Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35566121-8e3d-354a-8f43-bb7a23fbb274.roa
File:                     35566121-8e3d-354a-8f43-bb7a23fbb274.roa (raw, json)
Hash identifier:          lA0j51LEPusYGO3VwwqAD8EWMc8FgpQl9VhU514muUI=
Subject key identifier:   9A:BF:57:E4:F7:F9:BF:B7:9D:7D:06:78:A9:FC:0B:17:51:60:2F:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863C084D7F3ECCAD4E45080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35566121-8e3d-354a-8f43-bb7a23fbb274.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        76.28.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:c0:84:d7:f3:ec:ca:d4:e4:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a05e7103-9477-40bd-9e0b-2a0d3c9fe400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:0f:95:0c:4d:89:f7:4f:34:cf:5b:e7:ae:
                    58:d0:2c:8f:27:cb:5c:4c:47:3a:eb:f2:7c:eb:bf:
                    9b:2d:fb:81:ac:86:03:68:4b:59:ad:a3:79:d5:42:
                    6d:a5:92:d7:a2:95:12:50:7c:51:84:f7:de:77:dd:
                    f8:52:be:64:7d:80:8f:f7:6b:89:1b:cd:20:fa:4c:
                    5b:69:6f:0a:af:e4:cc:f7:86:22:12:ec:4a:10:d1:
                    79:6b:ed:6f:ef:5a:27:f7:6c:49:60:e3:f3:10:cd:
                    53:da:b0:7d:9b:b4:d5:e5:cd:20:e5:5b:2d:f9:e1:
                    9d:27:0b:6e:64:94:96:97:a8:4a:e7:b6:8e:cc:16:
                    a1:3b:95:52:0f:cc:89:d3:be:21:0b:39:4f:62:eb:
                    64:27:96:65:1e:30:f8:cc:20:dd:9d:53:f5:be:9b:
                    3e:7d:2d:47:88:12:c0:63:90:fe:4a:45:37:92:d7:
                    19:56:7c:36:a6:68:07:f9:3e:54:76:8e:0a:76:18:
                    a1:0d:11:c3:25:be:7d:89:03:a8:4b:6f:a9:9a:c2:
                    ea:60:90:9a:21:1f:f8:67:30:79:5c:ab:0d:cf:df:
                    cb:e5:44:4e:36:57:1e:9a:57:0f:8f:86:ae:c8:3d:
                    7e:05:3a:a4:39:da:dd:05:51:6b:98:7d:06:5f:3f:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:57:E4:F7:F9:BF:B7:9D:7D:06:78:A9:FC:0B:17:51:60:2F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35566121-8e3d-354a-8f43-bb7a23fbb274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:70:ef:4d:47:9b:4f:fb:30:11:1b:b9:58:ae:18:11:d1:c8:
         71:22:8c:ac:5f:e4:80:e3:96:26:3c:ca:14:21:fa:81:e9:d9:
         71:04:28:83:dd:85:1f:64:2a:76:46:10:ce:09:b9:0c:8e:67:
         b3:7c:6c:85:52:0a:04:ce:07:4b:b6:ff:c6:08:87:16:49:96:
         d7:80:80:f3:ed:93:d4:9b:0b:95:e2:e2:5a:8c:85:f5:da:26:
         c8:b3:cb:cb:6d:d8:93:cd:6e:ab:ba:fe:8a:f6:43:7b:ca:70:
         fb:56:79:fe:b9:98:20:39:f1:5d:ce:8a:c7:38:40:26:e6:ba:
         4f:7d:32:3d:1f:94:78:86:89:39:e5:d8:98:24:33:70:15:65:
         57:ca:f5:d8:09:d3:e7:95:91:5e:53:c8:68:89:5b:18:c5:92:
         54:ac:a7:9a:b2:b7:81:1a:15:a3:d7:73:a2:27:14:64:c1:99:
         f5:25:02:c3:1e:94:6b:b0:7b:ff:c6:b4:71:64:b1:1c:74:db:
         51:bf:ee:f9:b6:a8:0d:b9:72:06:88:67:eb:8c:c9:77:20:dc:
         b3:19:93:fd:cb:2a:b4:4b:b7:43:15:c5:f3:20:9b:05:98:c3:
         b5:2a:35:74:4d:45:1c:22:98:45:06:b3:b3:88:6a:9e:65:d4:
         98:42:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:53:09 2026 by rpki-client