Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41206781-3e63-3e05-b9a9-399ca9249ce7.roa
File:                     41206781-3e63-3e05-b9a9-399ca9249ce7.roa (raw, json)
Hash identifier:          V13yDow3UqNhdrTWbWRtzlwJn4Q+BCjO6iyjNhTrpTk=
Subject key identifier:   29:87:64:1A:54:28:AF:A5:D7:C3:05:E8:9E:29:1F:7F:67:A2:BC:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6AD91E3638344A77FF700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41206781-3e63-3e05-b9a9-399ca9249ce7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        67.180.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:ad:91:e3:63:83:44:a7:7f:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=bcdc162a-291c-4129-ae5c-60926a7bcc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:d4:f2:d2:db:b8:99:7a:5a:e7:df:9b:c3:
                    7d:5f:0b:99:55:de:fa:10:c9:7b:92:6f:b9:59:78:
                    11:fd:eb:e4:6b:4b:9a:73:ff:bd:2f:3d:eb:2a:74:
                    d8:a7:2c:c3:c3:a3:55:62:fa:d7:5d:f0:6f:cf:80:
                    c6:2f:5a:f9:7b:21:3b:85:07:cf:1f:e4:c6:90:36:
                    df:4d:01:6c:54:cd:18:92:d7:1c:a1:08:a5:0e:49:
                    30:d7:e8:21:a4:12:4c:8b:dd:85:0e:33:c7:2c:d6:
                    db:b6:a6:22:cb:4f:65:ed:8e:5d:a6:c0:0b:42:e7:
                    b4:eb:48:99:23:dd:48:c0:87:17:cf:ee:e1:1f:76:
                    d5:d4:2e:e7:cb:43:e5:57:42:6c:c1:97:a5:9e:d3:
                    b0:a6:0b:e6:e0:d5:c6:7d:6e:94:fa:9c:c6:4c:c7:
                    c5:b0:31:8e:c0:a0:47:1c:81:0e:6e:ee:44:52:08:
                    c2:63:dc:cf:0f:fb:72:9e:e7:fe:5d:ee:7b:90:b1:
                    bb:b1:89:35:1b:e1:0c:0c:c6:aa:7d:d9:b5:33:7c:
                    67:0a:26:a1:de:e3:a0:c5:e4:31:d3:19:73:37:5b:
                    be:68:df:03:46:fa:e2:c9:4c:5c:a0:ba:fb:45:52:
                    0a:fb:36:e7:be:cf:4f:a9:f1:ba:69:c3:6c:ab:25:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:64:1A:54:28:AF:A5:D7:C3:05:E8:9E:29:1F:7F:67:A2:BC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41206781-3e63-3e05-b9a9-399ca9249ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:a1:e3:50:7c:19:c4:0b:2b:fc:91:1d:ba:e3:cd:3a:9a:
         5a:ca:75:c3:d1:3b:f5:d4:97:e4:ce:01:c7:1d:32:c4:20:2c:
         da:86:56:af:f5:5e:ca:d5:f2:8b:fe:07:c8:26:61:4b:cd:49:
         f1:3d:5f:68:c2:25:0a:42:e6:cf:f2:95:15:fd:f8:ee:38:c0:
         7a:aa:b8:d2:e7:73:f2:db:30:30:f8:08:50:93:f1:98:91:7f:
         34:3a:6d:94:97:7d:57:03:63:be:df:44:5d:13:00:ef:a3:a5:
         13:e4:aa:dd:c7:25:f0:65:77:10:6e:72:45:1b:7b:23:3a:c0:
         b8:1d:ad:aa:ff:eb:37:79:a6:d9:05:80:94:2f:48:11:25:e1:
         92:98:c4:a1:3c:3e:4e:8a:10:50:bc:51:2e:b8:cf:06:75:47:
         12:34:6e:c5:a4:8f:74:ad:9e:b7:32:5f:9f:82:1f:6d:e3:6e:
         8a:bb:15:cf:67:c5:95:7e:27:b7:bc:f1:6a:22:bc:bb:39:d2:
         72:15:9c:30:ba:09:d0:59:aa:a2:b1:de:a2:3e:02:b8:d6:6b:
         64:4b:da:f4:9c:81:0d:34:a4:42:22:38:1b:db:22:cc:a8:0a:
         9f:9b:02:1d:35:26:5e:61:75:b1:98:87:39:74:a5:c4:ab:3b:
         9c:ba:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:48:11 2026 by rpki-client