Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6acd9a0-4656-3699-8ffc-f6debc584da9.roa
File:                     c6acd9a0-4656-3699-8ffc-f6debc584da9.roa (raw, json)
Hash identifier:          PsdztiqK89IjrxSbpM0qS1vSWEFIr/Ps2gkSQxIRXTI=
Subject key identifier:   58:63:AB:74:EB:C7:DB:D5:0D:6D:B2:FF:E0:03:AF:57:2F:5F:DA:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A81658D9E5281449002E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6acd9a0-4656-3699-8ffc-f6debc584da9.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        73.207.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:16:58:d9:e5:28:14:49:00:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b88c0b91-e15b-4379-ab7c-d8b689485cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:ab:b0:f2:b5:dc:de:79:2a:ed:59:eb:0f:
                    ee:bd:2a:bc:19:90:44:14:33:9a:9a:af:7e:ec:2f:
                    26:69:ee:8e:2c:1b:50:9c:e2:a2:af:8a:90:1f:a8:
                    25:57:05:68:86:d6:5c:d3:d7:5a:18:ce:b1:93:8b:
                    a5:ab:cb:af:8f:6e:49:e9:01:73:d1:c3:8e:af:e9:
                    e9:41:71:60:16:4e:45:c9:c9:93:a4:9b:d4:02:32:
                    9d:00:1b:e7:8a:7e:87:3d:6b:a4:c1:13:cf:7f:f8:
                    d0:a4:f4:df:9b:53:09:1f:9d:37:68:04:a8:ff:36:
                    b3:05:da:48:63:6b:fd:47:bc:71:37:27:0a:2f:d4:
                    6a:77:11:8a:34:c7:a0:90:f6:ed:52:f5:b5:4a:76:
                    03:45:9c:4a:19:63:7a:47:9b:fc:b8:43:fd:cb:c2:
                    c0:ad:28:28:e8:ef:f7:4a:3e:b1:09:ba:c2:e7:58:
                    0c:dd:26:93:42:e4:8c:1e:57:c0:99:7a:42:71:6e:
                    85:ee:7c:ae:80:4e:94:8d:91:8a:81:da:06:f3:fc:
                    22:3e:a7:5d:95:44:fd:07:14:73:fb:8a:f2:43:82:
                    b3:bd:38:03:16:6e:f2:46:33:29:14:e6:a8:2d:7b:
                    7a:9f:fe:c8:9a:c3:ae:75:83:8a:69:77:57:ef:10:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:AB:74:EB:C7:DB:D5:0D:6D:B2:FF:E0:03:AF:57:2F:5F:DA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6acd9a0-4656-3699-8ffc-f6debc584da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.207.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:7d:8d:cc:3b:5c:28:1f:ff:82:9b:54:8e:0f:a3:9a:ee:
         da:43:5a:aa:90:19:f2:25:70:ff:a4:40:e5:81:4e:a0:c0:1f:
         38:93:23:af:40:0b:62:10:a3:df:90:c1:c7:c8:e8:f0:56:60:
         d6:8d:44:34:39:89:54:30:cc:be:6a:e6:be:11:34:9d:60:d6:
         08:6e:02:06:63:f8:97:cb:de:4d:ff:74:7f:94:b7:6c:23:14:
         70:ae:9f:d4:8b:9b:db:37:58:39:f2:f7:47:ff:7f:07:a3:34:
         ff:4d:8a:15:e0:93:8c:30:10:2f:0b:ad:b2:d2:d6:30:3d:10:
         3d:ac:99:0b:e9:7c:55:4c:c7:83:d6:33:37:32:77:5c:58:5d:
         82:48:c0:3f:67:5a:8b:b7:b3:8f:06:d6:94:13:82:80:06:07:
         df:22:8c:85:7e:e5:a8:af:83:8a:12:65:58:d1:fe:88:51:38:
         c6:89:4f:46:23:56:21:0d:01:44:bf:5b:55:3a:34:41:26:99:
         3d:e4:93:1e:1f:49:18:f1:a9:0d:97:5e:a6:d5:2c:e3:ff:0e:
         51:71:d1:dd:e7:2b:52:35:de:cd:27:5b:9e:00:61:2e:25:f6:
         29:63:fc:25:2e:b0:42:c0:c7:b4:c8:f2:ca:d9:39:3b:29:47:
         d7:c6:6a:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqBZY2eUoFEkALoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
Yjg4YzBiOTEtZTE1Yi00Mzc5LWFiN2MtZDhiNjg5NDg1Y2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTOrsPK13N55Ku1Z6w/uvSq8GZBEFDOamq9+
7C8mae6OLBtQnOKir4qQH6glVwVohtZc09daGM6xk4ulq8uvj25J6QFz0cOOr+np
QXFgFk5FycmTpJvUAjKdABvnin6HPWukwRPPf/jQpPTfm1MJH503aASo/zazBdpI
Y2v9R7xxNycKL9RqdxGKNMegkPbtUvW1SnYDRZxKGWN6R5v8uEP9y8LArSgo6O/3
Sj6xCbrC51gM3SaTQuSMHlfAmXpCcW6F7nyugE6UjZGKgdoG8/wiPqddlUT9BxRz
+4ryQ4KzvTgDFm7yRjMpFOaoLXt6n/7ImsOudYOKaXdX7xC51QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhjq3Trx9vVDW2y/+ADr1cvX9rTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzZhY2Q5YTAtNDY1Ni0z
Njk5LThmZmMtZjZkZWJjNTg0ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFokfY3MO1woH/+Cm1SOD6Oa7tpDWqqQGfIlcP+kQOWBTqDAHziTI69A
C2IQo9+QwcfI6PBWYNaNRDQ5iVQwzL5q5r4RNJ1g1ghuAgZj+JfL3k3/dH+Ut2wj
FHCun9SLm9s3WDny90f/fwejNP9NihXgk4wwEC8LrbLS1jA9ED2smQvpfFVMx4PW
Mzcyd1xYXYJIwD9nWou3s48G1pQTgoAGB98ijIV+5aivg4oSZVjR/ohROMaJT0Yj
ViENAUS/W1U6NEEmmT3kkx4fSRjxqQ2XXqbVLOP/DlFx0d3nK1I13s0nW54AYS4l
9ilj/CUusELAx7TI8srZOTspR9fGaus=
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:26:56 2026 by rpki-client