Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa
File:                     ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa (raw, json)
Hash identifier:          VYL6ydtRauhFmI2kuhNvxKbLKrJ8zbmGQ1LK2SotoIw=
Subject key identifier:   A3:48:20:B8:9E:1D:09:69:E2:EC:F6:99:91:5A:DC:AE:AA:F4:6C:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981D73A1BBA89A997146380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        73.65.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:d7:3a:1b:ba:89:a9:97:14:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=29274281-2a1a-4168-bc95-0c67aa00b9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:c1:c6:3a:b9:28:93:3d:2a:b1:35:20:b1:
                    b0:3c:cb:72:c2:36:ab:7f:54:85:53:44:87:65:1c:
                    b1:58:8d:de:11:c5:41:a5:78:a1:93:e2:f6:d2:27:
                    9e:bd:15:92:0a:f5:b5:49:58:a5:62:3b:e6:6b:4d:
                    44:09:71:6c:34:b8:67:19:10:66:85:f3:5a:4a:a8:
                    94:36:99:d4:72:8c:c5:be:e5:b7:36:40:a2:30:3c:
                    6d:f3:72:71:a3:b8:29:d1:b8:44:fd:b9:b1:6f:0c:
                    1b:0f:38:3e:9c:90:58:6a:51:de:e9:97:fd:c7:47:
                    b5:d1:e6:d0:69:15:be:b9:80:79:b4:e1:a9:04:f5:
                    95:b6:2d:cb:6b:1a:1c:90:ab:15:13:fc:61:21:42:
                    42:5e:ba:08:8c:7d:04:42:c3:d3:9f:1d:cb:af:f6:
                    fa:1f:af:a7:cd:42:3b:4a:19:c6:8f:78:9b:6e:b4:
                    f0:b2:dc:b2:e1:bf:3f:87:d3:ff:50:bc:7b:ea:72:
                    db:ba:cd:69:b1:44:4f:ea:a5:71:02:9d:dd:8b:0a:
                    2d:6f:cf:89:df:5e:7b:f2:ef:a2:f5:7e:5c:15:f0:
                    88:07:c9:ac:ce:fe:19:2f:2e:c6:4e:f9:bf:3f:f3:
                    3a:25:f1:14:f2:54:99:57:f6:0b:12:ff:46:f8:0e:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:20:B8:9E:1D:09:69:E2:EC:F6:99:91:5A:DC:AE:AA:F4:6C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca990a8a-f6ea-3a6d-9cf8-5972982231ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.65.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:08:b9:2d:8a:20:dc:d4:36:00:d9:1e:02:67:db:f4:6b:
         32:f5:00:3b:28:7d:05:20:da:31:6a:24:3a:28:39:3f:1f:27:
         fb:2e:a2:7b:74:2c:10:66:c0:9e:f7:44:50:d6:13:9e:8b:25:
         a3:9f:e3:c2:2c:9c:f3:80:82:10:79:00:79:65:09:c5:12:3d:
         65:9b:04:f1:88:a8:6d:01:65:f6:db:d0:86:97:58:bc:f0:b3:
         5f:c5:04:37:d4:b8:23:c1:4c:3f:b1:8e:62:17:57:72:79:e0:
         1b:63:7f:61:93:c0:72:9f:51:92:a2:8e:33:de:bd:da:76:a6:
         5a:a4:c6:71:78:d4:0f:03:45:30:38:b0:b2:a3:ea:b8:8d:dd:
         be:06:18:c1:a9:88:dd:08:8b:a7:b1:38:97:68:ae:3d:51:38:
         36:20:ce:93:cf:5e:f8:98:3b:b0:00:1e:36:59:85:32:65:bb:
         3e:2c:72:c7:a8:8a:cc:d7:c6:b7:c3:19:62:43:67:f5:56:98:
         a0:b1:8a:33:40:84:74:6e:c8:c8:65:40:b8:04:54:dd:6f:0f:
         4c:33:03:f2:82:d4:f7:a1:c1:7b:f4:32:0f:c9:98:02:8f:a5:
         73:f3:00:c5:ff:a7:23:89:67:c4:f2:bb:94:52:ba:73:07:12:
         0e:24:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:58 2026 by rpki-client