Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e50eba6-75ea-3e47-8aa1-3e2d5535df7f.roa
File:                     1e50eba6-75ea-3e47-8aa1-3e2d5535df7f.roa (raw, json)
Hash identifier:          r52ZcrjbUHiGtrpOxJzEinf77h+xQMATzrTCMRxsW20=
Subject key identifier:   B2:33:D9:53:19:DE:DC:D3:0E:5D:74:CD:21:05:41:E3:B0:C7:51:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF74C61DBF16CAF284A2280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e50eba6-75ea-3e47-8aa1-3e2d5535df7f.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        69.253.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:4c:61:db:f1:6c:af:28:4a:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d4bb05e7-95d8-4614-87d0-038985292d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:a8:e4:5f:e7:3d:09:44:b9:90:d3:9e:0c:
                    71:14:fb:49:a9:52:6c:bb:f0:11:12:bd:11:bd:2e:
                    b9:d5:32:46:f1:f4:36:db:f2:72:a9:c1:e5:2b:40:
                    52:b5:15:cd:2f:0f:8f:6f:fc:d5:61:1e:e5:4e:3e:
                    c5:b2:54:cd:a3:16:ae:8d:71:2f:af:89:c7:32:2c:
                    08:fe:6a:da:c8:cb:bc:81:58:a7:10:49:d5:98:5e:
                    5a:1f:ab:87:93:26:bf:c8:04:2b:8a:3f:18:22:4f:
                    6d:bf:b8:62:32:77:1f:b3:c9:99:76:20:87:af:8d:
                    48:75:66:e0:05:7f:69:93:80:45:e3:1d:47:5c:e9:
                    39:a1:15:02:b9:b5:7f:91:6d:7b:50:ef:14:e9:72:
                    80:49:35:52:b6:ec:28:32:18:1c:cb:e7:84:07:20:
                    a9:28:b8:bc:45:1a:9c:3c:54:2b:f4:d6:7d:b7:bf:
                    89:a4:f2:be:e6:95:d8:2c:67:ad:67:6c:8e:97:55:
                    d6:2c:6d:71:e8:95:6f:ce:c6:fc:f0:08:05:d2:63:
                    a3:46:97:88:99:24:cd:9a:6c:ab:63:00:49:19:48:
                    75:6d:a7:03:3d:01:59:d5:23:4e:b7:fa:82:3d:08:
                    07:20:2e:6c:f3:6f:ae:06:59:99:1f:21:22:33:43:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:D9:53:19:DE:DC:D3:0E:5D:74:CD:21:05:41:E3:B0:C7:51:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e50eba6-75ea-3e47-8aa1-3e2d5535df7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:a6:34:0e:e0:99:c6:34:0a:ab:98:7a:61:06:4a:eb:1c:
         eb:ec:07:32:1c:65:c7:31:93:30:d2:d6:28:2b:46:4c:89:0a:
         ac:fe:7b:24:6b:ee:bb:4b:06:d5:f2:fc:67:66:8d:85:ef:37:
         b6:5e:6c:62:91:a7:a7:45:16:e4:0a:d3:e8:22:c7:ff:3d:75:
         61:fe:ca:33:53:e8:03:bf:74:04:95:e6:19:42:b8:5d:ec:44:
         c8:c7:13:7e:e1:d3:bc:11:48:d1:e9:6b:5f:25:bb:21:4f:f5:
         67:6d:14:02:bb:4d:3f:33:42:29:3a:b0:d5:51:c7:db:c7:3a:
         eb:30:94:3f:d8:7a:e0:08:fc:3b:e6:8e:ca:04:0f:3d:46:1f:
         d6:3d:89:b0:0f:da:c4:c0:58:a8:63:62:b5:6e:fb:ad:0a:93:
         5e:28:ed:04:68:ff:51:a8:22:27:3c:d2:cc:bc:23:ef:f1:32:
         32:14:88:cc:20:d9:d0:97:49:8b:c9:d4:a7:36:01:66:1c:57:
         92:84:5f:33:6b:45:71:91:0a:5b:de:d1:c4:1b:56:85:75:18:
         78:61:b4:3e:36:fd:37:aa:f2:6d:dd:2f:f9:97:7a:68:bd:95:
         fe:48:b4:85:c5:18:b3:48:c7:a7:17:ca:f1:3f:09:2d:2b:a1:
         06:d6:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:09:19 2026 by rpki-client