Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166db56b-f106-3ba0-bb06-250d0c7d3b57.roa
File:                     166db56b-f106-3ba0-bb06-250d0c7d3b57.roa (raw, json)
Hash identifier:          cFTNakL5J6i/qN7Fa7Jlbu4l4nNLxadMy0x811wwePo=
Subject key identifier:   E8:F5:93:59:CE:60:7F:BD:08:D4:E0:83:35:19:A4:B7:AA:F2:74:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600B89456D9D3BFEC025E20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166db56b-f106-3ba0-bb06-250d0c7d3b57.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.234.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:b8:94:56:d9:d3:bf:ec:02:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d12faa68-a250-4b30-812d-c0aa2d2639ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:93:77:33:ae:85:4e:a6:24:49:19:2e:29:
                    22:cf:59:5b:01:1c:b5:b4:8d:f2:af:da:34:7e:ef:
                    af:e7:f5:ae:58:72:54:0c:5a:2b:a2:22:3c:5e:87:
                    0f:4a:42:58:92:23:6a:d3:da:d4:b3:dd:52:da:b4:
                    2e:c1:fc:7b:25:4f:8e:f0:d4:19:69:85:6e:49:42:
                    17:87:49:dd:34:4f:a8:b1:ce:56:8d:42:25:49:52:
                    a1:0e:fc:64:e7:62:69:ad:ef:51:27:25:9c:e7:5a:
                    5d:a4:09:6f:1c:0d:f1:8e:73:63:c0:e1:a3:62:0d:
                    48:6e:6d:be:f7:9a:8c:b9:35:6d:52:23:42:60:47:
                    1f:54:3c:a5:8a:f2:0c:00:64:7c:39:dc:2e:d1:79:
                    fd:ce:d3:7c:c4:ed:af:89:10:1a:e7:60:00:61:f7:
                    45:db:e6:9e:f7:74:87:af:48:6a:5d:fe:d7:b6:f7:
                    1c:08:1b:a3:cc:4a:61:e2:ce:7a:02:64:e7:79:63:
                    07:1a:3a:59:e7:20:c4:c8:6a:9e:32:35:93:aa:dd:
                    eb:0e:72:2f:c3:e6:f9:5c:17:9a:01:8f:7a:51:ac:
                    45:b6:f9:f4:ef:c1:46:95:9a:52:d6:de:86:2d:72:
                    01:19:06:7e:a3:78:e6:e7:57:16:5a:04:ae:5a:67:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:93:59:CE:60:7F:BD:08:D4:E0:83:35:19:A4:B7:AA:F2:74:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/166db56b-f106-3ba0-bb06-250d0c7d3b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:fb:71:89:cb:5d:9f:65:0a:b0:18:57:86:55:ff:8e:17:
         01:cc:b8:00:10:8c:e7:62:ed:0b:66:cd:1d:4e:f6:5d:b5:b4:
         7b:ed:59:cd:74:4e:21:4c:16:d4:d1:c2:6a:52:0f:6c:e4:5d:
         af:dd:65:59:21:a6:f7:db:b0:c4:a2:c7:36:8c:00:01:bb:51:
         16:b5:d6:d2:26:a7:85:9a:37:f8:c1:a3:62:23:0c:fa:b9:64:
         cd:9c:a1:38:48:b6:61:bf:4b:7a:b2:0b:90:db:0d:2b:f0:70:
         d1:b0:f8:78:22:e4:51:0d:1b:9c:0d:cc:23:f2:a4:7c:fc:47:
         b0:2a:94:cf:f6:49:2c:e6:96:bf:aa:78:98:cf:31:19:e5:e5:
         f6:95:14:d4:72:e1:43:33:c8:b5:dd:c1:19:8e:8a:30:d0:91:
         66:97:5a:83:d7:1b:0c:45:db:c4:94:4d:f2:9a:4b:da:18:7b:
         a8:0b:51:2e:91:58:39:29:26:8f:10:ef:39:3a:73:84:dd:f8:
         61:5b:2e:40:f3:38:61:8d:0c:23:92:a2:41:35:89:3a:91:1e:
         d8:46:bc:29:38:9c:82:22:b0:4e:eb:9e:35:ae:4f:f7:e3:a6:
         6c:17:ca:f5:79:a7:6b:cf:3c:8a:c5:ef:58:67:86:80:4f:22:
         9e:dd:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:53 2026 by rpki-client