Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae246c-a22a-393d-bd68-4b204446e127.roa
File:                     0cae246c-a22a-393d-bd68-4b204446e127.roa (raw, json)
Hash identifier:          1T3YCkCiJ6t4VAWCdB+PoKIurJ68OESVyNGFU/yA9Ok=
Subject key identifier:   C7:43:FA:48:AD:96:89:1A:A4:B3:E1:E9:89:FE:18:25:9B:BA:47:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D5368244F64ED388C2AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae246c-a22a-393d-bd68-4b204446e127.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.196.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:53:68:24:4f:64:ed:38:8c:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=14b10aa3-11a4-4d48-85fa-e964f45acce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:19:85:8b:4c:7b:f9:aa:79:2c:c8:9a:d0:
                    e8:83:35:ed:65:1d:ce:76:07:74:85:b7:01:ee:a3:
                    e7:f8:05:2e:31:af:7b:fb:16:6c:4b:31:20:8d:17:
                    a5:90:9f:c5:25:e4:78:2c:ab:b7:64:f9:65:79:e2:
                    b7:e9:04:8c:52:f8:c5:5a:b6:03:8b:1d:c0:83:ed:
                    1f:e1:74:fe:84:0b:e7:6c:f7:c7:7a:e0:a7:74:53:
                    fb:36:bd:68:e6:ed:b0:45:de:3f:79:ed:0c:ce:4d:
                    47:62:61:7c:74:c0:58:1f:dc:d3:28:ae:c6:8f:10:
                    9f:4c:62:5f:60:7a:cc:e6:e1:85:b1:a6:6c:56:32:
                    9f:ba:95:5d:d3:2d:69:b4:7e:e4:b2:20:e4:53:01:
                    0d:7d:ef:d6:60:5f:fa:d2:5f:50:b4:01:99:e8:10:
                    b0:92:56:ed:ac:c3:1a:56:af:e9:c8:55:1f:ca:e8:
                    63:eb:30:2e:8b:dc:99:a0:71:da:1c:91:53:3c:1e:
                    e2:31:58:7d:07:e1:8f:75:7c:27:d4:00:23:83:34:
                    e9:9f:9d:e4:c1:2d:2a:5d:82:c0:58:1f:7d:e6:4f:
                    78:af:a1:b4:3c:7e:ce:fe:a5:96:0c:99:5d:fa:71:
                    5b:26:ca:0c:6a:68:7b:99:9e:36:a8:1e:6d:2b:d2:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:FA:48:AD:96:89:1A:A4:B3:E1:E9:89:FE:18:25:9B:BA:47:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cae246c-a22a-393d-bd68-4b204446e127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.196.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:51:0e:0b:32:20:6a:30:fe:a3:34:81:0b:40:31:55:dd:
         96:16:63:39:44:3a:1d:e6:87:ba:9d:a6:2b:ec:85:7a:dc:aa:
         07:31:1e:90:da:bd:5c:6f:ac:95:34:bb:f8:59:48:09:96:31:
         23:56:ac:fb:50:4f:b9:38:37:e6:5d:bb:a4:ba:20:92:1c:80:
         76:f1:5d:26:46:92:1c:1d:c0:30:cb:54:9a:c6:9e:51:a0:a8:
         81:71:02:8e:60:16:a1:ac:c0:e6:e0:63:56:d7:35:0d:3a:c2:
         cb:b2:1b:cb:5e:b7:b4:d1:04:39:b1:26:10:e0:11:7a:ae:6d:
         8e:45:f8:a9:06:e9:c4:43:28:9b:d2:03:47:f0:6e:30:5a:9d:
         56:bf:36:1b:9d:cb:99:5f:41:48:57:02:00:59:81:72:55:87:
         93:9a:2a:bc:70:59:e2:da:f0:69:e9:fd:a5:e7:26:57:9d:15:
         01:a2:e0:29:74:e3:76:7b:1b:32:20:ce:b4:35:25:3c:2b:d8:
         7a:ea:7e:02:5d:9c:09:dd:7b:07:02:fc:fb:ef:fd:66:f9:ef:
         99:a5:2c:e0:e6:a6:dd:d7:9b:9b:6c:da:f8:7e:7a:5c:26:a4:
         fb:48:47:4e:95:b8:51:b4:af:2a:17:58:05:9a:0c:b2:ea:3e:
         1c:fd:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:15:07 2026 by rpki-client