Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59461bbc-2b6e-3be5-89f8-d508777a3c98.roa
File:                     59461bbc-2b6e-3be5-89f8-d508777a3c98.roa (raw, json)
Hash identifier:          e2Uh5/my0y5Q7e8zmeE2pFZQniHY52UVRHV7/e+Gs1I=
Subject key identifier:   50:A1:59:07:A1:02:08:BC:BB:3C:14:2F:58:9D:BE:3B:E2:6E:F9:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF76A80221CC6CCF99AA580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59461bbc-2b6e-3be5-89f8-d508777a3c98.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        76.124.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:6a:80:22:1c:c6:cc:f9:9a:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3ff2e1c3-cd3a-4cd2-898e-fb4ac7918b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:79:1a:c6:d5:4a:a5:81:c9:2b:a7:ef:df:
                    2b:f4:88:db:61:c7:a2:d2:c0:53:d8:5a:13:59:81:
                    25:20:18:02:d6:db:9d:34:03:b3:61:fe:17:b2:d2:
                    f4:3e:09:26:67:9f:60:1c:90:81:62:37:5d:39:f9:
                    81:33:bd:5c:86:f3:0d:e8:2d:39:22:16:7f:00:c2:
                    91:f7:8e:08:84:f4:26:72:28:1e:57:3d:c8:a7:28:
                    3d:a5:45:bf:a8:db:9d:85:32:72:88:c4:56:f9:aa:
                    dd:7b:cf:1a:6a:d2:98:6b:7b:24:b0:5b:3d:78:78:
                    0e:72:2e:62:18:95:1d:07:c7:7b:47:4c:59:50:c6:
                    44:bd:42:80:34:74:0a:81:bc:e9:b4:ae:d8:e9:bb:
                    d8:d5:0f:bb:61:97:21:aa:52:e9:01:38:b9:83:53:
                    97:95:75:1b:eb:49:a4:ec:9c:b7:12:39:cc:c9:30:
                    38:a7:e1:76:fe:1b:07:b5:7a:17:07:08:06:ab:cc:
                    d1:8f:24:5b:3a:a2:06:28:fa:35:8d:05:5a:f6:4c:
                    29:23:be:71:ec:f8:c0:b6:e8:e6:2c:5d:65:33:98:
                    02:17:da:27:7f:37:09:d0:10:93:29:ac:6e:0c:7a:
                    d8:ca:7b:8d:a1:aa:7f:2e:ff:57:13:ad:ab:c1:0e:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:59:07:A1:02:08:BC:BB:3C:14:2F:58:9D:BE:3B:E2:6E:F9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59461bbc-2b6e-3be5-89f8-d508777a3c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:dc:32:c2:81:8f:1c:03:07:f8:77:e3:5f:b7:40:d2:f6:
         98:f0:fc:4b:ec:95:2a:8e:6d:26:37:7f:46:26:e7:1d:9d:4f:
         c6:7e:05:61:79:24:9a:ed:3a:49:8a:fa:61:f0:11:38:7f:89:
         a2:07:b8:c2:93:68:ee:cb:dd:a4:13:12:59:e9:f2:f8:7d:0f:
         62:36:d6:03:2b:60:22:77:76:69:0d:ed:7f:cf:3e:e9:57:f8:
         3c:70:9a:bc:aa:51:6c:2e:4c:a4:79:ab:ac:fd:7a:dc:6d:1d:
         eb:3b:d8:f5:38:e2:cd:7b:dd:90:fe:56:d7:3a:4e:2f:87:ec:
         d0:6b:1f:d0:90:86:6b:ca:38:bb:cb:04:95:63:88:77:f2:9b:
         9f:20:1a:7f:b1:06:d8:74:8a:b1:02:a5:44:ae:c0:6a:f7:72:
         66:25:c1:8b:0c:aa:cb:e2:17:69:ca:8a:45:0b:48:55:2e:8b:
         9f:8b:25:c2:d4:1a:f5:85:68:5a:ba:36:59:ae:21:80:71:58:
         5d:4d:ce:6c:66:e8:4e:bc:55:8c:89:f8:13:cc:21:f6:3f:65:
         be:32:0c:50:60:76:d7:98:4e:ae:49:2f:63:95:7b:e2:a9:67:
         73:63:86:fe:58:f4:b4:cf:67:50:95:5c:11:45:05:2d:0d:5e:
         01:aa:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:24:06 2026 by rpki-client