Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67eaf2e8-21df-3fbb-9204-62653721a24c.roa
File:                     67eaf2e8-21df-3fbb-9204-62653721a24c.roa (raw, json)
Hash identifier:          /CHWjLFNQi1KGjNM+QgRtpOMjkTcaXeamEpp4+Iyphs=
Subject key identifier:   DE:C0:4D:80:34:54:2D:F7:89:47:82:B8:E7:C6:9B:22:B2:E3:8C:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF9B752E6306D62B34AE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67eaf2e8-21df-3fbb-9204-62653721a24c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.234.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:9b:75:2e:63:06:d6:2b:34:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=394e58c5-8c8f-45ee-ab95-4a617961219b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:d8:c7:3e:67:6a:b8:41:e2:f5:f1:53:b3:
                    bc:23:93:07:9b:90:ee:e7:f3:91:58:52:8c:5d:0b:
                    a5:7b:60:e3:23:8e:9e:49:e0:2f:97:cb:7b:f8:9a:
                    94:10:2f:13:23:0b:67:58:ff:18:e8:9d:a0:43:63:
                    94:65:72:e2:e0:0d:0f:34:ca:a2:3d:ba:b2:84:a6:
                    20:d6:e3:8b:ea:91:4c:f7:ab:af:4f:47:75:e5:ee:
                    aa:68:ca:9e:57:be:77:5c:35:54:6d:f5:7b:d3:79:
                    88:6a:0e:b0:f2:a2:39:f2:24:81:94:53:42:dd:47:
                    fb:f0:c1:95:8b:21:1c:29:5b:31:57:58:9d:1f:65:
                    69:98:e2:0a:96:8c:ff:fb:64:8b:df:12:6d:e4:4b:
                    71:52:49:21:19:ba:bb:05:1b:e4:f0:31:92:d3:4f:
                    1d:d5:de:52:1a:1c:eb:a6:71:7d:90:76:5f:e4:b3:
                    4a:ca:09:6d:89:55:14:b3:f7:ce:13:84:53:76:43:
                    74:74:49:6a:01:a1:d3:f6:f2:72:d0:88:27:54:fb:
                    de:48:95:a3:65:83:bf:21:a0:45:dc:b6:ee:01:06:
                    e1:19:3b:f1:53:15:8a:b1:ee:00:6f:02:e0:62:ea:
                    99:4c:4b:1f:0c:d2:89:99:3a:68:2c:1d:6d:f4:e4:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C0:4D:80:34:54:2D:F7:89:47:82:B8:E7:C6:9B:22:B2:E3:8C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67eaf2e8-21df-3fbb-9204-62653721a24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:91:5a:d5:2c:4f:64:1e:96:76:6e:da:a0:45:09:67:79:bb:
         a2:65:bf:86:02:a4:eb:0b:8d:74:e7:69:ca:87:52:b4:42:19:
         83:3d:dc:21:4d:60:0c:e6:c1:b7:2f:22:a0:28:dc:b2:50:3e:
         67:5e:23:d0:93:fb:92:d6:4a:3b:e1:1e:27:a4:37:d6:f5:5f:
         b9:03:ba:c8:79:81:94:b8:df:11:38:fe:c0:7f:2a:6c:59:ad:
         5e:ba:1e:7d:71:06:06:2e:a1:e0:5c:76:08:7e:88:c2:29:97:
         83:fc:84:6c:ee:9d:f2:bb:d0:ca:42:30:4e:9f:b6:f9:25:04:
         7c:7d:ac:51:95:8d:99:d9:f4:60:ea:08:f4:0e:1e:1c:72:9c:
         21:4c:b2:67:a1:d7:ab:1c:26:0b:13:77:2b:c2:33:40:e7:01:
         50:13:15:d3:b8:7c:f3:ce:6e:33:92:75:73:c4:7f:86:b6:06:
         d5:dc:47:28:42:15:03:82:60:bd:76:25:3b:6f:eb:1b:3a:06:
         37:2e:85:27:ad:bb:f2:26:64:82:3c:08:5c:a6:51:7f:70:42:
         e0:b9:05:c3:51:01:95:fa:d0:e7:e1:96:ed:d0:25:8f:3c:de:
         8a:6f:c7:78:a6:9a:98:80:2d:16:24:a4:43:4d:da:81:fe:6c:
         0a:d3:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:51 2026 by rpki-client