Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d254159-bd85-38f5-a47f-319538f64704.roa
File:                     1d254159-bd85-38f5-a47f-319538f64704.roa (raw, json)
Hash identifier:          FhusfpR5qS3ppnjpFoWyAcPYzvbkLXBP3x1zfkasuoA=
Subject key identifier:   9D:44:2A:EC:B1:FE:4A:20:80:DE:44:27:29:0C:26:82:66:55:C7:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600967A621D9AB93B512600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d254159-bd85-38f5-a47f-319538f64704.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.123.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:96:7a:62:1d:9a:b9:3b:51:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=30817582-acfa-452e-96db-d50b68f73768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:e9:37:ab:52:5e:5a:04:5c:40:9a:fa:2b:
                    7f:43:a3:30:5c:7b:fd:6e:aa:da:94:ba:9f:25:a2:
                    37:ed:f7:b8:4f:dc:d8:47:9f:c7:d0:41:8f:50:46:
                    83:95:7d:7a:9d:d3:fe:8f:ef:b1:ca:d8:67:8c:0d:
                    0d:0a:7b:fe:b5:ce:88:73:1e:94:ab:39:96:57:f5:
                    e9:bf:24:63:80:18:2b:da:cb:bf:eb:6e:13:5a:5c:
                    68:10:c2:3e:ea:7f:98:92:6b:b9:5e:89:ac:43:ae:
                    a3:70:3d:f6:c0:b2:8b:20:ee:4c:37:aa:9b:2c:7a:
                    c9:e1:1e:b7:a5:29:40:f2:e8:be:32:ed:b1:47:11:
                    b7:34:fb:e9:e0:08:21:9c:cb:af:0f:53:fe:27:b4:
                    0e:89:f8:89:ad:6d:6c:c1:c9:e1:a8:29:1e:ae:e4:
                    ce:49:19:db:db:88:b5:e0:bc:5f:86:bd:cf:1a:24:
                    06:7b:5c:7f:53:54:ab:78:3f:87:c9:18:27:88:e4:
                    90:db:92:0f:a8:d1:f1:b6:f8:3e:53:c8:cc:32:bf:
                    7d:70:9b:7d:b3:26:56:96:0b:30:67:2e:cc:6f:4a:
                    d4:d4:48:8c:e8:3f:c8:ba:b8:47:84:52:22:11:37:
                    3e:b5:3c:8e:43:fa:71:25:49:f1:88:3c:66:da:33:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:44:2A:EC:B1:FE:4A:20:80:DE:44:27:29:0C:26:82:66:55:C7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d254159-bd85-38f5-a47f-319538f64704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.123.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:e9:51:0f:a4:fc:84:50:83:ed:2b:27:8d:7a:41:cc:e9:
         d3:04:80:d5:20:7b:2b:55:7c:fb:d3:88:4b:11:48:64:e0:51:
         82:b3:21:8f:b4:11:af:e6:14:27:97:e5:3f:2a:e9:7b:36:2f:
         cc:af:f1:a8:87:88:94:54:f4:dc:06:ea:c7:95:74:8f:1b:3d:
         3e:84:65:5a:0f:41:c6:56:f7:5c:cc:7f:24:05:2a:b5:15:f4:
         2a:90:bf:96:e6:7d:9a:12:80:66:b1:17:17:a5:be:e9:fd:04:
         ad:4a:d9:e6:43:ac:0b:fb:d8:78:9a:32:77:da:f0:49:12:38:
         11:c8:e5:ed:a1:38:66:c3:51:d2:f6:50:da:7a:9a:ba:7f:ff:
         42:4e:37:a9:28:c2:10:7b:b7:a4:ca:58:cf:25:40:ee:ce:d3:
         a5:15:8e:36:a5:76:e8:7d:8d:ee:05:5d:1b:55:a1:4f:13:db:
         c9:7e:e6:cd:94:65:46:0b:66:0a:e4:43:06:45:37:27:3e:8b:
         34:77:61:d5:ab:e5:8b:c6:0e:0f:92:28:bd:3f:12:e4:2a:4b:
         b7:9d:59:5e:2c:fd:3e:da:4e:6c:91:b5:ae:2d:31:eb:5e:1d:
         6c:85:24:aa:12:fe:20:2b:90:64:4a:6b:5e:7f:72:a4:a0:a0:
         6a:93:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:30 2026 by rpki-client