Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa
File:                     69085952-09df-38b1-9125-6d83914a97da.roa (raw, json)
Hash identifier:          hxF26fJ1vpVISSGoItm4+8MWisvCrUaMnPLO/U2MdRg=
Subject key identifier:   23:8E:CF:34:52:78:89:F4:58:CD:22:75:82:6B:D2:9B:2F:1E:A0:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3601208794066886D6ED4E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        174.170.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:20:87:94:06:68:86:d6:ed:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=989f20b5-8f2f-4f5f-b8c0-373e7786f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:26:78:97:2d:de:90:64:a3:96:06:39:81:
                    a7:19:f8:41:6b:99:05:a0:4a:d5:84:e5:7a:c9:95:
                    a0:46:fe:ce:82:08:17:12:dc:fd:22:3e:ae:41:a4:
                    e2:52:87:63:38:7b:97:1d:75:ad:18:70:da:1a:f1:
                    44:d7:2d:55:49:1f:3c:47:c7:2c:c3:c6:c2:8f:01:
                    20:3a:26:be:17:19:8b:d5:e4:82:95:3e:6e:3c:b6:
                    4a:e4:b2:d9:af:90:a9:86:7b:6c:c6:25:89:3f:10:
                    5f:55:e5:4d:6a:21:90:52:b8:d4:38:38:a4:a9:90:
                    8d:40:6e:15:14:05:85:52:7f:a8:c0:1c:de:ef:50:
                    ae:c4:cf:d9:02:d4:58:a4:0c:ed:9f:c8:e6:d9:0f:
                    6e:c7:79:49:5c:db:9e:74:08:8c:45:01:26:ac:7f:
                    ff:d2:41:82:1a:e8:15:2c:e1:2c:35:ee:af:40:f1:
                    b7:89:f1:0d:f7:dd:2c:f8:3a:2a:ac:c8:ca:11:62:
                    ce:ae:86:33:f6:ca:77:cf:6b:f7:ca:b2:5e:88:fd:
                    39:8d:b0:b7:da:42:32:2d:83:5b:a2:41:a1:31:27:
                    04:9d:94:dd:3a:85:7f:28:82:1d:8d:37:52:cb:3c:
                    f6:d4:2e:ab:fa:64:62:83:d9:9c:37:5a:4c:04:ca:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:CF:34:52:78:89:F4:58:CD:22:75:82:6B:D2:9B:2F:1E:A0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:84:26:c0:73:c5:ca:79:8c:0e:df:8e:ad:c3:fd:c2:13:
         0a:84:88:3e:b4:db:ee:9d:2a:71:6b:d5:ac:6b:48:77:de:e4:
         82:d1:3e:4c:9a:d9:59:d5:d5:59:15:d3:d6:cf:7e:dc:29:7a:
         1e:4f:33:98:b5:ff:3c:dc:df:73:63:12:40:d5:07:07:97:65:
         40:92:d5:93:f8:a4:ce:06:f8:24:4e:c1:b1:69:b4:33:ac:e4:
         29:05:55:3b:72:28:43:8c:b6:a9:d5:62:2a:48:b3:9e:4d:50:
         f7:17:a4:93:49:0d:f1:c1:a0:4c:76:82:14:60:ea:ad:24:81:
         eb:82:ff:1d:0a:b3:62:4a:3d:38:9d:59:ce:24:2d:35:34:b7:
         d1:38:20:df:40:0c:6b:f5:0b:b1:e7:f2:57:c3:20:e9:97:84:
         e1:52:55:b9:1b:32:e7:89:5a:7c:65:6f:fb:01:aa:97:96:a3:
         31:7e:22:fe:7f:b4:3c:2c:c7:e6:6a:4e:de:9c:2f:eb:4e:6f:
         6b:51:6c:81:91:52:17:14:83:07:be:2c:4e:2e:84:97:c0:16:
         b3:17:49:31:63:18:6a:98:90:05:6e:ba:a7:8f:38:56:af:7f:
         23:88:eb:55:85:0e:06:6f:33:03:0a:49:f4:c3:c5:9c:07:58:
         be:d2:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:07 2026 by rpki-client