Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d470e09e-afd1-3bdc-93be-ca8db0846503.roa
File:                     d470e09e-afd1-3bdc-93be-ca8db0846503.roa (raw, json)
Hash identifier:          fj1HMN5lNTsY5cMyLKCxS4ZTRUQ+1YDTiJMR4hV/RPA=
Subject key identifier:   5D:0F:FD:DE:D2:9B:FA:92:E7:E8:B2:4F:D6:9B:AF:2E:07:84:97:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7AEC5770E1C3BDE75DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d470e09e-afd1-3bdc-93be-ca8db0846503.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.176.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:ae:c5:77:0e:1c:3b:de:75:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d938c23d-0c30-47d0-8d83-5e026a82f54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8c:e4:00:00:47:0a:02:7d:7d:7d:6f:ce:42:
                    5a:3f:62:a8:7a:fa:c8:92:2f:0b:a6:32:4f:6f:eb:
                    4e:16:81:b9:2b:56:b8:eb:b5:a9:96:cd:b0:06:ae:
                    d6:e7:7d:d4:b6:ff:4b:0e:83:d3:5e:e3:75:43:20:
                    e8:4f:d4:a4:4b:41:61:ac:95:68:13:3f:f1:fe:09:
                    d9:9e:9c:8b:4b:e2:e8:23:5d:de:b3:f8:37:d1:29:
                    d5:52:bf:86:54:5c:93:da:88:54:80:b3:54:a4:6f:
                    93:58:d3:b8:d2:50:a4:89:81:03:50:1b:21:44:cf:
                    fa:2f:cb:67:fb:82:f8:82:d5:fe:c8:ab:c6:98:c7:
                    58:7b:10:ef:fb:09:6a:2a:d8:a2:7c:ae:68:f8:65:
                    9e:97:75:ac:39:81:64:97:4d:7f:f5:4a:31:10:af:
                    dc:8a:d8:79:22:1b:1a:45:07:90:f8:db:19:c0:91:
                    22:1e:22:fa:d3:be:0f:e7:9d:ef:c4:c5:00:30:a3:
                    4f:26:bc:1b:60:22:f4:48:5e:16:46:97:71:1e:6a:
                    da:03:7c:33:07:f0:ad:4b:03:e2:25:5b:da:cb:5a:
                    7c:3e:f6:05:d1:48:27:3c:a5:e8:42:41:99:79:72:
                    d5:ac:3e:df:0d:b1:f6:b0:fa:9e:51:6e:dd:b8:89:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:FD:DE:D2:9B:FA:92:E7:E8:B2:4F:D6:9B:AF:2E:07:84:97:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d470e09e-afd1-3bdc-93be-ca8db0846503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.176.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:03:76:90:23:2f:80:b5:06:40:3a:1b:6c:fc:e4:20:3e:d8:
         ad:3f:72:8f:ad:20:b2:59:c8:67:72:3f:d1:35:04:33:89:c0:
         87:b3:1f:2a:4c:85:f4:6e:8c:19:96:4a:30:f7:bc:58:e1:8b:
         59:98:7a:99:2b:46:2f:f0:71:88:e4:90:8d:a2:59:19:51:66:
         e0:9e:75:60:04:9e:5b:92:31:a6:b7:4c:e2:15:98:2a:e1:c6:
         d0:95:3d:ca:16:ae:0e:4f:a0:a9:33:6d:9f:95:d9:b4:ac:69:
         40:b6:bc:ea:9d:35:a6:73:a5:2e:7e:08:9c:f3:82:5f:f5:3c:
         72:9b:75:2e:86:31:74:74:e1:73:12:5a:91:d7:47:d2:32:25:
         1e:1c:c7:40:c2:4c:56:64:7b:49:17:8e:9e:5a:21:f0:dc:00:
         38:c8:99:6c:b3:85:71:4d:04:58:bc:e7:ab:42:6a:07:4b:0c:
         bc:0d:1f:08:24:94:d4:dc:42:ce:fc:5f:8f:1d:a1:49:79:b1:
         28:5d:d0:f9:c8:c4:a0:73:ef:c4:73:64:d7:1a:6c:e1:41:da:
         db:0d:72:fe:24:63:5a:81:9e:82:8d:e2:bb:c3:e9:c8:0c:1b:
         84:8c:79:76:ca:ac:5c:8e:12:d3:fc:ea:1e:76:f3:6f:60:2b:
         01:4c:ac:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O967Fdw4cO9513gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDkzOGMyM2QtMGMzMC00N2QwLThkODMtNWUwMjZhODJmNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ozkAABHCgJ9fX1vzkJaP2KoevrIki8LpjJP
b+tOFoG5K1a467Wpls2wBq7W533Utv9LDoPTXuN1QyDoT9SkS0FhrJVoEz/x/gnZ
npyLS+LoI13es/g30SnVUr+GVFyT2ohUgLNUpG+TWNO40lCkiYEDUBshRM/6L8tn
+4L4gtX+yKvGmMdYexDv+wlqKtiifK5o+GWel3WsOYFkl01/9UoxEK/cith5Ihsa
RQeQ+NsZwJEiHiL6074P553vxMUAMKNPJrwbYCL0SF4WRpdxHmraA3wzB/CtSwPi
JVvay1p8PvYF0UgnPKXoQkGZeXLVrD7fDbH2sPqeUW7duImtGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0P/d7Sm/qS5+iyT9abry4HhJcKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ3MGUwOWUtYWZkMS0z
YmRjLTkzYmUtY2E4ZGIwODQ2NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASbA6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKYDdpAjL4C1BkA6G2z85CA+2K0/co+tILJZyGdyP9E1BDOJwIezHypM
hfRujBmWSjD3vFjhi1mYepkrRi/wcYjkkI2iWRlRZuCedWAEnluSMaa3TOIVmCrh
xtCVPcoWrg5PoKkzbZ+V2bSsaUC2vOqdNaZzpS5+CJzzgl/1PHKbdS6GMXR04XMS
WpHXR9IyJR4cx0DCTFZke0kXjp5aIfDcADjImWyzhXFNBFi856tCagdLDLwNHwgk
lNTcQs78X48doUl5sShd0PnIxKBz78RzZNcabOFB2tsNcv4kY1qBnoKN4rvD6cgM
G4SMeXbKrFyOEtP86h52829gKwFMrEc=
-----END CERTIFICATE-----
Generated at Tue Apr 21 21:38:24 2026 by rpki-client