Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c122f4-0383-31e0-aaf2-81208cf2f13d.roa
File:                     d3c122f4-0383-31e0-aaf2-81208cf2f13d.roa (raw, json)
Hash identifier:          9ikHkYgBho9J4rzQRFEhhhNag+m1W1gfvdyHBHmeHGQ=
Subject key identifier:   43:E1:8B:2E:16:A7:17:F6:02:5D:E6:73:58:BF:41:60:80:85:B9:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61453D8D2967A3A419F0AF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c122f4-0383-31e0-aaf2-81208cf2f13d.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        73.237.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:3d:8d:29:67:a3:a4:19:f0:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=f65df918-abb7-496f-9994-9fca662b618e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:c2:8f:6c:96:93:b3:29:cf:8d:79:a7:af:
                    f6:7a:bf:a4:ad:f5:ea:8a:c2:ed:bd:a8:81:7c:e8:
                    d1:ad:44:04:b9:23:ad:6d:87:22:d4:4f:fe:e3:d6:
                    a4:72:0c:aa:f7:6d:21:b7:42:9c:4a:e0:bc:77:7b:
                    47:b7:93:3c:e3:32:fd:5b:18:09:10:39:10:2a:97:
                    97:18:75:fd:06:5e:58:9b:02:03:2f:6e:0d:65:89:
                    ab:8c:be:04:86:cf:8d:73:73:d7:32:de:42:54:13:
                    d7:ee:14:12:85:ae:df:bb:6e:5e:96:f9:a2:db:bf:
                    cc:36:1e:8e:f3:f2:00:5f:9a:dc:c6:a8:48:a6:53:
                    5d:8b:c3:c1:ea:00:87:91:bf:4b:56:6b:2d:16:17:
                    a6:cf:f2:b7:ab:9f:c3:55:d7:e6:53:f0:00:fd:e1:
                    07:2d:27:d3:e9:4a:ae:6d:32:8b:b7:65:1a:c7:70:
                    92:76:08:db:7a:4a:fa:4e:c8:fa:b8:12:5d:b4:9d:
                    c0:be:d5:ed:57:0c:2d:67:03:11:8a:79:9c:b4:9b:
                    60:91:e2:71:2e:d8:9e:da:ff:ee:76:46:38:0b:b2:
                    60:3f:02:29:4c:36:ca:b5:bb:01:42:f3:40:4d:f8:
                    fb:9d:1a:75:d1:1a:90:1a:cb:de:56:51:31:26:b2:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E1:8B:2E:16:A7:17:F6:02:5D:E6:73:58:BF:41:60:80:85:B9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3c122f4-0383-31e0-aaf2-81208cf2f13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:65:11:55:c8:b3:e8:f5:ff:2e:1d:7d:e4:e1:70:e0:a1:dd:
         d5:6d:48:80:5c:ff:cc:98:39:5e:13:1d:11:56:26:aa:cc:1e:
         93:5f:7d:d7:dd:c4:f0:48:b9:fe:74:b7:17:9c:a2:cc:bf:04:
         11:79:ae:d7:ab:4a:be:36:8c:a8:70:45:b6:ba:fd:0b:2d:fd:
         ba:bb:a5:ad:19:cf:99:8e:03:f7:a9:5d:41:57:2f:eb:ff:fc:
         2e:03:3d:3a:71:56:e9:9b:45:b4:c7:d7:ad:2c:20:0c:fa:61:
         83:0a:87:c4:d0:fb:cc:81:91:55:67:90:1f:cc:c4:35:6f:a3:
         5e:76:35:3c:88:26:be:dc:3b:51:30:a0:a2:26:6a:d6:25:a0:
         f2:6a:b1:ec:ce:39:af:5d:6d:05:4f:02:3b:9d:ca:57:68:77:
         0c:7c:a4:02:a0:3e:c4:75:9d:7c:3c:2d:23:bf:43:7e:ff:fb:
         15:d3:62:4a:4b:85:13:04:34:14:0e:5a:a3:2c:2f:23:d6:34:
         6b:2f:cd:8e:15:16:5a:0d:46:ee:3a:e8:ad:54:d2:60:1d:81:
         62:e6:ce:e4:12:99:10:02:a6:51:28:8b:7a:67:42:4b:da:d7:
         c4:04:a8:2e:f4:3a:73:65:90:77:12:7a:09:60:d3:5c:95:22:
         83:4e:75:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRT2NKWejpBnwr0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZjY1ZGY5MTgtYWJiNy00OTZmLTk5OTQtOWZjYTY2MmI2MThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXHCj2yWk7Mpz415p6/2er+krfXqisLtvaiB
fOjRrUQEuSOtbYci1E/+49akcgyq920ht0KcSuC8d3tHt5M84zL9WxgJEDkQKpeX
GHX9Bl5YmwIDL24NZYmrjL4Ehs+Nc3PXMt5CVBPX7hQSha7fu25elvmi27/MNh6O
8/IAX5rcxqhIplNdi8PB6gCHkb9LVmstFhemz/K3q5/DVdfmU/AA/eEHLSfT6Uqu
bTKLt2Uax3CSdgjbekr6Tsj6uBJdtJ3AvtXtVwwtZwMRinmctJtgkeJxLtie2v/u
dkY4C7JgPwIpTDbKtbsBQvNATfj7nRp10RqQGsveVlExJrJt4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPhiy4Wpxf2Al3mc1i/QWCAhbk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNjMTIyZjQtMDM4My0z
MWUwLWFhZjItODEyMDhjZjJmMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJlEVXIs+j1/y4dfeThcOCh3dVtSIBc/8yYOV4THRFWJqrMHpNffdfd
xPBIuf50txecosy/BBF5rterSr42jKhwRba6/Qst/bq7pa0Zz5mOA/epXUFXL+v/
/C4DPTpxVumbRbTH160sIAz6YYMKh8TQ+8yBkVVnkB/MxDVvo152NTyIJr7cO1Ew
oKImatYloPJqsezOOa9dbQVPAjudyldodwx8pAKgPsR1nXw8LSO/Q37/+xXTYkpL
hRMENBQOWqMsLyPWNGsvzY4VFloNRu466K1U0mAdgWLmzuQSmRACplEoi3pnQkva
18QEqC70OnNlkHcSeglg01yVIoNOdRQ=
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:33:47 2026 by rpki-client