Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10e85a-0c96-355d-a017-e638758da6c7.roa
File:                     3a10e85a-0c96-355d-a017-e638758da6c7.roa (raw, json)
Hash identifier:          YUh2cOvjCJvXWmQbpHEdDCGeRwTs1WFpqXpGzkmBxbI=
Subject key identifier:   5D:61:B8:F3:A4:FF:9D:9B:94:CA:8B:EC:A6:B0:94:8C:6D:A4:1A:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF75DF55995FC48D1FB980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10e85a-0c96-355d-a017-e638758da6c7.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        76.107.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:75:df:55:99:5f:c4:8d:1f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=28d6f917-a24b-4b8c-b478-3e9a6cf6be2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:de:a3:19:48:86:36:fe:7f:e9:dd:da:36:
                    7a:3a:62:62:e8:65:a2:33:f7:d1:2c:c5:d4:39:4f:
                    24:c2:c4:b1:37:f4:4e:71:ad:0a:e5:1a:70:26:94:
                    20:e8:c3:33:14:bd:36:0e:ab:cb:f0:59:39:47:d8:
                    99:62:1c:d7:d5:08:e1:06:a3:9c:24:23:b3:7e:cb:
                    02:17:4e:ed:e8:79:c9:73:71:fc:27:17:b7:09:ec:
                    9b:e4:52:f4:4a:db:b1:98:6b:ce:61:29:91:6a:73:
                    b2:5f:8a:23:9f:cb:20:9b:d3:ab:c8:0e:b3:a6:ea:
                    38:64:e3:57:02:69:5a:98:93:5b:43:86:1e:26:22:
                    93:68:99:2d:b1:25:94:f3:e6:c4:e0:56:23:51:6b:
                    eb:22:b3:fc:a5:8d:76:9b:f9:f8:41:fa:c0:32:13:
                    bb:79:f2:8b:f0:0e:52:f1:ff:38:6b:c3:a5:a2:8f:
                    6a:9e:5d:7d:08:ee:99:1c:84:67:af:06:fb:ff:01:
                    e0:4b:e2:09:8f:61:f0:53:12:72:22:f7:76:84:4d:
                    a8:f0:db:84:50:5f:d0:79:49:e6:6b:80:14:20:69:
                    7d:9f:41:80:33:f0:f4:18:7c:2f:fc:c9:61:df:bf:
                    62:6a:70:b5:6d:3e:8b:06:0f:6d:c9:e5:b1:99:c2:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:61:B8:F3:A4:FF:9D:9B:94:CA:8B:EC:A6:B0:94:8C:6D:A4:1A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a10e85a-0c96-355d-a017-e638758da6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6c:92:ce:22:63:86:73:d6:de:6f:26:d2:54:0f:33:1e:c6:
         8a:01:90:b4:6d:1f:b3:f1:1e:1c:24:6f:27:c4:ae:d5:81:5b:
         80:90:69:83:7a:f3:9a:fa:06:43:b8:65:70:71:91:3e:da:88:
         31:b5:fb:28:da:dc:16:1b:77:91:55:b5:f4:63:12:de:aa:cc:
         d5:61:06:bc:6f:5a:43:f9:6d:b0:6b:26:48:00:e0:e9:10:a7:
         38:6d:9c:2e:4e:8b:f8:f8:83:20:27:0a:2d:d4:c4:5f:34:32:
         b7:be:b5:c3:40:72:6b:a9:46:4c:37:00:57:31:08:74:8d:b8:
         7e:92:b0:08:f0:de:af:c8:9f:12:c3:7f:98:82:54:97:12:f7:
         6e:eb:ce:89:37:ae:f5:24:c4:48:65:83:74:e5:d3:1a:32:97:
         36:f4:99:3b:d3:b3:0c:d5:3d:49:5f:a1:5a:8d:8a:30:70:17:
         51:af:51:a3:93:9d:a1:e6:1e:42:df:9b:c0:04:76:76:87:6d:
         c9:46:fa:81:c7:70:9e:aa:4c:27:49:aa:36:6f:d4:47:5c:21:
         6e:4b:92:29:8a:80:15:3b:50:0e:ae:cc:aa:4e:d2:29:05:0e:
         4f:f8:d0:bd:f8:58:29:86:82:7e:e1:fa:a1:b7:79:d3:d4:b3:
         70:e4:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:47 2026 by rpki-client