Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa
File:                     4c70331b-fde5-3f0c-b078-269cf0297e12.roa (raw, json)
Hash identifier:          755sMMlVdnQFJ5EiSqn+HzHbo+HB3VvoPHNn7yprw88=
Subject key identifier:   81:56:B3:52:3E:29:9D:AC:28:C2:90:F5:7A:92:FD:BF:D9:87:49:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8632D7EC9D6A53F04F83C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        71.238.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:2d:7e:c9:d6:a5:3f:04:f8:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f56c14f6-cdeb-48d7-9631-184d93a6bc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:e9:a5:27:eb:bc:0b:96:fd:45:ef:90:58:
                    90:ee:29:d6:c6:6e:d7:02:52:f2:9d:98:42:58:93:
                    d9:cc:94:bf:c9:e9:03:df:0e:d4:b7:dd:0f:ba:a2:
                    86:f2:26:7b:97:c3:e9:42:9c:c3:86:11:d0:10:23:
                    e9:a9:88:1e:c9:e6:05:90:63:1c:bf:4a:1b:40:00:
                    df:a1:f1:49:66:a7:fd:29:3b:aa:44:43:5d:73:9f:
                    af:ed:ea:85:5b:ed:67:c0:37:89:33:b8:19:6d:ab:
                    b5:1d:f3:9d:c2:7a:01:9a:e9:d7:be:43:30:32:90:
                    2a:51:c7:1a:f8:c1:c9:40:76:a0:b7:09:e3:fa:00:
                    ea:51:4e:94:1c:cd:b8:eb:62:7a:ca:34:7e:f6:66:
                    7a:86:92:7b:1d:a1:18:02:85:94:3f:69:3b:6a:29:
                    c2:d0:b2:48:6f:f6:f6:06:f8:62:d4:d9:74:47:39:
                    b9:94:02:2b:e3:2c:22:4c:88:14:59:b1:88:34:bd:
                    bb:e0:10:e7:d4:73:b7:f2:e7:97:16:29:10:ce:f1:
                    49:b9:66:da:8f:c1:c6:7c:d2:2b:5b:05:64:f8:9b:
                    7b:4d:c5:8b:b7:70:51:82:2b:87:c1:db:1e:01:0c:
                    1a:ad:6b:89:94:91:0a:41:94:47:9a:f7:54:95:3e:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:56:B3:52:3E:29:9D:AC:28:C2:90:F5:7A:92:FD:BF:D9:87:49:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:af:78:af:3b:08:15:18:aa:d5:db:09:d6:59:8c:fa:82:1d:
         15:dd:b9:57:3b:f4:8a:8b:40:d2:62:e2:97:45:3a:68:23:b6:
         ec:ab:a5:c5:8a:2e:2b:c5:87:98:ed:3d:bb:ec:aa:1b:15:ff:
         44:ee:db:64:b8:83:fd:3f:d0:88:e4:7f:81:be:14:18:7b:37:
         7e:f9:67:bd:be:bd:ba:2d:68:60:21:5e:84:5c:b5:d8:02:3b:
         23:2b:58:78:fc:aa:26:44:56:ce:9f:9b:cc:bf:81:c1:15:5b:
         bd:f0:50:29:bf:d5:b4:d3:47:5c:ad:12:cc:d6:fc:e1:36:cd:
         8a:3d:8f:87:db:e9:ed:cf:80:f9:33:86:db:bb:02:17:5b:bf:
         d4:55:3f:8e:81:bf:d7:23:31:78:58:aa:c2:0e:2f:ad:1b:e5:
         61:ee:77:b3:75:f1:05:f1:6a:ce:41:06:5a:af:be:59:c7:2d:
         00:94:c2:3b:e1:cf:a2:f6:e8:a6:cf:3c:09:1b:cb:cf:2e:f3:
         25:8a:cb:2d:cf:19:87:b5:1a:29:27:4b:fd:af:04:25:41:ff:
         af:53:80:ab:3f:3f:05:99:3e:17:ee:80:04:c5:60:d5:f7:f4:
         90:0c:c9:ff:c0:7b:33:28:5e:05:c6:3b:62:6d:44:18:bf:b8:
         5a:df:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:50:48 2026 by rpki-client