Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0a6852-9365-3a0f-97b0-2652a5c22601.roa
File:                     ba0a6852-9365-3a0f-97b0-2652a5c22601.roa (raw, json)
Hash identifier:          myCnlYVejgwKcW8HfdeqCh+4R/iKC9GsjMVU+x1Rtl0=
Subject key identifier:   CD:AF:25:93:A8:C7:C7:D8:72:A1:3A:CD:E4:3B:47:94:05:4E:3B:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144DD4349229E18D28C3F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0a6852-9365-3a0f-97b0-2652a5c22601.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        73.106.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:dd:43:49:22:9e:18:d2:8c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=fa1c9812-e2a7-4dfd-a568-1b826de09cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:c3:ef:b7:8f:c2:99:2c:09:5d:8a:7b:2e:
                    9c:88:70:19:dd:6c:f7:ff:09:be:65:a9:7a:5e:ab:
                    df:f4:15:ce:a8:68:61:37:3a:e8:69:37:48:e0:e1:
                    3c:e7:83:d4:c2:80:18:62:4f:48:49:1b:14:e6:6e:
                    1f:00:e7:c9:c7:64:d8:18:f7:43:88:16:90:f4:06:
                    68:bf:15:dd:68:c8:d9:11:35:a8:97:cf:7e:fd:f4:
                    d0:fd:79:cc:a3:dd:36:db:bb:c5:44:b7:cd:fd:95:
                    c8:c8:11:a4:41:0a:2f:2a:9e:48:c2:26:9e:ea:c9:
                    0f:48:68:92:e6:38:f4:45:b0:c5:ca:33:11:4c:66:
                    92:08:31:ea:7c:35:30:df:00:4a:35:67:32:36:91:
                    17:64:3b:f6:b6:bc:65:a1:58:10:10:c2:97:e9:f1:
                    b9:db:af:71:12:30:b2:12:44:17:2f:75:2c:09:78:
                    64:42:11:03:29:22:db:75:4e:05:98:c5:5e:95:04:
                    5b:16:ed:93:50:4f:be:11:17:2c:8b:4c:b2:85:a9:
                    c5:9e:fe:96:11:66:a8:eb:fd:2f:9d:dd:d3:07:1e:
                    92:70:8d:d0:07:3d:2e:01:5d:6f:2e:2b:1e:e9:79:
                    ba:b1:c4:c1:f6:6a:b1:2a:e5:d6:61:1d:36:5d:9a:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:25:93:A8:C7:C7:D8:72:A1:3A:CD:E4:3B:47:94:05:4E:3B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba0a6852-9365-3a0f-97b0-2652a5c22601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.106.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:17:d6:8e:75:87:e7:ec:52:8b:e8:bb:ea:2f:15:6a:fd:96:
         85:54:22:48:d9:5f:5c:75:6d:d2:a8:98:22:23:61:0a:e7:08:
         cc:cb:23:ec:44:b4:03:5d:bc:3a:ef:42:e2:cb:9a:cf:da:b8:
         56:7d:e0:28:97:d4:37:e9:80:71:b7:f7:3a:22:22:2b:57:1a:
         33:a6:d4:28:fc:3e:17:80:d0:d5:ef:84:2d:c1:30:7c:1c:2c:
         76:e5:ca:18:a4:05:76:e8:73:b3:0d:0f:6f:cb:bb:d8:06:45:
         92:7f:50:f6:c3:d1:08:4c:00:85:bc:9c:a4:41:e2:4e:51:d5:
         39:fa:f5:0f:34:9c:b4:a3:b9:0a:9c:fc:2f:22:33:ef:59:3a:
         cf:c1:6b:9d:a0:7c:05:59:ec:f4:84:07:c5:e2:a0:d5:0d:d5:
         7e:76:4c:59:fc:ea:16:12:e3:a3:56:6a:6c:6c:90:20:00:e7:
         d7:c4:7a:a8:19:1c:47:b2:87:15:69:ac:29:5d:eb:eb:ab:37:
         ed:a1:91:04:ce:a9:a9:70:27:c5:4d:54:ea:f3:10:2b:53:a4:
         7f:56:8a:c8:0d:7c:59:67:a0:88:68:e7:06:5d:9f:7d:a2:86:
         83:e4:2a:cc:f0:c2:f2:15:61:13:58:f2:af:46:fa:9c:92:05:
         cf:be:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:37:30 2026 by rpki-client