Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa
File:                     0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa (raw, json)
Hash identifier:          KdOzDR8LOhZmEGXJXZNnXcroDN5aFTsqc3LOv4rdKdA=
Subject key identifier:   F2:91:81:05:83:3F:D2:03:96:46:A8:FD:1A:00:FB:9C:F6:06:4B:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED43218DBABF2275B1299E9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        76.107.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:18:db:ab:f2:27:5b:12:99:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=2c2d545a-b979-46fd-a883-f323677614dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:8a:6f:79:16:f8:83:be:56:c4:66:2d:71:
                    52:0b:55:f3:88:3b:92:2e:1e:78:4b:e7:52:7b:01:
                    21:dd:60:5d:81:0e:76:96:fd:eb:70:53:ea:d7:5b:
                    f0:fa:a3:19:9a:96:d8:cf:55:d5:25:ed:69:7d:9a:
                    a8:c3:66:33:8d:f7:4c:50:b9:70:6c:56:28:b3:c1:
                    91:00:2f:36:39:2a:84:fc:69:94:74:f7:f1:11:7e:
                    91:a1:58:0e:69:99:81:ba:7f:8e:5d:7c:70:c1:7a:
                    ec:f4:07:ea:11:cc:b0:ad:ad:de:f6:32:ec:03:02:
                    9e:aa:a3:7e:03:c7:d3:b2:18:3e:41:a2:e9:79:ba:
                    b5:a5:b6:65:48:0a:7a:47:36:ff:4c:67:fd:ce:23:
                    1f:ce:55:05:00:10:bf:b2:df:51:ee:ec:0b:f8:3b:
                    f3:cc:99:2f:d6:df:ce:2d:23:51:4c:4c:31:eb:9b:
                    38:cb:24:33:20:18:2e:cb:e0:fc:47:5d:1d:d6:fa:
                    04:85:52:83:95:e6:65:4d:0c:44:e9:0d:0e:2e:f9:
                    9f:08:16:60:29:d9:26:4d:b3:6c:a7:1f:20:a5:0f:
                    05:c6:f4:40:c5:ab:12:ec:84:3e:fd:12:8d:34:cf:
                    3e:d9:86:33:9f:bf:62:38:8e:2b:70:47:ba:ca:c5:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:81:05:83:3F:D2:03:96:46:A8:FD:1A:00:FB:9C:F6:06:4B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:0c:4f:a7:26:8f:63:a6:31:40:6c:75:08:46:43:08:11:
         67:37:aa:82:78:02:d1:d4:f8:ab:27:94:19:43:1f:94:e0:07:
         8c:d8:f4:4a:ee:96:ab:c7:b4:cf:74:d8:77:7d:04:14:a2:28:
         0b:b1:9b:70:c6:25:a8:33:32:42:de:f9:b0:c5:ca:6f:b2:8c:
         77:53:27:d1:39:d7:65:3b:0a:b7:66:db:31:7a:8b:79:f3:7c:
         3c:ed:6f:d1:f8:17:e9:49:00:59:7a:b4:d0:c5:f4:b2:26:ce:
         dc:2b:65:09:07:eb:11:c2:9d:1a:63:18:39:3b:71:ca:b3:05:
         c5:d5:37:63:7b:9b:2f:9d:f5:7b:2f:f4:16:b3:9b:48:c4:a4:
         48:ab:b2:f0:b2:43:70:5c:e1:c4:e1:d4:10:39:0d:5c:33:6b:
         fb:e4:bd:ba:36:0b:a3:4e:53:a8:b4:e8:2d:07:7d:a4:49:e6:
         98:51:2a:e8:a0:3d:6f:16:b9:b6:d0:b7:c7:b4:80:01:df:f9:
         04:8e:95:63:08:8d:1f:9a:a4:9a:5d:f3:3e:7c:4e:1e:53:eb:
         f9:ce:56:d8:12:c9:8e:ad:c5:3a:fd:b4:3b:89:7d:c0:62:ce:
         4a:28:82:21:5c:63:67:c2:45:24:f3:a3:be:7e:66:53:39:b4:
         e6:81:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:43:17 2026 by rpki-client