Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b932a0cb-3ccd-347f-822b-ee665d71323a.roa
File:                     b932a0cb-3ccd-347f-822b-ee665d71323a.roa (raw, json)
Hash identifier:          iHtk+VxjkHHVkN8MVxjgTy6eTdKHtJhNsHRj7YGDpLk=
Subject key identifier:   F5:1C:98:73:B8:C0:F8:90:CE:AE:90:23:31:49:2F:1A:7C:F7:1A:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE874DE87E8EF9F59EF36600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b932a0cb-3ccd-347f-822b-ee665d71323a.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33650
IP address blocks:        73.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:4d:e8:7e:8e:f9:f5:9e:f3:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=39b3f534-846d-4129-8590-4920a7ac8c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:1c:99:31:c3:6a:1e:21:14:5a:51:c4:fa:
                    c0:35:fa:2a:ea:be:17:bc:c9:73:26:59:5a:24:64:
                    17:0d:74:a1:3e:af:1c:75:73:e5:7d:e9:1d:c9:74:
                    a7:47:74:23:fb:0f:ef:39:d9:f1:36:5c:6d:37:62:
                    af:2b:2a:f8:d2:eb:59:cc:d2:85:ae:34:fc:f8:76:
                    d9:98:57:14:fb:00:d1:bb:a1:e8:b4:d8:53:80:c8:
                    c0:a3:a6:9d:57:1c:79:f6:5c:97:ea:66:60:77:f8:
                    87:ea:a1:66:05:2d:dc:08:b1:d4:8e:92:ec:5e:6f:
                    24:c7:46:5c:40:a1:6a:c5:0e:e0:db:83:9b:d9:e2:
                    18:f7:d7:1d:02:5f:c2:db:65:eb:ca:77:46:e2:8d:
                    10:d9:51:86:e0:f5:ea:bb:19:75:70:c2:22:44:62:
                    c0:07:8e:ff:e6:49:52:3b:01:fd:7a:dd:0b:5f:ea:
                    b0:dc:fb:59:1a:4c:ac:a9:91:92:ee:b3:b4:71:09:
                    75:11:bf:7b:94:e9:01:d4:4d:f9:b1:2b:26:18:82:
                    43:75:e7:49:0b:8c:20:c5:33:b9:d4:67:09:72:f8:
                    27:f7:07:50:e9:5a:eb:12:ff:c4:60:c8:b4:ab:04:
                    11:08:09:a6:9c:db:ea:1a:ae:42:56:67:7e:fb:2a:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:98:73:B8:C0:F8:90:CE:AE:90:23:31:49:2F:1A:7C:F7:1A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b932a0cb-3ccd-347f-822b-ee665d71323a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:b7:82:01:48:0f:ed:2a:cf:89:b2:2f:0c:14:76:1e:36:72:
         ee:3e:c1:79:68:7f:df:8f:2c:1c:c8:ab:f9:4d:77:b0:87:88:
         aa:f6:78:23:fd:41:ef:73:4b:1d:e3:73:03:ed:3e:99:30:af:
         53:87:5a:a2:de:58:bb:20:98:cb:49:c8:1e:01:bc:5d:20:06:
         93:11:f8:15:c1:ea:f6:01:44:4a:5b:e0:de:ee:c1:37:8f:07:
         43:fb:43:46:6b:5a:98:a3:37:4c:d5:51:fe:ca:0c:1f:ed:3a:
         56:83:b6:24:19:35:c3:9e:09:81:70:13:87:db:f3:fe:6d:03:
         87:a5:17:65:2f:f2:2d:ce:c5:a4:3d:6a:0b:ee:de:58:02:7d:
         00:07:a8:23:94:34:b8:4c:6a:8c:35:4c:8b:f4:98:9c:a1:6a:
         7a:2f:1c:cd:c8:41:ca:3f:2c:11:3a:2f:fe:c0:a0:34:3e:d4:
         d3:c7:67:1f:a8:5d:b9:56:63:7a:b6:6e:ff:99:da:ae:44:9e:
         f0:18:e1:a6:5c:4c:64:b2:02:6b:bb:bc:c8:a7:1d:7a:dd:d3:
         6f:31:52:f8:75:ed:87:3c:b8:c3:93:b3:a9:ca:4f:ea:b9:fc:
         38:4d:9a:ff:97:5a:54:ad:25:42:79:3c:56:f3:96:f8:fa:cc:
         4a:dd:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:56:52 2026 by rpki-client