Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8405e46-dce0-3e4d-a7a6-a8f72337d352.roa
File:                     d8405e46-dce0-3e4d-a7a6-a8f72337d352.roa (raw, json)
Hash identifier:          xZ7bRmyZh8tzBvCJ/gS2BGeWUQtjy2Kie8zjxHi6Xhk=
Subject key identifier:   95:D1:9F:66:73:36:58:14:7E:BF:69:B1:53:B6:10:6B:2A:F0:AC:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7DD2604223993D2E8C7E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8405e46-dce0-3e4d-a7a6-a8f72337d352.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        73.8.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:dd:26:04:22:39:93:d2:e8:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9741651a-2b24-4d10-ae95-448e91da584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:6f:9a:90:59:87:61:f0:34:ad:66:7a:cd:
                    07:5e:9f:b2:99:bc:61:5d:87:8e:65:f3:cf:6b:75:
                    f3:2f:12:aa:c1:c3:43:a5:05:3d:e9:cd:4a:c2:cc:
                    d1:85:0a:dd:d4:cc:e2:55:0e:15:af:ac:34:a8:e6:
                    85:f7:21:dc:0f:ef:6b:5e:39:2d:c8:83:39:dc:30:
                    ad:77:b7:57:97:8f:fd:fe:51:f0:bc:ac:50:19:a7:
                    e8:31:64:1a:52:9e:40:a3:05:e5:5e:28:3a:c0:44:
                    b5:28:84:d2:90:c2:fb:39:bd:f0:0f:2b:2c:0c:9c:
                    37:08:c5:3f:d9:a2:e3:90:99:8a:f9:48:b7:03:5c:
                    75:f9:ed:83:5c:4e:fc:b3:d8:83:ac:9a:70:94:ba:
                    71:7e:26:73:d1:ff:10:c1:d9:9b:a6:fd:66:ef:6d:
                    87:07:a2:11:0b:e2:5e:32:3d:17:be:ab:e7:e1:4f:
                    a2:92:ed:ba:c5:ae:1c:56:dc:3e:79:a8:46:73:6c:
                    ff:f7:84:ec:fb:73:05:ff:33:5a:93:ab:f0:39:3c:
                    ff:44:41:3f:3f:f7:33:13:52:4c:68:d1:ce:88:3d:
                    1c:fe:e7:93:c4:87:b3:81:54:0a:12:30:f0:6a:50:
                    f9:e8:64:71:62:4c:e6:48:5b:10:5b:d0:38:07:4f:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:9F:66:73:36:58:14:7E:BF:69:B1:53:B6:10:6B:2A:F0:AC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8405e46-dce0-3e4d-a7a6-a8f72337d352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:1a:3f:a2:23:e1:42:80:c0:56:95:eb:db:2b:b6:2d:b9:9d:
         40:f9:32:d6:be:78:e4:f6:a2:45:47:f8:ca:b5:b4:46:f0:f3:
         0a:d6:f3:79:25:8f:13:84:41:96:04:19:3b:1a:88:e8:0d:bd:
         9e:1e:42:de:47:fb:3f:99:7e:e2:76:de:29:0f:5d:e3:54:66:
         57:e7:2e:6a:8c:ae:80:66:e6:20:06:61:8d:c0:d9:e5:37:39:
         5e:71:29:5e:69:21:61:d5:86:31:d6:65:f1:57:01:53:38:9a:
         f3:79:66:50:db:98:f8:19:4b:bb:cb:33:23:16:36:9c:40:bf:
         92:30:4c:3a:ef:4f:a4:bc:41:2e:20:57:26:82:37:85:21:ae:
         24:43:ab:1b:e7:28:a1:66:22:b2:a4:ee:23:48:6f:dc:3f:f6:
         15:2f:61:09:e9:5e:dd:72:41:a0:44:c2:e0:97:e4:65:40:2a:
         bd:3f:b7:56:ce:2b:16:2b:dd:7c:0e:70:48:49:bd:5d:cc:3a:
         aa:cf:55:0f:53:c3:ee:37:48:d2:bb:7f:ab:b2:cf:a5:5b:b5:
         58:a2:ef:7d:74:1d:d4:3b:a4:87:79:7a:63:62:1b:fb:56:67:
         a4:77:52:d2:1d:25:c0:f5:f2:89:46:c6:84:4c:90:be:44:b9:
         86:7b:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:16:38 2026 by rpki-client