Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee621b6-8ee7-36cb-9cb9-ffb52b43a19f.roa
File:                     3ee621b6-8ee7-36cb-9cb9-ffb52b43a19f.roa (raw, json)
Hash identifier:          8EPjucFdgK73+RtmZOg+9GFf+qb90bxV3Ic0lFF4Ax8=
Subject key identifier:   56:96:56:BA:74:F5:FB:EA:E2:33:FD:B3:59:50:02:D1:A5:2B:C0:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF4DD560958A505AB9D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee621b6-8ee7-36cb-9cb9-ffb52b43a19f.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        76.144.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:4d:d5:60:95:8a:50:5a:b9:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f2fb5022-ebfe-4552-ab58-768a85d0ea2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:44:4a:92:9b:06:06:1e:37:36:56:55:4e:
                    f8:f8:a1:df:1d:12:4e:eb:64:49:65:16:d8:14:99:
                    9c:4a:77:25:5e:12:10:cf:1a:be:b1:df:f1:be:80:
                    1c:2a:e9:91:48:d2:69:ae:be:82:59:44:f4:92:01:
                    a0:a2:a3:43:b9:d8:f5:8c:d7:7a:16:51:e1:58:c7:
                    d6:c8:32:43:e6:7f:fd:c6:79:9a:0d:26:68:a7:ea:
                    4b:02:af:07:27:87:b0:a3:75:04:0e:4f:d6:cd:01:
                    25:62:f5:0f:63:b2:1b:08:05:dd:aa:fd:b9:89:a6:
                    ab:c4:00:0f:6b:a3:56:aa:e3:9c:ad:15:5d:5e:46:
                    05:6b:2f:07:74:32:0d:fc:af:65:85:fc:8d:fb:8f:
                    b3:60:2b:4e:d2:64:a9:c5:05:d5:a4:7e:68:61:92:
                    ee:f6:6c:37:4e:ec:4b:05:72:67:43:36:e6:9d:5d:
                    3f:57:28:2a:ad:8f:0f:1a:3e:cf:ae:f6:8f:0a:8f:
                    fd:a2:a2:75:25:89:ba:4e:0f:37:50:f0:de:26:aa:
                    be:78:ac:e7:95:71:3b:f3:61:e0:21:0f:8c:a2:15:
                    88:e5:13:a2:b5:a4:12:6c:1b:9b:60:6d:e5:41:10:
                    09:14:a3:bd:df:70:d5:62:78:4b:a0:65:a8:63:e0:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:56:BA:74:F5:FB:EA:E2:33:FD:B3:59:50:02:D1:A5:2B:C0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee621b6-8ee7-36cb-9cb9-ffb52b43a19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:25:d4:47:cf:7b:18:c1:c8:88:7c:08:2e:7d:d7:2b:ac:cb:
         76:33:66:9b:7d:69:a3:98:97:3a:16:73:52:b2:4e:e3:78:c2:
         e4:f8:af:88:46:41:e4:5c:a9:0e:00:94:a8:55:14:dd:9c:74:
         1e:78:3d:d6:cb:e4:2d:fa:bf:95:1a:aa:ec:72:8d:a9:7b:48:
         9c:67:00:2f:61:09:e4:dd:4a:41:a2:6f:ab:54:1e:13:cb:09:
         5d:61:27:98:76:ce:e7:75:84:42:0b:f3:aa:96:a8:1e:49:57:
         a4:0a:4a:73:7c:2d:49:da:b1:cd:d2:bc:73:68:43:ce:15:fe:
         9d:af:05:de:e7:12:a0:19:7c:67:77:1d:59:0b:04:6a:b7:0e:
         aa:42:1c:c9:65:e3:2d:5b:65:88:3c:90:ee:a9:7f:c6:ca:e9:
         15:22:a9:e2:a1:af:c6:c6:69:55:98:08:42:93:89:65:2f:8b:
         38:ad:92:a0:f3:aa:05:43:a2:ea:e5:9f:d6:44:44:2c:a0:3a:
         23:8b:18:ba:7f:76:3e:a4:15:9e:33:fc:86:c0:ff:0f:c6:8c:
         cc:a0:71:f4:6b:a8:06:73:a6:42:e4:e7:46:35:cd:a6:61:91:
         61:ff:49:e4:1e:90:94:94:ca:d3:76:59:7c:90:98:4e:4f:ec:
         d8:d7:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:45 2026 by rpki-client