Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa
File:                     3f989e52-c25d-36d5-aed0-e9ff98901e71.roa (raw, json)
Hash identifier:          LNj6lVQaFEHRcIUCQjOAZaeddha8nZPoMG1najja7CM=
Subject key identifier:   2D:14:FA:DC:B0:33:A6:2B:00:88:6B:96:43:25:61:30:EB:4D:B8:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F232D5EFA8F2DE5A2AF70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        71.233.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:23:2d:5e:fa:8f:2d:e5:a2:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=e0c0e424-2776-48ad-8b6b-e5f3ba54b51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:1f:bd:4d:8b:b2:e3:9b:46:35:9d:bb:fb:
                    a3:fb:7f:ca:03:6d:c6:e9:33:ac:c0:3c:f1:de:c4:
                    a4:68:8e:ad:7b:44:17:1c:25:3e:22:82:10:90:0f:
                    5b:85:2e:c3:93:92:4d:d0:09:dd:e3:91:c0:33:c2:
                    3c:ea:e3:2e:71:e1:d5:50:95:fd:86:08:c0:9e:49:
                    95:31:1b:5e:8f:38:f4:a7:60:66:29:f3:bb:22:4d:
                    a2:20:68:85:4f:fb:25:18:0a:9a:b2:aa:af:91:2b:
                    c7:29:2c:79:09:49:ca:91:df:59:62:91:d3:b5:b8:
                    e7:68:40:9a:81:07:47:76:63:ac:5d:df:83:1a:69:
                    d6:36:2a:d1:33:29:0c:2a:bb:f6:b4:1a:bd:7a:e8:
                    6b:22:b1:19:86:b5:45:b7:b8:f6:17:a2:76:a2:b0:
                    ff:d0:fe:df:23:07:bc:49:fe:b9:59:30:5c:9c:e9:
                    cc:07:df:b7:95:c6:8e:60:fa:f9:54:66:1a:6c:ae:
                    3c:6e:a0:8c:2b:b1:db:20:ea:5f:a6:ab:1a:21:2e:
                    96:30:ce:2c:6a:ad:b2:c6:3e:a9:d4:14:0d:4e:1a:
                    68:bb:f1:87:72:5c:36:6d:d9:84:36:3c:99:2f:a4:
                    9b:99:02:85:f6:63:e5:5b:82:da:42:95:36:89:7e:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:14:FA:DC:B0:33:A6:2B:00:88:6B:96:43:25:61:30:EB:4D:B8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.233.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:1b:42:73:11:f1:a1:ed:fd:22:7e:90:7d:3d:72:ef:03:
         d3:dc:23:ae:72:cb:c4:72:23:b3:65:8b:2d:0d:df:e4:60:7d:
         92:e2:fc:34:33:e9:b5:1f:65:54:06:b3:1c:8c:71:64:e4:75:
         4e:5c:b0:bf:65:6a:ff:87:05:00:c8:cf:e8:5f:54:f5:d7:f9:
         89:cc:57:f7:ef:f7:2b:2b:1d:45:97:9a:49:dd:b8:6b:87:dd:
         b5:9b:8a:a2:dd:1b:70:a8:dd:15:19:63:62:41:b1:ff:77:5b:
         04:bc:43:e2:7a:6f:5f:28:06:ca:75:1b:bb:27:04:5c:9f:19:
         dc:40:7d:ee:db:c8:a8:68:fc:43:d0:da:66:18:b9:91:12:3c:
         c4:bb:e3:fa:6a:2c:31:0a:05:52:d2:a3:0a:ae:80:c9:36:47:
         80:e7:09:ec:62:a1:77:07:32:48:37:26:71:ca:31:41:cd:7a:
         ef:c4:6c:4a:c7:e2:ad:e3:7d:9e:70:5b:c7:f1:8f:c7:f8:c6:
         bb:2b:8c:ec:d5:03:fb:08:b2:cd:5d:21:65:03:6e:fe:75:f0:
         99:72:52:ec:24:22:6c:50:60:8f:0d:f9:8b:d8:0d:6d:93:89:
         5c:38:5b:f3:e3:3d:ae:ab:eb:a9:01:b1:eb:37:6c:fc:47:6f:
         06:b1:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:05:14 2026 by rpki-client