Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/246babf0-a978-3dc1-8dca-056200037dc7.roa
File:                     246babf0-a978-3dc1-8dca-056200037dc7.roa (raw, json)
Hash identifier:          sE7EEzcKFOin4XuQ9XPs/l1RT8UiQspfaRNiuKQaRN8=
Subject key identifier:   86:AD:66:E4:33:92:B4:CE:D5:95:3C:4A:BC:12:E2:AE:72:EB:45:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF3648ACC92DC817CEA400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/246babf0-a978-3dc1-8dca-056200037dc7.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        71.63.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:36:48:ac:c9:2d:c8:17:ce:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=37629821-0762-451d-8a37-abe5744aa7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:3e:27:76:ca:e7:36:b8:46:06:93:4a:96:
                    13:4e:52:65:55:90:77:4f:2d:d5:14:9b:1c:3b:1f:
                    eb:ec:b3:a1:09:88:0d:21:8f:b0:56:96:7f:8f:86:
                    6a:87:8b:68:e2:fa:bc:87:a8:f2:6a:62:3d:f6:e9:
                    3d:bb:b2:f1:b4:9b:32:0c:8b:cb:42:97:76:fa:b4:
                    23:9a:fd:26:dd:3c:fb:fd:23:66:26:63:04:1b:6e:
                    84:65:54:6d:b8:29:23:7a:a0:f3:01:ad:f7:38:af:
                    a9:67:52:6a:4f:04:e1:ec:ca:3f:bb:67:ab:23:b6:
                    71:84:a7:cf:17:7f:47:5b:15:85:85:b7:80:07:3b:
                    cd:1e:cd:62:c7:93:c8:03:e4:bd:85:30:a4:66:37:
                    9d:a3:32:a2:31:3a:53:5e:ec:ae:60:57:d2:a5:14:
                    26:ee:6d:4b:e9:15:97:5f:bf:4b:17:ad:ff:7c:72:
                    26:30:c6:e9:67:45:89:b6:18:8c:ae:1b:5a:3b:8c:
                    ac:04:eb:61:05:07:3a:82:c1:1d:ba:86:bf:cc:51:
                    3d:e2:be:e6:88:77:07:a2:56:e0:bf:b8:c7:8f:2f:
                    f7:bf:b6:3f:72:bd:bb:d7:c5:c9:92:bf:48:88:65:
                    a6:a2:dd:b8:9d:24:15:5a:85:87:e5:79:72:c8:3c:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AD:66:E4:33:92:B4:CE:D5:95:3C:4A:BC:12:E2:AE:72:EB:45:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/246babf0-a978-3dc1-8dca-056200037dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:f7:98:11:d6:00:a6:e4:ab:11:1c:3a:77:86:9e:b3:29:
         e2:f1:02:0e:a9:4c:c0:23:80:50:0d:61:3c:40:f5:dc:8f:80:
         eb:50:12:40:50:f8:f1:cf:7e:13:61:92:fb:32:cf:0f:c2:37:
         88:37:41:a1:e5:b9:3f:3d:bd:96:25:90:6f:3d:d0:ba:63:b2:
         ff:71:be:82:00:7e:36:c2:fa:9e:11:a9:e8:4e:5a:36:ca:6e:
         f0:b6:58:4a:87:f3:ef:d6:6e:70:f0:82:64:af:8a:68:3f:d7:
         21:dd:d1:0c:11:cc:e2:ac:a2:e6:64:7d:db:98:b0:c6:b8:0c:
         04:d6:b9:c9:7c:3e:28:a5:63:04:34:3a:62:34:ed:d4:83:43:
         d3:c3:00:8e:36:40:bc:fd:76:c4:72:c5:88:10:fc:5e:d9:5e:
         5b:57:c7:18:c8:75:27:3d:67:1a:10:46:d4:d7:16:61:1f:9f:
         62:37:49:7c:67:ea:25:8d:fa:ef:7a:4e:02:54:1f:3b:c2:af:
         4d:9b:29:59:d0:95:c1:bb:df:ab:fc:03:7b:dd:bc:a5:21:81:
         11:0a:3a:54:84:c1:05:a1:6a:2d:1f:4b:37:35:9b:a4:51:82:
         35:cf:59:41:89:f7:6c:82:70:97:d9:51:a6:21:87:d7:5d:a7:
         ef:4a:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:06:59 2026 by rpki-client