Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643536aa-7c33-3c37-b66e-9e1ba4638f6f.roa
File:                     643536aa-7c33-3c37-b66e-9e1ba4638f6f.roa (raw, json)
Hash identifier:          iuMVMw8Aar+HUIkW97OVl4rfAoP6RQeV+dl9N1C3Zec=
Subject key identifier:   0B:E5:D0:0A:A7:97:58:7A:D3:2A:1C:EA:37:C8:73:8A:6A:8E:DA:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED864197376936E8A883F6240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643536aa-7c33-3c37-b66e-9e1ba4638f6f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        73.255.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:19:73:76:93:6e:8a:88:3f:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=bc86420c-08ae-4ed0-86bd-39b994f3e61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:04:a6:bc:c2:8d:6e:f1:81:22:4c:e9:0e:
                    ba:51:d9:31:9f:7b:04:e5:55:7d:b7:80:6b:02:75:
                    8a:e7:e2:b5:ab:e5:5e:1e:0a:a3:a7:0e:84:b9:12:
                    b1:08:aa:0c:b3:db:bb:ff:86:f4:78:49:25:9c:59:
                    3a:58:74:6e:f3:63:58:cc:17:ef:f3:46:eb:3e:46:
                    e2:d4:17:8e:83:c8:99:a9:1b:2a:d6:51:ae:ad:68:
                    d7:0b:fe:0c:db:ba:2e:94:dd:94:6b:4c:8e:02:72:
                    c4:55:93:ae:f1:a3:db:c3:dc:d5:e7:00:62:ab:a1:
                    d2:92:a2:76:f1:6e:fb:01:aa:22:73:38:b2:a8:a7:
                    16:89:9d:40:aa:1f:d4:6f:56:d8:e8:6a:72:f2:6f:
                    6c:6e:88:76:c2:6f:3b:75:0f:81:4c:31:ea:ce:30:
                    b7:f1:c8:5e:96:9b:fd:d1:a8:e8:8a:19:5e:5e:d3:
                    3c:0b:fb:3a:9a:b5:5c:ff:54:c5:ae:25:d2:9b:61:
                    76:1e:95:58:37:03:57:bc:2c:4e:e2:5d:3c:c9:33:
                    f7:5b:c5:24:44:18:3b:a3:2e:e8:c7:13:9d:68:76:
                    dc:45:1d:2c:87:bb:1a:5c:28:3b:bc:c8:f8:7b:91:
                    3a:ff:90:2b:65:87:08:53:2a:e1:e6:3e:98:de:7d:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E5:D0:0A:A7:97:58:7A:D3:2A:1C:EA:37:C8:73:8A:6A:8E:DA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643536aa-7c33-3c37-b66e-9e1ba4638f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.255.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:84:58:d2:4f:47:e4:db:42:2a:2a:ff:a0:dc:ab:85:37:2a:
         54:36:0d:18:5a:27:02:34:46:14:8d:72:e2:51:9f:c1:ff:83:
         43:f9:04:f1:be:a2:27:21:49:d9:34:df:be:05:54:3b:59:26:
         42:a8:6c:c7:9f:48:f8:11:e3:8a:f3:00:2f:34:84:b0:9f:43:
         27:64:59:e4:03:ef:b5:fb:26:6d:80:f1:74:71:32:17:a5:88:
         fe:7a:53:1f:21:1d:24:c8:a8:85:2a:a5:83:50:73:0d:05:ab:
         d3:89:c1:4d:ae:f7:3d:0c:00:f1:05:52:2c:27:df:e4:59:f6:
         97:cb:31:22:81:e4:14:7a:c8:37:57:3c:99:ff:02:16:7d:ee:
         7f:6f:a4:dd:2d:25:2c:17:44:d1:f1:73:ed:dd:f1:ea:4a:0f:
         ab:1f:5f:6f:52:a4:c5:b2:aa:34:af:79:ba:e6:2c:20:9c:58:
         17:76:b0:6d:19:e5:f5:45:dd:05:01:b2:b5:5e:2c:b6:58:73:
         27:77:0b:c3:e2:b4:59:2c:5f:70:37:c5:5c:6f:81:0c:93:4f:
         bb:59:da:8c:87:5f:7d:a5:d8:e0:cb:dc:45:c8:f2:78:19:b1:
         bd:88:7f:e4:36:5d:15:bf:10:e2:8a:7d:3d:b6:40:5b:45:b5:
         42:c9:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:52:49 2026 by rpki-client