Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa
File:                     21de3736-994e-3419-b538-02095e47ad02.roa (raw, json)
Hash identifier:          FNrG0MB7RwiXiuhDL69x7XXciWdOV0Vu2qV+qC8CLj4=
Subject key identifier:   8A:AD:94:FD:F9:50:02:54:AA:E5:64:91:3C:14:A0:6C:EA:A4:54:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863699FBAAD900D5A551D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        71.232.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:69:9f:ba:ad:90:0d:5a:55:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=aefb3c15-943b-4bef-94bc-cd5a447cb2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:62:32:6f:04:e8:bd:f9:76:76:91:9f:05:
                    64:df:ac:91:25:d1:f1:b0:af:d1:de:78:f6:5a:a3:
                    f0:58:d4:4d:25:ea:96:39:00:47:df:1d:8f:13:30:
                    a1:ca:62:fe:5e:91:28:6a:ee:98:bf:11:78:1a:d9:
                    f0:f9:12:24:28:3c:d4:a5:d1:e7:ea:19:9e:55:83:
                    7b:63:7b:4f:39:d2:76:d4:2d:f9:bd:6b:cd:24:ff:
                    e9:1d:ba:3e:e9:bd:35:19:54:a2:6f:ca:f0:91:f2:
                    45:f6:85:5f:c1:4b:af:b2:29:c4:85:9d:4c:cf:91:
                    fa:e0:67:05:26:1e:86:a4:b9:91:79:39:92:53:52:
                    88:28:eb:1a:a3:12:24:63:84:68:5c:43:ed:c7:7e:
                    a7:a6:34:a4:d6:66:01:75:e1:8b:36:8f:b8:3d:6a:
                    f9:43:2f:a3:08:ea:2c:3b:a4:50:30:4c:a6:11:15:
                    c6:cf:b6:a7:83:d9:13:ac:6c:e9:21:1b:4d:15:74:
                    1f:c6:78:c1:f8:a9:d8:97:7e:14:7e:98:31:90:e1:
                    e4:cd:57:c2:f4:0c:c5:3e:69:a3:8b:1e:5b:22:81:
                    3a:8e:9e:39:df:c3:66:7c:28:12:d5:71:42:4a:65:
                    bc:36:9d:fb:9e:a6:e7:9e:78:f8:eb:a3:ba:93:d5:
                    ce:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:94:FD:F9:50:02:54:AA:E5:64:91:3C:14:A0:6C:EA:A4:54:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21de3736-994e-3419-b538-02095e47ad02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:ab:b1:d2:88:be:1e:ad:b1:72:4d:b4:f9:8a:11:69:79:85:
         0e:60:d9:96:60:cc:65:f4:b3:d4:7d:80:bc:94:5d:c9:c0:f3:
         6a:7e:62:2b:4c:a7:66:2d:b9:9e:d8:55:2d:87:96:5f:e4:85:
         4d:a6:30:c7:ac:84:7c:d8:08:90:c8:45:9a:60:6b:7d:13:63:
         c2:45:dd:4b:d8:75:e2:7f:a0:97:58:90:73:45:69:db:7f:28:
         68:3f:8a:26:b0:bd:5c:29:38:89:32:e5:4b:d9:48:ec:f6:30:
         9c:11:25:3e:56:b2:54:b8:84:24:25:4f:19:4b:e5:4d:b8:1f:
         cf:fd:1e:8f:f8:97:cc:c6:95:e1:87:7a:a4:0d:29:1b:29:fe:
         7f:5d:ed:93:74:26:97:11:5d:50:fb:6a:4a:24:69:33:a3:8f:
         a3:bb:ed:2f:b3:87:f9:91:07:d1:4e:e5:2d:a1:02:05:27:3a:
         c2:c9:d0:d3:80:a4:1f:d4:78:5f:1f:1b:a1:97:9c:d5:62:12:
         c7:ca:71:55:64:2f:1e:30:c4:17:43:99:87:a4:86:33:c3:d1:
         0c:7b:f2:5c:5e:ef:d9:c0:6f:fb:48:f8:ee:a9:61:2a:6f:0f:
         4e:8c:98:07:57:7d:98:a6:77:87:d7:34:f7:ab:95:1b:97:35:
         50:e3:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:52:06 2026 by rpki-client