Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a120512-a69f-3e90-94ff-26db2ec30f59.roa
File:                     8a120512-a69f-3e90-94ff-26db2ec30f59.roa (raw, json)
Hash identifier:          adyXODVnJKZQxMA5RkCBI4Hi4ecjhCLWEDaxQ/afBzo=
Subject key identifier:   50:90:4C:A8:13:DA:71:92:EA:EE:4C:98:66:01:3B:82:3B:29:A8:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EDA63BD17E3F311D9E800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a120512-a69f-3e90-94ff-26db2ec30f59.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        174.174.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:da:63:bd:17:e3:f3:11:d9:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=3c697ea7-9a10-4ff5-a27d-e3d847c580a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:d7:18:bc:b2:bb:f3:c2:1e:ae:c7:0c:ce:
                    26:f4:35:47:48:f0:2d:ac:69:d0:28:aa:dc:7e:bf:
                    52:10:78:45:38:0f:d3:1e:f9:4f:ef:cb:e9:a7:4e:
                    b5:32:50:21:5f:fb:94:41:ff:4f:db:fe:15:6d:46:
                    8f:3f:36:e5:bf:e7:a2:bb:ad:9e:2d:b3:02:51:12:
                    7d:3f:30:2e:61:31:27:f3:5f:34:8d:d8:04:35:d9:
                    89:aa:a5:00:8c:99:90:5f:e7:1e:c5:43:37:d6:14:
                    4b:88:e9:58:8c:f4:e7:94:52:82:95:0f:f3:3a:ca:
                    f1:0a:63:a1:17:66:67:d3:c7:11:1e:9f:30:56:5b:
                    54:be:8a:03:cf:92:05:d6:16:52:1d:96:be:86:11:
                    0d:bd:2a:73:55:c0:ef:60:3d:bb:80:44:34:ba:2e:
                    fc:99:e8:c6:ae:da:43:0e:a5:9b:eb:b4:9d:19:8d:
                    19:48:a9:33:1d:53:65:ca:8f:28:88:c8:db:e0:d0:
                    10:42:40:42:92:1a:fe:61:78:0f:ed:c9:f7:20:d0:
                    45:d3:ce:ba:0a:59:14:46:50:44:dc:88:92:2c:56:
                    e4:5e:60:25:7e:9c:72:0b:a1:92:2a:30:7f:a6:aa:
                    d3:a7:11:69:f5:e4:91:f2:b6:18:4b:0f:cb:0f:6d:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:4C:A8:13:DA:71:92:EA:EE:4C:98:66:01:3B:82:3B:29:A8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a120512-a69f-3e90-94ff-26db2ec30f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:21:97:1d:ca:26:01:10:78:fb:44:78:b8:40:5c:47:24:ff:
         14:b2:15:bc:f3:cd:77:6a:a0:37:e2:28:a3:76:1b:6c:0c:b5:
         69:bf:6a:53:eb:da:9b:5c:a9:35:71:ab:8b:a4:f7:fa:e6:93:
         12:ec:f8:92:f1:ee:ee:0c:40:89:fd:49:a2:45:86:42:e5:a8:
         3c:24:3d:3b:0d:7f:e4:62:20:1b:52:28:4f:1f:67:bb:f7:86:
         38:59:30:a8:8c:3e:cd:6e:f0:c7:5f:16:6c:71:42:73:ac:83:
         e5:92:49:4c:7f:c6:55:b2:33:f8:ae:e5:0f:4a:f4:0e:18:84:
         06:17:48:22:c5:57:16:bd:43:a7:55:78:f0:91:45:42:35:d2:
         cf:c7:d1:0c:3d:cc:f5:13:97:17:f9:16:29:1a:d7:0f:26:7a:
         c5:25:cd:48:73:2a:71:b2:3d:61:36:56:76:d6:28:de:7d:97:
         af:eb:10:a8:6f:a3:c9:23:bb:8c:7c:39:88:3e:d2:ca:34:47:
         da:4a:9d:c9:45:f4:a2:81:9b:8a:4a:d4:c4:fd:de:a1:bf:37:
         0e:f0:ed:3e:e3:5d:0b:b1:31:42:f6:34:97:4f:5b:bb:dd:41:
         d2:55:7e:8e:d6:64:56:46:47:60:24:a0:de:6a:b9:cd:1f:7d:
         37:cd:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:00:35 2026 by rpki-client