Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ecd99-85a7-36e7-8a80-51551c59fa3a.roa
File:                     a58ecd99-85a7-36e7-8a80-51551c59fa3a.roa (raw, json)
Hash identifier:          a2D/YYUTQ+mPJoP9DC1JCem7JiozG7qNdTHYWDQQD2g=
Subject key identifier:   61:A5:C6:0B:EF:77:48:09:6B:4D:07:F3:BF:EF:BA:58:37:FE:EB:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8FE4205D822037D89EE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ecd99-85a7-36e7-8a80-51551c59fa3a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.92.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:fe:42:05:d8:22:03:7d:89:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c288eae9-4ffc-4d5e-85f5-bc53a7f455cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:0a:92:94:6b:7c:57:48:5d:ac:3d:96:2e:
                    1c:e8:9f:0e:71:ef:47:5b:a3:2d:78:3f:81:ff:e1:
                    eb:e6:47:47:ac:ce:f0:02:5c:98:2a:a4:70:6b:d6:
                    99:13:da:6d:d7:26:50:68:8a:ec:42:1a:f8:fd:85:
                    1c:ae:69:86:eb:3d:e0:72:b0:ba:fe:1b:1b:52:c9:
                    d5:76:34:a5:83:da:b5:74:30:c7:28:1a:8f:1f:82:
                    cd:07:ab:90:46:b7:19:ab:18:79:7c:e2:dc:33:5f:
                    e1:06:42:e9:2a:c6:a6:d4:6e:e1:01:21:04:1b:17:
                    bd:b6:7e:86:98:be:9c:e8:2b:57:e6:07:bd:02:70:
                    dd:03:f1:60:eb:c9:6e:e6:86:67:5b:2c:d0:9a:ce:
                    86:93:a5:40:f8:97:42:3c:9a:92:d1:98:6f:32:84:
                    d9:97:89:09:2a:55:fe:c7:47:ff:56:99:4d:17:da:
                    72:b0:d3:82:c3:1d:5a:cf:c2:c0:20:be:29:7b:94:
                    53:5c:1c:44:c4:22:12:c0:c8:63:47:24:74:54:a9:
                    e7:75:84:15:78:6f:99:64:cd:14:f3:da:4a:53:d2:
                    a4:ef:b2:7f:6e:37:30:06:10:82:02:4c:2c:fc:7a:
                    c7:4d:0c:1b:fb:4f:43:b5:5f:1b:94:fb:34:6c:b3:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A5:C6:0B:EF:77:48:09:6B:4D:07:F3:BF:EF:BA:58:37:FE:EB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ecd99-85a7-36e7-8a80-51551c59fa3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8b:77:10:a4:7c:eb:fe:ed:8e:47:66:e3:22:76:6e:7f:63:
         86:9d:64:7f:01:2b:5a:7a:4f:f1:cf:a1:c8:23:7d:16:5e:6d:
         1f:60:ec:37:2b:5d:7b:7a:7f:03:ac:a5:f0:0b:91:74:5b:f6:
         29:a7:fd:dd:38:48:51:4c:9c:35:35:2c:58:51:c4:ab:7c:bf:
         c3:09:c2:37:87:67:7f:c7:33:a2:f9:aa:49:3e:01:b7:32:f7:
         6c:46:0e:1b:bf:23:d1:b2:e6:ab:ce:6d:5c:38:34:b3:16:c8:
         be:2e:a8:72:93:8a:92:5e:b3:71:01:b7:a7:f3:8e:eb:41:db:
         84:7f:24:7b:87:42:fd:d1:5b:af:cb:c2:26:0d:11:91:a4:db:
         18:f9:0e:b6:cf:5b:ad:2e:e8:88:6a:71:0a:82:3f:8e:56:6c:
         b0:9b:f8:4d:4c:ae:ea:be:06:e8:13:87:ea:4c:0c:4f:72:48:
         4f:41:4d:36:62:49:51:6e:a1:36:41:53:f7:88:ca:a7:d9:45:
         ec:95:f6:43:f1:a0:3f:32:54:57:ab:47:97:4f:c2:fa:25:ee:
         77:5d:00:df:9d:12:f6:a6:57:ee:ca:91:77:82:47:a2:67:3a:
         ef:1d:f0:60:a9:08:fa:08:fb:8d:06:1c:5e:3f:f2:e5:38:0c:
         38:ef:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:54:25 2026 by rpki-client