Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa
File:                     ba964f85-f54b-312f-87b2-f3a04f505044.roa (raw, json)
Hash identifier:          plrLVDNWbKY/c4OmVvZEt/FkzmdQHewsal+dqFTMMgw=
Subject key identifier:   51:72:C1:B3:BC:29:1E:75:8E:E2:9D:AC:5B:2A:1C:7D:3E:BA:B5:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7CF76FC375E7A8544B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.51.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:cf:76:fc:37:5e:7a:85:44:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b16a123a-50cd-4915-a809-034c3a538346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:ec:df:bf:e6:08:6b:af:d8:55:b1:78:ab:
                    c7:be:e5:e7:3e:f4:33:a8:ad:5b:b2:92:9d:4c:e9:
                    1b:1b:bf:3b:6d:04:03:25:63:2e:97:0f:ba:3e:dd:
                    9a:87:93:97:d7:2e:ec:1f:e4:b1:92:0d:c6:24:6d:
                    06:83:a2:b8:23:12:89:a3:0f:27:60:07:19:0d:60:
                    c5:74:6a:63:b1:1a:0d:d7:bb:c6:8f:a5:ce:79:e1:
                    70:07:80:f0:9f:5b:7e:67:ec:87:d5:97:ee:c9:dd:
                    44:10:f8:48:7d:7b:23:2b:84:2b:e0:33:84:2a:86:
                    65:e4:23:af:65:84:d6:04:ce:3b:c5:73:0b:4a:af:
                    ab:a8:54:f5:0a:78:31:11:0a:06:88:26:3d:18:92:
                    1e:65:7b:ed:c8:f9:e0:c3:5e:b9:84:8a:aa:d9:fb:
                    65:02:a8:29:c5:38:56:cc:0c:c1:a9:fe:55:1e:cb:
                    9f:a3:ef:2d:4a:bc:e2:44:d4:1a:2d:73:b2:5c:c9:
                    92:36:37:db:2f:c8:23:2f:9b:1b:4f:d8:99:1a:c0:
                    e7:e0:1d:ad:c0:94:ba:a5:31:41:e8:ac:a9:62:09:
                    44:1f:fe:02:23:cd:83:c4:ad:43:fe:e4:b9:2e:b5:
                    00:76:c6:76:ba:ea:8d:f3:4a:7b:ae:c8:e7:54:fa:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:72:C1:B3:BC:29:1E:75:8E:E2:9D:AC:5B:2A:1C:7D:3E:BA:B5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba964f85-f54b-312f-87b2-f3a04f505044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:c3:4e:21:39:1a:4f:dd:bc:20:ee:b1:98:ac:7e:66:d5:
         b0:da:fc:30:80:77:4f:f9:c8:b7:8d:1d:ee:7e:2c:7b:e1:29:
         f5:a2:85:0d:e9:38:99:8c:4e:c6:44:4b:f8:85:8c:da:cb:9d:
         44:e8:c5:33:fa:67:41:e0:c0:f1:72:3b:0b:c4:9f:ed:24:ea:
         a4:ef:4e:60:68:76:a3:5d:5b:02:33:61:4c:4b:1c:4b:d5:35:
         ba:af:cd:19:aa:2d:cd:c9:be:bf:0f:61:51:5b:94:7b:63:d9:
         03:55:bc:a9:01:37:50:7b:84:37:ed:b5:b3:5a:5f:1d:a0:08:
         d4:f7:ea:0f:98:0c:2d:c4:2e:6c:ee:a4:a0:bf:ac:74:d2:d5:
         85:a2:11:31:03:64:65:f4:c5:ce:35:43:f9:1a:e9:60:02:8d:
         a9:f4:67:06:0e:21:54:a0:67:48:d9:b4:25:db:a4:39:81:ae:
         24:df:16:5c:b2:d3:0a:c4:d0:3e:5a:c1:50:44:a2:cb:73:57:
         e2:08:00:39:5c:aa:33:44:5b:04:c7:7f:72:5b:54:4b:4c:32:
         20:82:51:87:45:69:12:6e:56:54:62:e5:21:8f:cb:7c:c2:9b:
         fd:0b:7d:33:1e:92:88:3a:12:b4:a9:58:8a:2e:c0:1c:55:5f:
         8d:e1:f7:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9892/DdeeoVEsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
YjE2YTEyM2EtNTBjZC00OTE1LWE4MDktMDM0YzNhNTM4MzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDs37/mCGuv2FWxeKvHvuXnPvQzqK1bspKd
TOkbG787bQQDJWMulw+6Pt2ah5OX1y7sH+Sxkg3GJG0Gg6K4IxKJow8nYAcZDWDF
dGpjsRoN17vGj6XOeeFwB4Dwn1t+Z+yH1Zfuyd1EEPhIfXsjK4Qr4DOEKoZl5COv
ZYTWBM47xXMLSq+rqFT1CngxEQoGiCY9GJIeZXvtyPngw165hIqq2ftlAqgpxThW
zAzBqf5VHsufo+8tSrziRNQaLXOyXMmSNjfbL8gjL5sbT9iZGsDn4B2twJS6pTFB
6KypYglEH/4CI82DxK1D/uS5LrUAdsZ2uuqN80p7rsjnVPpz7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFywbO8KR51juKdrFsqHH0+urVqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE5NjRmODUtZjU0Yi0z
MTJmLTg3YjItZjNhMDRmNTA1MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASTPBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7ow04hORpP3bwg7rGYrH5m1bDa/DCAd0/5yLeNHe5+LHvhKfWihQ3p
OJmMTsZES/iFjNrLnUToxTP6Z0HgwPFyOwvEn+0k6qTvTmBodqNdWwIzYUxLHEvV
NbqvzRmqLc3Jvr8PYVFblHtj2QNVvKkBN1B7hDfttbNaXx2gCNT36g+YDC3ELmzu
pKC/rHTS1YWiETEDZGX0xc41Q/ka6WACjan0ZwYOIVSgZ0jZtCXbpDmBriTfFlyy
0wrE0D5awVBEostzV+IIADlcqjNEWwTHf3JbVEtMMiCCUYdFaRJuVlRi5SGPy3zC
m/0LfTMekog6ErSpWIouwBxVX43h9yc=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:35:04 2026 by rpki-client