Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa
File:                     3f64edf7-dafc-372e-8fce-91bd2f909203.roa (raw, json)
Hash identifier:          pMoNFczyTtehgOe4RsJdvzI+P+/Y9AumrFB2z2YNBLc=
Subject key identifier:   34:CF:BD:B2:19:02:18:D5:3B:CB:E0:31:9A:0C:F5:89:1C:A9:53:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5A445D429206607ED59C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        174.162.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:a4:45:d4:29:20:66:07:ed:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=4636d1ed-7713-4eec-aea7-92e629b0f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:46:a3:4e:e6:6a:d9:7e:d1:2a:4a:56:43:
                    9e:60:2b:26:32:24:38:97:d6:c3:6c:61:89:f7:a0:
                    95:4b:29:78:1c:81:aa:0c:4e:cf:43:07:66:87:7e:
                    b0:7f:f4:d7:64:dc:03:77:79:44:d1:c0:41:c2:50:
                    24:85:6d:31:d3:a8:1a:90:6f:f8:50:c1:bb:78:18:
                    62:87:11:8f:7e:2a:ee:7d:b5:de:52:08:f5:f7:c8:
                    14:f9:f3:15:e5:e9:27:31:9e:99:ad:1b:93:0b:63:
                    ff:26:9e:9e:08:af:a5:6b:6e:5b:aa:d9:cc:6c:6c:
                    6d:5f:6f:1f:61:c8:b0:53:0c:8f:05:72:c3:aa:b0:
                    76:ee:f6:4e:be:bc:d9:28:2a:db:59:55:eb:75:d1:
                    cb:81:ea:f0:71:fc:74:b6:e0:2e:bc:24:24:69:5d:
                    46:fb:0a:96:24:6d:57:2c:51:56:1f:67:22:73:4b:
                    d4:38:ed:4c:44:f7:95:e2:6e:84:7c:b3:82:af:9e:
                    54:cf:95:70:81:67:b9:52:15:cd:ca:9e:aa:44:7a:
                    e2:20:f6:69:a2:ef:75:80:02:12:95:46:ef:b7:0c:
                    74:f6:40:cc:29:0c:03:76:c2:f1:60:01:3b:77:c4:
                    d1:96:64:ce:36:bf:66:78:6d:36:b8:eb:38:2c:50:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CF:BD:B2:19:02:18:D5:3B:CB:E0:31:9A:0C:F5:89:1C:A9:53:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f64edf7-dafc-372e-8fce-91bd2f909203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c8:c8:af:20:fc:07:f2:fc:44:72:e0:a6:23:a4:a3:c3:a0:
         da:35:6d:a9:c2:67:45:cf:38:f0:bb:c1:d7:70:60:f9:99:d8:
         c9:bd:5c:ba:2f:57:60:88:28:a0:81:0b:df:47:98:cd:8e:4c:
         47:ce:15:b3:e1:00:5f:89:01:83:63:f4:c7:ab:37:a1:f2:12:
         8d:49:c5:36:cb:8c:3c:00:be:dc:58:dc:6c:de:1e:50:c3:fb:
         54:7c:c5:e6:c3:b8:7f:a9:bc:a3:5b:15:21:83:fc:1c:24:29:
         e7:09:cc:60:32:46:f9:32:a5:da:89:e5:06:3b:9b:cb:47:7d:
         a0:50:fb:f4:5f:cb:99:2a:25:98:69:ae:eb:aa:f1:f8:a4:7b:
         c5:6d:bc:3e:3f:8d:28:31:db:20:b7:a5:77:66:41:7b:cf:de:
         3b:1a:c9:4d:62:f4:df:6f:e4:a9:ca:db:cc:31:3e:b4:13:9c:
         29:9d:66:ed:ec:54:86:56:10:2f:10:4a:df:f0:d9:29:14:ec:
         c6:f9:68:a8:d1:15:2e:27:9e:74:42:8c:6e:ae:e1:b8:d8:de:
         bd:07:f6:14:c3:d4:3b:c8:8f:18:0c:59:85:25:36:b3:12:ec:
         62:0a:20:cc:17:4d:9f:96:44:e5:b1:66:c7:f9:3a:37:fc:74:
         57:14:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:21:58 2026 by rpki-client