Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa
File:                     3256157f-1b23-35d4-b0b5-2a933a66da0c.roa (raw, json)
Hash identifier:          IuxofZYNmgXGmkXgzPXiE+84hY71KK8GilV/ymUGAys=
Subject key identifier:   7B:2E:5F:67:C2:8F:07:A9:57:FF:9F:73:02:43:9A:FF:7F:C5:3D:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B298E25D28FB1D7452280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        76.141.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:29:8e:25:d2:8f:b1:d7:45:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7f6192b6-c9b4-4142-8f69-6451a4bf6064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:c5:a1:8e:27:0d:aa:3e:41:8f:c6:64:d1:
                    65:81:0c:35:54:27:63:7b:57:54:7f:b0:1e:07:f3:
                    c3:72:c4:6e:32:f6:f6:d2:3f:de:95:01:04:6c:17:
                    17:c3:cd:b0:b6:c8:8c:d8:06:62:ba:bd:5c:5b:62:
                    1c:e3:16:55:e7:bf:96:37:73:76:49:c0:9d:8d:f9:
                    cb:6e:ab:ce:fb:0f:62:d0:0e:6a:9c:7d:f1:3d:08:
                    2b:11:30:ba:e3:df:79:1e:1a:73:45:ef:68:5b:83:
                    83:55:08:64:96:f0:ff:ae:80:9e:9e:e4:52:7b:32:
                    b1:b9:30:a9:e7:31:18:bd:e4:22:7d:58:ae:02:28:
                    86:92:b5:58:50:41:16:4d:7d:0e:04:e6:ad:c1:e8:
                    de:f4:4a:30:c6:04:eb:71:80:67:1c:c3:e1:58:d8:
                    1a:7c:92:0f:71:ef:ba:d0:cb:6a:05:ef:2d:ef:0f:
                    66:c4:3e:cc:be:1b:61:b6:64:e0:97:97:79:24:1c:
                    49:db:93:f6:c6:7b:cc:72:ce:79:d0:c6:a3:a1:95:
                    99:a8:b3:e7:b9:3d:cd:d3:5b:13:e6:9e:cb:88:f2:
                    06:9d:ba:f2:41:49:e2:31:1e:7a:01:32:d1:61:19:
                    ef:9d:c3:2d:5f:f9:54:79:27:c8:cc:7c:28:8d:65:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:5F:67:C2:8F:07:A9:57:FF:9F:73:02:43:9A:FF:7F:C5:3D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:42:f3:12:3a:d8:4b:98:83:f5:23:c8:44:30:c3:87:5b:
         09:76:93:35:a9:52:7d:37:56:47:83:1c:2f:11:07:75:9b:7e:
         05:b3:9c:b2:ac:c5:b2:58:b5:7b:05:d5:32:46:e0:57:8a:f6:
         e4:5a:61:2f:0b:c9:a4:a8:c0:84:7a:af:ff:7d:e2:45:e0:19:
         24:fd:60:5b:2a:26:66:36:8d:19:f0:08:b4:d1:c9:14:be:43:
         21:4f:58:26:d6:5f:e0:29:05:38:23:18:ef:d8:a5:40:cf:dc:
         7c:43:7b:b2:56:22:dd:0e:91:d0:d9:2b:22:ae:da:7e:8e:71:
         a9:44:58:cb:bb:6f:99:c9:49:f5:b4:bc:87:52:5c:5b:0a:d2:
         c6:86:91:ce:e8:42:72:f2:c9:c9:64:70:ce:86:0f:e6:0b:e0:
         de:a4:8c:50:48:5b:56:f6:52:7a:6f:07:5a:64:08:05:08:fb:
         41:ec:92:b0:d7:f8:66:56:5b:67:27:72:9f:a2:1c:25:d6:43:
         86:0e:77:cc:cd:29:35:79:98:10:17:b8:a5:b6:0c:6c:ca:ba:
         2b:7c:33:cb:16:8d:51:32:bb:71:79:f9:c0:49:67:4e:6e:58:
         39:74:5f:04:c1:a7:b6:1c:f3:5b:02:c0:5e:b0:65:d3:a7:3e:
         97:eb:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:15:10 2026 by rpki-client