Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfc0493-b09f-3c80-8893-cc9243099a82.roa
File:                     6cfc0493-b09f-3c80-8893-cc9243099a82.roa (raw, json)
Hash identifier:          W+I94JWdt8zce8hAPD9RghMkmAH30O/UtUFpnABRv04=
Subject key identifier:   DF:7A:2B:85:14:B0:BF:1D:76:5C:48:6A:B4:2D:DE:F1:47:43:9F:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF59F9FEC01AEE60F7A4080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfc0493-b09f-3c80-8893-cc9243099a82.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        76.149.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:9f:9f:ec:01:ae:e6:0f:7a:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=8be91685-7d78-4942-89ff-a356a940f174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:06:c8:65:6a:d1:67:ef:1b:05:b2:40:58:
                    df:32:ae:f4:6e:a6:42:99:54:15:e8:5e:93:94:6f:
                    89:21:4d:b8:19:a6:0f:07:0e:1e:8f:e7:c2:7e:0c:
                    53:3b:0f:11:ef:59:c9:ff:b1:34:a4:92:1a:e4:ef:
                    a0:e4:48:2c:20:e3:38:ce:db:e7:2e:0d:fe:3d:0d:
                    6c:0a:05:24:8e:06:42:80:59:fd:bd:96:1f:e8:7f:
                    0c:8a:d0:1b:6d:ae:3a:21:70:55:e8:d5:ad:8b:ff:
                    01:40:ab:16:c3:5c:19:b6:cc:97:df:45:51:dd:9d:
                    40:9d:4a:e4:e7:e5:9a:4c:3c:f8:3a:0d:f6:f7:99:
                    4c:47:7b:83:fa:30:04:1a:86:aa:f1:fc:9d:4e:8a:
                    12:24:f9:b2:fa:3e:8e:da:31:d5:74:b9:6e:02:69:
                    cd:d1:59:f4:d2:f7:62:0b:1c:27:d5:64:68:2d:96:
                    bb:29:95:cd:c3:0e:53:35:e1:c5:f2:77:34:50:54:
                    d6:91:96:36:5e:3e:da:71:93:99:31:3a:47:05:2c:
                    38:d6:3d:82:76:b9:66:c8:77:51:90:2c:c1:7c:9a:
                    e1:1a:30:0b:e7:71:ae:7d:02:53:73:f3:ee:ca:71:
                    08:87:5f:cf:c3:b2:d4:0c:c8:36:a6:e7:47:b1:af:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7A:2B:85:14:B0:BF:1D:76:5C:48:6A:B4:2D:DE:F1:47:43:9F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfc0493-b09f-3c80-8893-cc9243099a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:82:09:48:af:8b:a6:ab:30:74:17:82:b7:c0:bf:85:a3:
         04:d1:4b:ee:98:9b:54:a5:90:50:50:0e:db:37:6f:be:11:b2:
         4f:b2:30:c5:e6:37:10:11:7f:81:0a:62:70:9a:fa:d1:ea:a6:
         10:2d:44:10:6a:4f:c3:f9:e8:eb:31:2a:5d:a9:db:b8:79:32:
         7e:bf:c6:43:3a:d1:c7:89:26:c8:ee:2e:d8:f0:5f:ec:62:14:
         bd:05:6a:a7:93:3f:de:4d:37:6f:99:76:52:f3:29:a6:fd:2e:
         50:fb:a1:cb:82:9d:a9:6a:b0:7a:63:b2:0a:4a:c8:ba:c7:a8:
         d8:ce:59:8d:70:f2:a0:20:45:18:28:ed:e3:b8:b8:58:ed:3a:
         3b:ff:66:58:db:7e:9b:d1:29:aa:85:a2:76:61:a4:35:7f:34:
         06:41:84:b1:e2:48:4c:e8:2e:34:f8:9b:3b:24:60:0d:56:ae:
         5d:84:27:b9:f8:05:55:65:0b:db:0d:55:7a:22:f8:dc:b6:1a:
         57:6b:ee:89:ed:c2:0f:a9:ec:07:87:1d:f7:ec:76:70:f1:5d:
         ac:48:96:fe:76:63:68:31:79:95:a7:f9:7c:d1:a1:0f:72:e5:
         f2:53:be:24:57:36:14:03:75:fa:85:34:36:b8:b9:3a:5a:90:
         53:72:8c:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Z+f7AGu5g96QIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OGJlOTE2ODUtN2Q3OC00OTQyLTg5ZmYtYTM1NmE5NDBmMTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl4GyGVq0WfvGwWyQFjfMq70bqZCmVQV6F6T
lG+JIU24GaYPBw4ej+fCfgxTOw8R71nJ/7E0pJIa5O+g5EgsIOM4ztvnLg3+PQ1s
CgUkjgZCgFn9vZYf6H8MitAbba46IXBV6NWti/8BQKsWw1wZtsyX30VR3Z1AnUrk
5+WaTDz4Og3295lMR3uD+jAEGoaq8fydTooSJPmy+j6O2jHVdLluAmnN0Vn00vdi
Cxwn1WRoLZa7KZXNww5TNeHF8nc0UFTWkZY2Xj7acZOZMTpHBSw41j2CdrlmyHdR
kCzBfJrhGjAL53GufQJTc/PuynEIh1/Pw7LUDMg2pudHsa96ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN96K4UUsL8ddlxIarQt3vFHQ58LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmNmYzA0OTMtYjA5Zi0z
YzgwLTg4OTMtY2M5MjQzMDk5YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEohgglIr4umqzB0F4K3wL+FowTRS+6Ym1SlkFBQDts3b74Rsk+yMMXm
NxARf4EKYnCa+tHqphAtRBBqT8P56OsxKl2p27h5Mn6/xkM60ceJJsjuLtjwX+xi
FL0FaqeTP95NN2+ZdlLzKab9LlD7ocuCnalqsHpjsgpKyLrHqNjOWY1w8qAgRRgo
7eO4uFjtOjv/ZljbfpvRKaqFonZhpDV/NAZBhLHiSEzoLjT4mzskYA1Wrl2EJ7n4
BVVlC9sNVXoi+Ny2Gldr7ontwg+p7AeHHffsdnDxXaxIlv52Y2gxeZWn+XzRoQ9y
5fJTviRXNhQDdfqFNDa4uTpakFNyjOI=
-----END CERTIFICATE-----
Generated at Tue Apr 21 23:27:11 2026 by rpki-client