Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa
File:                     78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa (raw, json)
Hash identifier:          e7ZK5zbHO3Hue1ol1RzkOgi7arK1y9E3RcAeQ7GCLno=
Subject key identifier:   E6:98:43:E9:C9:1F:E6:B1:44:19:19:0C:5E:A8:14:E9:C7:70:65:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C3B08DAAD42C22F2B7A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        71.201.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:3b:08:da:ad:42:c2:2f:2b:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=5e4a381a-0d9e-40f5-89bb-a180c30cc22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:b9:2c:68:5c:f2:7f:74:e5:12:c9:96:9f:
                    54:7e:d9:12:e7:e8:08:41:06:c7:00:c8:c2:d5:03:
                    f7:f1:1a:52:66:78:ab:a9:5a:fb:a2:e1:0c:51:80:
                    4a:db:eb:22:aa:34:94:08:8e:d0:ff:16:cc:eb:16:
                    a1:9c:81:9d:5a:21:65:e0:d2:99:2d:ac:55:f1:24:
                    9d:ce:4a:8a:04:80:d1:71:38:89:61:38:a1:20:30:
                    a4:b4:27:8b:59:fd:d9:0d:64:60:5a:d5:7c:4e:ad:
                    72:ac:84:55:bc:00:35:48:b4:fa:cf:20:71:9d:d6:
                    8c:4f:69:8c:29:bc:5c:61:d2:f3:8a:dd:98:7c:97:
                    e7:c6:49:0e:76:ee:91:9c:e2:a9:32:31:16:ad:34:
                    7c:fc:39:31:c7:af:7e:ab:9c:ff:2e:86:56:af:a8:
                    5c:aa:26:e8:1a:37:3d:11:5e:9b:ea:0e:46:48:df:
                    f6:a6:84:67:a5:f5:e7:23:9c:51:03:66:ac:ac:e5:
                    e9:fa:68:51:86:ed:f5:1f:85:e8:0b:73:88:3a:b4:
                    60:09:3d:22:de:2f:b6:1b:43:83:58:b3:97:64:ce:
                    e7:87:79:74:97:6b:2a:a5:aa:11:56:cd:f5:b3:13:
                    25:4f:e0:00:31:3c:a8:7a:3e:57:1f:f6:de:89:c6:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:43:E9:C9:1F:E6:B1:44:19:19:0C:5E:A8:14:E9:C7:70:65:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78af9870-d025-39c4-a5c5-9759ecfd9d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:06:b9:6d:62:dc:96:9b:a9:96:c9:52:c5:63:57:1b:85:
         7c:e0:77:b9:5b:71:7d:0d:1e:1e:31:f5:ce:46:8a:a9:7f:42:
         da:92:1b:de:4c:1d:9d:1e:f2:ce:f5:d0:fc:81:07:89:4d:94:
         0d:22:6c:16:91:34:8e:67:e1:40:d1:04:1e:eb:e5:bd:cd:fa:
         84:f1:88:4b:26:8f:d4:25:d8:e2:67:9f:95:09:11:79:a7:b7:
         c9:ef:e5:18:6b:dc:e5:73:0c:a0:bd:62:cb:7f:7b:4f:e6:4a:
         8d:9b:c3:5c:0d:da:b9:c8:05:7c:71:9a:14:ac:db:57:15:76:
         fd:e9:e6:6f:57:06:d1:ef:ea:5e:69:39:f0:63:e3:82:e3:e4:
         fc:44:b7:0b:c1:14:08:32:99:b0:5a:50:48:6d:a8:56:b3:a7:
         25:6e:21:11:09:9d:c7:da:8b:0c:9f:20:31:66:cb:19:ea:3a:
         cb:52:09:05:2b:7a:61:5e:9a:6a:16:09:91:c7:9d:24:79:43:
         e1:c0:82:3a:56:c6:7e:a5:6a:cd:30:39:81:ff:2c:5a:74:80:
         34:98:e8:a5:ff:31:c6:38:0a:3f:f2:51:5c:6b:61:63:ec:be:
         ed:ef:c0:b8:b2:55:18:ea:a7:9d:54:34:72:a9:f4:a7:58:14:
         7e:7d:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:16:12 2026 by rpki-client