Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09084f-a026-3766-aa1c-fbb156c64aab.roa
File:                     aa09084f-a026-3766-aa1c-fbb156c64aab.roa (raw, json)
Hash identifier:          JvTKFqIFqqLHKJO48R+4SYa9s4sTDbt7OoFEUx62sXc=
Subject key identifier:   6C:B3:AE:8B:B3:46:DF:9E:7B:A1:03:F6:44:BB:F3:74:72:CD:33:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E07193AE6039CBB78DB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09084f-a026-3766-aa1c-fbb156c64aab.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.231.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:07:19:3a:e6:03:9c:bb:78:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4ab20291-0605-492d-9733-9210b35b3e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:f7:f7:f6:ed:9e:cd:e7:64:c8:2f:3d:df:
                    e5:24:73:71:8c:bd:34:33:cb:00:9b:e7:83:94:26:
                    9d:8b:95:1b:4d:72:5a:96:19:8c:66:6e:87:74:f7:
                    36:16:74:75:a2:b9:5a:b1:21:72:29:a6:9d:1a:52:
                    81:65:83:5e:5c:e9:27:5e:85:60:e3:2d:76:d1:4e:
                    9f:1b:0f:15:59:16:f7:b0:2e:7d:67:e9:5d:10:24:
                    73:36:fb:dc:0d:b8:85:6c:33:c3:bb:27:30:9c:83:
                    29:be:c4:f1:04:fe:a5:48:81:d4:ba:bd:7d:aa:1b:
                    a6:6f:f3:e9:c3:6b:2c:d1:cb:28:f6:81:fe:96:5a:
                    23:e9:94:8f:52:be:57:2e:d5:e2:df:86:fe:f7:b5:
                    17:2c:97:86:27:68:9f:32:b5:8e:15:7c:cd:2f:80:
                    92:e2:9d:80:dd:5d:c4:fc:f3:29:a6:8e:45:cf:58:
                    dc:59:1b:39:81:6a:02:ae:31:09:fe:2e:93:7d:d2:
                    d0:50:ca:23:9a:d9:ae:b3:8b:2b:91:93:e7:ef:d5:
                    7a:27:90:2e:b5:97:b8:d7:6c:1b:85:7b:05:1f:10:
                    7d:54:25:7b:94:b3:93:b9:4b:c0:bd:15:2a:d6:3f:
                    bf:ac:ff:ca:55:08:a5:2e:2e:22:f4:a3:a5:c8:e9:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B3:AE:8B:B3:46:DF:9E:7B:A1:03:F6:44:BB:F3:74:72:CD:33:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09084f-a026-3766-aa1c-fbb156c64aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:73:c2:e6:41:0b:42:65:bb:3a:66:75:ac:f4:ca:42:83:
         f4:39:a3:59:46:10:8e:2c:71:32:83:ed:e6:bd:15:da:3f:75:
         e9:c3:0a:b1:0a:9a:e0:dd:9a:da:30:d8:a4:90:70:c7:94:de:
         bd:3b:31:ea:33:8e:f4:4e:f2:cd:7e:70:6f:cd:61:1c:6d:42:
         5f:15:2b:1c:f2:76:98:df:e8:04:ad:af:25:3a:dd:1e:c7:8b:
         e3:49:d7:8c:3b:11:05:b2:ca:91:66:a1:87:70:7d:5b:b2:88:
         cd:77:8b:8c:4c:50:f2:52:3f:72:db:57:18:d3:b8:39:60:c8:
         47:c3:f2:14:17:71:1c:96:cf:c6:f5:f7:40:75:ac:97:ba:e0:
         c8:76:c1:ae:80:41:e1:a3:5a:c1:e9:76:67:f4:26:27:61:f0:
         87:0e:d7:e0:87:f0:7e:f9:00:0b:e4:48:3c:3b:2f:aa:12:ad:
         3d:45:06:0b:20:0c:f0:10:bb:cd:cd:a1:df:5a:9f:63:24:ca:
         87:1b:0c:2c:28:59:6f:a1:5f:88:18:b2:30:2a:a6:79:c0:95:
         f5:ea:2a:71:4f:40:7f:df:fc:21:3d:d8:ba:b6:71:43:0b:2e:
         da:00:fd:96:e8:bc:16:43:a9:45:f2:a7:f2:ab:e6:d4:06:6d:
         db:8d:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:51 2026 by rpki-client