Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f19e038-baa8-33d1-b3b6-4a54834c2b62.roa
File:                     6f19e038-baa8-33d1-b3b6-4a54834c2b62.roa (raw, json)
Hash identifier:          heiTOVn3KI5vUcnsffLkbJ7FpP8xNXvmhr5AbIcw3xo=
Subject key identifier:   6D:9B:5F:68:88:72:77:C2:51:07:7D:21:20:E9:22:F0:C4:BA:76:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7EC7793CE2AB9BF38CC20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f19e038-baa8-33d1-b3b6-4a54834c2b62.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        76.157.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:ec:77:93:ce:2a:b9:bf:38:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=70abcbec-9bca-4d2e-9ccf-9b9200adc224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:1b:fb:a5:2e:85:8f:82:25:61:3f:96:ae:
                    f5:2f:f6:7e:c1:64:9f:da:bb:93:bf:c0:16:41:bd:
                    81:ef:bc:c3:76:ea:c8:24:a2:df:b7:ee:27:8b:c5:
                    46:84:d1:66:f4:a8:e6:88:de:4e:e4:16:3d:61:13:
                    51:b8:06:d0:f2:f2:f0:26:19:e5:82:1c:a0:c2:cc:
                    bf:b0:39:9d:b7:10:c1:90:a5:99:fd:dd:2a:df:86:
                    14:cc:52:d2:16:4e:de:96:5c:88:9f:e3:b2:22:d6:
                    a3:72:eb:5a:e3:39:da:8f:01:a9:b2:06:f9:dc:64:
                    d8:f3:70:50:e5:da:5e:dd:a1:ff:29:0d:92:ef:c4:
                    21:70:14:4c:a4:91:e9:fc:59:83:fc:3c:94:8c:45:
                    be:3a:5d:fe:7b:0e:90:c0:a0:12:49:62:57:d2:5c:
                    1b:25:fe:ac:c5:0d:30:d6:a0:76:7c:b1:9f:fd:14:
                    37:0c:26:94:e2:ba:a0:59:cd:da:be:6c:5d:82:44:
                    48:80:71:c5:8a:d2:59:57:a4:78:a9:17:c9:cd:43:
                    ff:c7:9c:18:e4:19:1c:a9:fa:bf:63:06:3d:be:74:
                    b1:72:c3:9e:be:39:e1:4e:db:30:4a:83:47:8f:ca:
                    ee:ee:82:56:d0:3c:1c:63:6f:04:f8:ba:72:46:ed:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:5F:68:88:72:77:C2:51:07:7D:21:20:E9:22:F0:C4:BA:76:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f19e038-baa8-33d1-b3b6-4a54834c2b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.157.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:66:0a:85:e0:c5:db:0a:63:1a:ad:aa:71:91:54:69:9c:
         ca:c3:a1:52:7e:e8:28:91:05:dc:6e:f2:8b:cb:14:1a:11:7a:
         11:54:ce:b2:09:8b:50:53:a7:fb:78:d7:0a:7c:f0:de:5e:d5:
         de:b7:90:4c:d8:a7:61:55:4c:58:3e:92:d8:c6:6a:e7:68:6a:
         a2:5c:09:ed:24:b8:ef:5e:c9:8a:93:90:f2:43:7b:5a:38:5e:
         92:80:0f:68:b8:0e:d8:82:fc:8d:12:86:9d:3b:7c:89:65:ca:
         60:fa:ec:86:84:47:66:36:16:ad:00:5f:0a:7c:21:a6:c6:5f:
         ab:e8:6a:e3:97:b3:2b:37:05:ee:b7:19:5d:c1:56:ef:bd:16:
         69:93:63:2a:34:bf:8c:2d:32:c6:52:23:18:93:c9:c4:e8:86:
         f0:56:ff:2a:a2:9f:c6:f6:c5:85:74:38:ba:3e:43:42:30:2a:
         d1:35:e2:9e:20:60:0a:1a:c6:79:08:7a:6b:be:15:91:17:9a:
         3f:2f:b7:39:fd:d3:e1:26:8a:42:26:0d:22:43:dc:bf:6e:ba:
         58:14:85:a0:df:9d:36:87:3c:f4:19:6a:70:11:c5:de:a1:35:
         8d:3b:f2:b4:6b:ef:55:33:be:d7:e9:1d:71:17:bd:eb:65:ef:
         a4:a8:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:25:42 2026 by rpki-client