Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f35db63-2dbc-334c-a394-766cfb12b512.roa
File:                     2f35db63-2dbc-334c-a394-766cfb12b512.roa (raw, json)
Hash identifier:          75du3wddOiQfTvHZVs6vxWjjUcbmA/yjnef893Mx2Ek=
Subject key identifier:   9F:89:BA:5A:38:4D:39:6E:27:D8:6D:1B:6D:B3:91:95:F7:D9:C6:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E3F94AA7A240606B40200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f35db63-2dbc-334c-a394-766cfb12b512.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        73.158.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:3f:94:aa:7a:24:06:06:b4:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=0095ef25-f772-4e83-8b07-f7af27ebf187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:1b:fc:ac:b4:57:a3:68:78:02:41:3a:26:
                    b2:a7:90:34:e7:c1:37:ff:4f:13:b1:4a:7c:57:8e:
                    e7:ad:d0:f3:48:d4:f3:67:03:ce:e4:91:44:18:67:
                    9d:fa:5b:95:37:f8:97:6c:35:e9:2b:b5:ec:5f:9f:
                    2e:c4:83:ae:fe:b2:97:9d:db:82:4a:20:40:cd:5a:
                    53:77:74:db:5e:1c:80:2b:f2:5b:47:69:4d:03:ff:
                    4c:3a:ac:03:c7:fd:36:92:58:7f:e9:18:95:5d:4c:
                    fc:69:7d:6d:03:ee:c9:85:5c:84:c1:cf:94:ce:05:
                    fc:b9:88:1e:bd:7d:32:22:bb:ab:a1:50:89:01:fc:
                    7c:16:69:f6:5d:e7:62:b6:e3:85:ce:f1:a6:d8:19:
                    09:7b:76:91:5f:62:68:d6:f5:9a:e4:c0:b3:49:8e:
                    8e:2d:1c:22:cf:5a:d6:a5:b4:b0:c7:8e:49:58:4a:
                    49:12:74:6c:f0:11:f8:f5:6d:7a:cb:63:64:01:46:
                    3a:c7:12:d2:5a:ca:16:9f:63:50:d1:cb:fa:b4:21:
                    12:ff:ca:b9:ff:34:8d:b4:c7:f8:04:2d:fb:b0:5f:
                    fb:3c:31:59:69:4a:a4:54:df:b7:6e:6a:a7:c9:75:
                    63:40:1e:dc:b8:99:32:cf:94:d3:62:78:5d:36:8f:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:BA:5A:38:4D:39:6E:27:D8:6D:1B:6D:B3:91:95:F7:D9:C6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f35db63-2dbc-334c-a394-766cfb12b512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:53:19:b8:5a:53:d7:45:9e:20:ee:2f:02:6c:fd:9a:d2:
         6f:57:ff:81:0e:ed:ac:3f:16:d2:e0:0f:19:f2:5e:b1:e4:bf:
         a1:5b:a0:85:55:06:e9:08:b1:06:dc:4b:e4:63:86:88:68:ca:
         77:7f:f0:f2:75:20:e1:4d:31:95:c2:8b:96:d8:ab:fc:6a:fb:
         b0:92:96:d8:84:c4:bd:b3:02:81:7c:03:f6:75:1e:01:25:82:
         20:41:68:d6:bc:fb:fb:eb:25:52:fc:1c:47:2e:33:9a:48:9d:
         1c:94:8c:5e:b6:b5:0f:26:af:3c:be:49:41:8f:ae:b0:05:cf:
         53:44:3e:77:ff:8e:fe:a8:a6:0a:7e:cb:45:dc:2c:33:1d:85:
         92:d0:f6:34:6f:1f:c6:e5:27:fb:bb:cb:17:61:f4:64:41:d7:
         ad:4c:f5:91:86:bf:f6:22:4f:f0:36:10:11:5f:d0:57:c1:e3:
         69:d5:8a:21:60:72:4e:68:bd:b1:a3:35:85:db:05:61:b3:f3:
         90:3b:de:75:04:e1:2c:76:e4:0d:27:6c:11:e9:75:1c:5f:85:
         f9:80:07:2c:de:e8:e8:df:fb:b6:ac:03:d3:52:16:c0:a2:2c:
         a9:d8:ce:35:d2:e4:8d:db:91:8f:30:cd:c6:95:23:fe:46:1f:
         70:ef:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:19:20 2026 by rpki-client