Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b62f397-b6f6-3947-873e-d605ecfe22e8.roa
File:                     0b62f397-b6f6-3947-873e-d605ecfe22e8.roa (raw, json)
Hash identifier:          XdQUNSA3wi9yJWEEPyOJbzVl2oZj+SPSBbJLT+mZN5Q=
Subject key identifier:   2A:21:9E:D2:63:42:7A:28:E0:04:2F:99:89:72:35:82:9A:C4:74:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E38C9B86F8494933C5258DBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b62f397-b6f6-3947-873e-d605ecfe22e8.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     33666
IP address blocks:        184.116.240.0/21 maxlen: 21
                          184.116.248.0/22 maxlen: 22
                          2001:558:a01e::/48 maxlen: 48
                          2603:30a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:b8:6f:84:94:93:3c:52:58:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=a2bb67f5-0c9d-415e-aa37-2fc1c47c9df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:55:70:0c:f4:0e:aa:25:52:db:13:da:ab:
                    d1:e9:83:f8:5d:09:98:6d:16:79:2e:c9:e9:61:e4:
                    e5:b3:53:12:71:78:b1:ca:78:db:17:1c:a0:55:11:
                    72:88:24:2d:d8:80:01:87:2a:fc:fe:fd:d6:31:af:
                    00:3c:04:ac:96:24:fb:50:64:39:4b:8e:ec:a0:d6:
                    9c:b5:9d:5d:c3:7e:f9:e8:a5:60:26:60:d2:15:99:
                    f6:c5:16:26:9c:95:99:f5:4d:a2:8e:01:66:76:d5:
                    ea:3f:06:63:2d:21:3f:20:66:a8:39:0a:cf:6e:13:
                    0b:0e:1d:31:e4:76:a6:dc:c7:67:98:35:38:2a:9f:
                    07:54:a6:6c:16:33:82:37:7f:fe:bc:ea:9e:6b:04:
                    cb:61:28:3b:c7:5b:7c:d7:67:70:7a:0b:78:e5:77:
                    26:5d:f5:51:f4:09:f8:ef:3c:c7:37:cd:f4:eb:8f:
                    2a:cc:2e:09:a0:a1:69:27:e2:48:b6:e6:ef:05:78:
                    c2:07:95:ad:79:5d:60:24:33:7b:41:7a:14:df:0a:
                    5b:c9:9a:13:c8:39:48:b4:ca:e4:ef:19:bb:db:8c:
                    ce:dc:86:f1:af:aa:d0:e7:ae:2d:52:a7:6a:c2:c4:
                    98:37:c5:5b:5e:d4:f0:c8:0e:3e:05:c7:f3:7c:2f:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:9E:D2:63:42:7A:28:E0:04:2F:99:89:72:35:82:9A:C4:74:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b62f397-b6f6-3947-873e-d605ecfe22e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.116.240.0-184.116.251.255
                IPv6:
                  2001:558:a01e::/48
                  2603:30a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:ad:54:fa:5b:74:c3:c0:38:c9:a6:53:6a:15:09:04:d8:
         e3:5e:e9:22:7b:4b:30:98:a3:df:44:68:61:e4:89:23:4d:61:
         bc:a4:46:46:dd:34:0f:97:f0:8e:2a:9b:28:c9:36:4e:1d:38:
         3c:a1:b0:8c:e3:09:2d:44:cc:da:04:3e:0b:88:82:e2:01:22:
         96:79:20:48:18:fa:2c:bf:79:50:ca:cc:15:77:6b:03:92:43:
         0d:39:b3:f6:91:1c:c7:3d:14:62:1e:63:a3:2d:49:bb:4a:6b:
         7e:3b:c5:f8:76:50:d5:cc:4c:a7:b4:75:23:15:98:0e:e4:7a:
         71:aa:34:e2:a4:06:41:5d:b1:ad:4c:00:2a:cd:bf:dd:0a:af:
         d0:d9:a9:53:a9:fb:e6:9e:66:48:13:4f:96:92:ff:bf:77:84:
         15:db:f2:b8:4b:8b:ec:2e:42:61:85:18:45:24:b1:53:5b:9b:
         4b:b5:f2:78:1b:52:06:3c:bf:4b:8b:44:3b:b4:a9:14:3a:6b:
         65:67:77:1a:e7:0b:c8:95:81:04:5f:08:0f:e7:e0:a6:ce:cc:
         9a:fb:13:21:97:7d:9f:a1:fb:b0:a7:ae:6c:d4:6e:10:33:14:
         59:70:9e:08:28:54:7e:83:b9:d2:4a:1d:d7:df:0a:80:63:31:
         e1:70:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:33:45 2026 by rpki-client