Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c5005f6-9fe2-3728-aa56-ebcd1fc3d7f3.roa
File:                     1c5005f6-9fe2-3728-aa56-ebcd1fc3d7f3.roa (raw, json)
Hash identifier:          dS+mDV4bo4svE4u9IJdORTh+3Ocyih/4KS/GSSdI7Jw=
Subject key identifier:   B1:FF:F5:5A:8D:B5:50:CB:0D:2A:54:7A:0F:FD:F4:2D:1E:F7:C9:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D7706BBA4497031A6E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c5005f6-9fe2-3728-aa56-ebcd1fc3d7f3.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        67.178.40.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:77:06:bb:a4:49:70:31:a6:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=e150da31-e115-4658-9390-a60e2b09b218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:26:fe:e5:3a:0b:ed:0c:3a:ce:08:7b:bb:
                    b4:40:5d:94:98:4b:6b:0d:15:be:f5:de:96:3d:54:
                    d2:45:fe:51:7d:7f:d2:79:47:20:55:91:77:f7:74:
                    0a:f6:3f:68:57:08:8f:3f:77:74:99:ef:e0:ee:f1:
                    cf:71:d6:7d:ad:65:82:39:b7:a7:15:f4:75:58:3f:
                    61:dd:0c:35:ce:ab:73:94:a8:37:8f:22:69:17:b6:
                    3b:ed:4b:9d:fa:3d:97:e2:07:43:44:ae:e4:a7:ed:
                    49:63:04:8b:00:51:e6:89:c3:90:c4:d5:05:59:d0:
                    67:d5:36:05:f4:54:91:02:a8:1e:9d:cd:a1:b2:73:
                    32:c3:7e:d9:72:cd:3a:38:21:1c:3e:49:69:92:30:
                    98:91:35:df:71:80:5f:ce:6c:7b:40:3c:d1:3b:b3:
                    96:e5:1e:77:f1:4f:bf:b6:4e:b4:b3:3b:82:4e:50:
                    fe:0c:dd:f9:0c:40:6f:59:fd:71:43:31:41:52:00:
                    4c:ff:e0:3b:2f:b6:1b:2a:ae:83:ec:10:8e:b6:23:
                    3c:06:5e:c4:c2:fd:29:9c:c1:b9:e6:22:56:74:aa:
                    c5:5e:ae:e3:38:34:a0:c0:89:77:fd:ae:68:8f:fd:
                    14:78:34:96:35:13:80:4e:0b:e6:93:6d:9d:93:1c:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:F5:5A:8D:B5:50:CB:0D:2A:54:7A:0F:FD:F4:2D:1E:F7:C9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c5005f6-9fe2-3728-aa56-ebcd1fc3d7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.178.40.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:39:1c:37:08:95:a7:04:20:cb:49:6a:83:71:de:93:04:cf:
         55:e5:89:56:d1:75:07:20:54:7b:fc:6d:66:f6:c1:25:9e:8a:
         08:fc:9d:eb:30:32:b0:09:7c:5a:50:58:5c:f6:28:a7:92:5b:
         f2:8e:5c:7b:9e:c5:2a:10:4e:4d:a2:48:62:7a:c8:10:ff:63:
         aa:f2:8d:56:ba:3c:9e:a1:9e:9f:40:47:f6:f7:00:2e:d3:3b:
         95:db:71:93:a3:06:d9:05:95:56:f3:ca:06:ee:ae:93:31:df:
         b4:d3:c6:52:1b:b1:00:09:d9:76:fe:51:6b:8b:03:59:14:c1:
         d5:14:fa:5e:6e:b8:92:05:22:84:2a:16:a7:5f:d4:a8:7f:30:
         64:7a:da:a7:84:95:19:17:da:ef:1e:b0:da:76:5b:7f:13:67:
         44:66:10:d1:9c:2f:26:a3:68:98:a9:a0:72:3b:fc:aa:a2:13:
         f1:48:7b:a7:77:82:d2:29:c6:b6:7b:1a:d3:0b:47:85:38:be:
         ae:00:a7:14:39:9e:1e:40:f1:8d:71:59:76:d0:cc:03:28:8a:
         ea:e6:e9:2c:f8:be:5b:91:4e:46:2d:6a:04:8d:72:d7:6c:31:
         fc:6f:fa:8a:38:2c:44:e6:91:d1:01:00:c8:b8:f5:71:a4:d4:
         cb:c7:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:27:23 2026 by rpki-client