Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab033ed-82c0-3cb2-a23f-b7db343bb4be.roa
File:                     aab033ed-82c0-3cb2-a23f-b7db343bb4be.roa (raw, json)
Hash identifier:          EZ+SuXQA/bVLM7a3LIKOVsyq6VlSX/7tNM2yp2NdSR0=
Subject key identifier:   DE:49:A6:E4:9D:41:22:9C:B1:AA:93:6E:49:3F:43:D1:FB:03:32:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EF761AB1BAFE1FDEAF700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab033ed-82c0-3cb2-a23f-b7db343bb4be.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        73.37.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:f7:61:ab:1b:af:e1:fd:ea:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4ac2e508-407b-4ef0-90cd-0f3deeb07598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:60:ef:fb:b8:58:e4:e7:07:73:bc:40:ef:
                    bc:1b:7a:80:a5:95:36:db:8a:b8:a9:ac:2a:91:99:
                    01:32:92:1e:f3:cf:87:f6:6d:4e:c1:25:0e:08:44:
                    55:67:14:a2:f2:7f:38:b0:64:28:37:37:f3:a0:b0:
                    a1:fd:f3:c8:da:f5:f3:71:19:72:03:87:b7:1f:9a:
                    41:f8:09:bd:1c:42:b0:2e:9f:4d:17:b8:fc:4c:86:
                    cd:0c:92:63:67:d5:72:c2:e5:3c:0e:5c:05:9c:0e:
                    a0:b8:09:af:94:53:ca:a4:65:ed:10:ab:be:f3:6b:
                    79:ff:f0:64:c2:07:a3:c3:dc:71:83:1b:d0:fa:d5:
                    df:c9:c6:3d:2d:06:71:b6:1c:02:37:57:a3:d6:55:
                    fa:93:a4:f5:8b:43:2f:08:81:2c:83:6c:83:cc:3a:
                    17:81:52:9c:70:f3:e3:08:5d:48:1b:14:1c:e1:3a:
                    91:7c:50:96:88:da:4c:a3:9c:84:16:41:b0:1f:1d:
                    df:cd:03:dd:8e:00:f4:45:ed:b4:cc:73:45:44:31:
                    ba:f2:86:a8:56:38:1d:c4:5c:bc:5a:f9:22:3a:27:
                    69:7b:16:53:d2:43:72:f5:66:19:6e:bd:fd:6b:04:
                    fe:53:50:cc:db:86:f5:2d:73:b3:32:cb:cc:14:c1:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:A6:E4:9D:41:22:9C:B1:AA:93:6E:49:3F:43:D1:FB:03:32:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab033ed-82c0-3cb2-a23f-b7db343bb4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:8f:98:16:0f:b8:d8:f0:ad:77:d9:f1:1b:f8:3b:7f:e6:
         76:d7:30:57:93:61:ea:d4:4c:c4:ed:4d:f4:df:49:d0:36:16:
         d3:c7:14:79:66:82:ea:b8:60:ef:32:35:6d:82:cc:09:d7:a4:
         0c:5f:6a:f6:88:b1:00:c9:91:94:de:19:a3:54:a0:5d:9a:65:
         0b:d8:04:6a:54:1c:f7:23:b3:28:07:9f:1e:b3:fd:ce:17:12:
         0e:f8:9f:3a:2f:06:f9:87:95:a9:a7:40:76:26:42:76:d3:71:
         97:f9:61:26:3d:94:c1:cc:67:6c:4b:e3:31:b0:8b:bb:17:aa:
         da:61:4e:35:f0:5b:0b:b1:bb:08:30:35:d1:12:1d:b4:c3:d3:
         96:19:75:75:1b:24:57:24:02:f1:a0:89:4a:f1:fb:c8:70:15:
         d5:21:71:0b:21:97:43:75:df:c0:2d:0d:bf:b1:98:a1:06:dc:
         b9:65:d9:f4:62:65:37:33:eb:bd:47:f1:97:ca:87:76:b6:92:
         d6:f9:b4:71:87:f9:d8:90:1f:13:96:eb:e7:02:fd:31:c4:e0:
         fc:61:98:35:83:6d:49:3e:37:a3:9c:34:a1:e6:4d:cf:47:1f:
         14:6d:aa:8a:34:fd:63:1c:68:b5:f1:16:f4:93:8c:2a:1a:08:
         ad:81:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:22:33 2026 by rpki-client