cd:c4:
         fb:2f:96:59:03:ae:db:56:20:87:12:78:7c:0a:a6:12:90:6c:
         32:69:ed:6e:f1:fe:2e:f2:5b:a3:46:c7:1e:f2:e8:fa:75:34:
         4d:04:17:31:a9:64:c4:bf:f5:e1:78:10:39:92:e6:02:9b:99:
         e3:b9:20:09:89:64:af:c7:e1:d8:5e:d0:d4:eb:9d:24:77:f4:
         83:a1:55:07:99:89:e3:d2:75:20:a9:b0:03:15:48:51:06:92:
         5e:34:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:27 2026 by rpki-client