Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02952418-332c-3613-93bb-eb3838f3a742.roa
File:                     02952418-332c-3613-93bb-eb3838f3a742.roa (raw, json)
Hash identifier:          GU+6LbD9koxF1U4ItKgl7e9iCz0lrNBVoyAJ1PwLWgE=
Subject key identifier:   5F:3D:43:A9:87:1F:A3:B5:64:6F:B8:5D:2D:8E:D6:5D:40:23:C5:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8632E300AF0D0635A1A4900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02952418-332c-3613-93bb-eb3838f3a742.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        71.238.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:2e:30:0a:f0:d0:63:5a:1a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=114c2e85-6e8a-4f78-a5c7-a59388047ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:99:c8:69:55:5a:b1:c4:6b:f5:a3:55:7d:
                    ba:bd:0b:4d:25:6a:1d:b9:ec:7d:dd:6a:f5:8f:65:
                    5f:03:19:df:24:08:7d:55:85:d1:da:52:39:77:70:
                    14:97:c3:02:08:c4:6d:30:f7:e2:d4:cf:ca:bc:c8:
                    2d:17:52:f9:cc:52:92:f4:bd:30:1d:a8:dc:7a:ab:
                    cd:62:51:9c:a2:73:30:ea:c5:de:52:03:87:46:5f:
                    4e:27:5b:75:0e:91:bb:7e:af:63:c4:65:00:b3:f6:
                    9b:5b:4e:43:50:14:41:e0:7a:bf:84:9e:7e:12:a6:
                    78:c5:f1:8b:3a:28:95:2c:26:b3:11:02:dd:e2:33:
                    ee:c6:92:56:33:2a:48:7e:76:9e:04:8b:a2:a8:0b:
                    27:a7:18:50:a5:c3:56:47:58:2c:55:ee:65:79:e1:
                    c3:1b:04:2e:53:70:2e:b9:9f:dd:1b:7c:f6:71:0c:
                    16:02:23:7e:89:5a:0a:29:3d:67:50:b3:ed:9e:fc:
                    9d:96:bc:c3:98:e0:dd:eb:47:45:aa:1f:a2:ce:56:
                    64:5c:b6:3c:ad:9a:bd:8d:99:64:5e:1e:f8:2a:bd:
                    07:89:ae:36:dc:ef:0c:d4:bc:f8:1b:27:60:00:ea:
                    eb:ab:7c:cb:20:9c:bb:3c:ee:14:3f:6c:1b:c5:71:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:43:A9:87:1F:A3:B5:64:6F:B8:5D:2D:8E:D6:5D:40:23:C5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02952418-332c-3613-93bb-eb3838f3a742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:70:d2:1e:ee:4f:c2:9d:e6:6d:f1:6a:d4:95:ae:f8:a7:e0:
         7c:9f:05:64:d1:cc:29:c7:11:fd:c2:e0:1e:69:5b:1d:fb:a9:
         2a:9e:42:09:af:99:1a:cb:b1:3e:8c:c1:f6:dc:4a:72:55:56:
         c3:5d:54:77:13:0e:e9:6e:eb:02:2a:21:64:82:e5:fd:cd:f4:
         0a:86:70:dd:0e:c3:ef:a7:f7:ac:b0:b9:da:c2:e8:a0:07:07:
         22:86:c8:af:f4:1e:44:25:14:05:f2:9a:51:03:e4:b8:42:d3:
         34:69:19:32:bc:77:93:ea:ca:c5:62:25:68:51:4f:84:88:ae:
         3c:dc:f8:d6:68:8c:f1:e4:5f:92:f7:53:61:86:ae:37:47:5c:
         05:5f:1e:e3:e9:86:5e:7f:00:f0:71:6b:9c:1d:5a:bc:08:3d:
         8a:30:54:1a:bf:7d:70:f8:f3:dd:98:0e:6e:70:d5:83:21:c8:
         19:90:e7:1b:17:c3:f1:9c:28:3f:ec:68:31:b1:22:aa:a6:51:
         8f:1b:31:41:85:2f:a0:95:46:ad:8a:ae:43:3b:ed:09:e6:52:
         ce:47:29:b6:34:cf:c4:10:57:8d:3b:17:14:50:42:33:9d:39:
         08:cf:d2:cb:50:c6:af:8b:df:cb:41:09:a2:4f:82:90:c8:31:
         69:83:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:50:13 2026 by rpki-client