Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abffcb4-8244-3b63-80d6-e98514dbc21d.roa
File:                     1abffcb4-8244-3b63-80d6-e98514dbc21d.roa (raw, json)
Hash identifier:          QsciXEp6gtmR49bIDyuz49I3tI8izBM8kQusSimqlx4=
Subject key identifier:   40:24:7A:D5:7D:FF:DB:2C:CE:5C:CE:55:14:CD:CD:FD:80:84:78:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFA04E8EBC6294D3C07500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abffcb4-8244-3b63-80d6-e98514dbc21d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.238.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:a0:4e:8e:bc:62:94:d3:c0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=3e88d822-edb7-4611-96e5-a47b9b98e4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:1a:74:6e:fb:74:0a:da:c1:13:d4:1b:d1:
                    77:04:a0:ee:66:e6:9b:d2:75:3c:2a:b1:92:2a:1a:
                    03:22:72:69:14:40:08:98:d0:57:b7:5c:28:d5:91:
                    3a:4f:07:e1:0c:b8:0f:a6:86:9d:80:b3:ae:1c:78:
                    52:8a:20:51:c9:2a:64:08:66:94:b5:96:95:37:31:
                    10:09:61:99:ca:95:1c:b8:b7:55:bd:62:4f:c5:31:
                    0c:c0:1f:7d:e0:4d:51:8e:85:44:c8:f6:c6:b6:38:
                    d4:8e:86:32:51:53:e3:2b:90:5c:14:a3:c8:c1:7c:
                    c6:0f:2f:52:72:e0:e6:27:63:c8:52:f1:ea:6f:b8:
                    f1:31:f6:d9:50:4e:50:22:39:d0:69:99:70:5f:ba:
                    0c:13:26:63:04:f5:8f:b4:05:e9:0b:03:b6:a4:d8:
                    ef:2a:07:c1:66:a2:9f:1a:7d:92:94:f3:9b:63:09:
                    37:54:49:14:7a:8c:cd:48:ab:c1:21:7f:1d:77:ba:
                    a2:3c:ab:b4:1a:4c:6e:a8:e1:3b:97:10:a4:a6:c5:
                    e8:8d:d3:e3:2b:55:73:65:63:d6:4d:84:02:5c:d7:
                    02:6b:61:7d:76:38:e3:06:97:38:d5:1f:09:b3:ec:
                    ab:45:f5:9f:b2:5d:c6:11:9f:c7:99:f7:19:35:da:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:7A:D5:7D:FF:DB:2C:CE:5C:CE:55:14:CD:CD:FD:80:84:78:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abffcb4-8244-3b63-80d6-e98514dbc21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b1:01:a6:0c:98:1f:9f:bc:06:d7:0b:2b:a4:ee:c4:9f:5a:
         c8:92:62:c0:d4:16:50:63:7d:b9:bf:24:a4:08:78:55:9d:6e:
         07:5c:74:fd:af:5b:a2:44:c3:e4:29:2d:b1:92:49:ed:74:4d:
         dc:1e:51:45:84:58:6a:e4:41:49:3f:b2:16:88:77:5e:e2:9e:
         c8:7b:b3:e0:44:2f:bf:6d:21:4f:7c:4d:5e:00:9c:15:5f:13:
         3c:e5:2c:01:81:5d:c0:19:ac:ba:aa:7b:e3:ff:f3:07:41:f7:
         7f:f6:8d:ec:ab:90:63:81:ce:c3:94:f3:65:b3:a4:d8:40:ce:
         a1:8f:f2:ea:d2:ed:da:c0:2d:6c:be:b0:2e:a4:5d:6c:66:d4:
         40:52:da:64:90:23:e8:d3:f4:c6:c2:0f:06:ce:d8:cd:e7:cd:
         0c:67:7f:e6:8b:4e:23:00:a2:ab:e8:28:07:43:9a:82:5d:58:
         66:3c:64:49:90:90:8d:e9:7c:96:1d:af:a9:3b:1a:d4:be:be:
         8c:69:67:8f:49:51:fd:af:84:a1:cb:fd:2a:0b:4f:93:7b:ee:
         39:f6:7e:2b:d4:54:2f:6d:2c:9d:9c:be:ec:7a:70:73:92:3c:
         29:b0:7e:6f:0f:de:bf:cc:fc:1b:41:ba:67:18:a5:32:5f:7c:
         ee:b7:ad:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:56 2026 by rpki-client