Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e58fc92-e1b2-391d-ac6c-060b934212cf.roa
File:                     8e58fc92-e1b2-391d-ac6c-060b934212cf.roa (raw, json)
Hash identifier:          FO5wkWgHxxH5mx5qG78TI1BafI5VkIMtsnJiDfZHnAk=
Subject key identifier:   F1:99:6B:8B:71:CF:5F:C7:94:6B:9C:8A:31:E2:6C:0A:E9:69:F5:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360144E59323ABEA87F2AC10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e58fc92-e1b2-391d-ac6c-060b934212cf.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        76.142.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:44:e5:93:23:ab:ea:87:f2:ac:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=0dfbfcc9-c421-40e7-a3c5-078a6e56cada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:d5:a8:20:f5:f8:01:91:e3:1e:a3:fd:98:
                    74:06:e3:ed:91:99:ad:66:8d:61:e0:a2:6c:56:93:
                    6b:e9:5d:6f:2b:02:66:8b:7c:4c:84:77:32:c7:d0:
                    90:a3:b5:29:2a:64:48:f4:51:88:39:54:c2:53:ee:
                    6f:8c:62:93:d1:97:41:dd:9e:0f:2c:b6:d1:6a:6a:
                    8e:62:61:01:eb:70:9f:0e:8a:ca:09:20:cb:1f:ef:
                    21:71:74:16:5c:69:c6:cd:1f:99:fe:3a:cd:8c:ea:
                    92:f5:1f:26:33:0d:3d:89:ec:62:37:eb:16:d8:c1:
                    09:16:ba:d6:5a:6e:6f:e4:93:fc:be:ab:75:79:95:
                    26:0d:c3:53:7d:ee:78:41:c0:0f:e5:d2:1d:01:6f:
                    ad:79:09:e6:b3:7a:0f:88:01:67:ad:16:f1:66:30:
                    df:1c:f9:a9:79:46:12:d1:5e:27:f6:d5:a4:e0:d5:
                    ad:20:a3:06:f6:2a:6a:68:a6:3e:26:64:56:51:84:
                    7e:19:38:66:89:fa:85:9b:bd:f2:7b:b8:2f:81:5d:
                    35:c4:58:35:35:56:53:90:c6:a2:76:e4:34:aa:67:
                    14:4e:03:03:f6:03:d3:b5:f4:9c:91:d7:ff:07:14:
                    9e:71:37:88:69:4b:82:6c:dc:1c:40:79:4f:da:ff:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:99:6B:8B:71:CF:5F:C7:94:6B:9C:8A:31:E2:6C:0A:E9:69:F5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e58fc92-e1b2-391d-ac6c-060b934212cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:51:90:51:c7:07:4d:0b:5d:2d:73:49:3a:71:76:0f:61:
         71:61:4f:4d:44:57:ed:ed:ef:d8:d7:66:c1:c6:96:50:81:c0:
         e1:22:b0:7d:5b:fa:f3:7f:da:e8:81:2a:e6:cc:57:32:16:71:
         1b:02:df:14:a6:e7:c6:93:a6:d3:f9:4e:a3:84:9b:7e:f5:ef:
         a4:f6:31:0c:d0:b6:a0:14:58:e5:cb:76:33:c3:ac:57:15:8f:
         28:2a:3b:bb:f9:20:1b:03:ec:7d:05:15:43:73:f4:1b:22:81:
         e6:ef:7e:45:fd:0e:f0:aa:69:46:f8:7d:92:bc:b2:e7:02:96:
         4e:6a:a1:cb:fe:43:33:c3:87:43:09:0d:17:cd:46:63:b7:e8:
         a8:03:48:d1:cd:76:32:1e:37:6a:33:21:40:86:04:98:05:38:
         30:bf:e5:1f:6c:c7:02:42:0e:d5:53:10:ed:e0:33:01:f3:7d:
         cb:7e:b2:85:e0:ac:b6:80:b8:54:1d:7e:ae:93:2f:7a:38:40:
         bd:03:4b:c4:91:8e:31:02:e2:f6:77:9d:1b:58:90:96:10:be:
         1b:33:0e:6f:1e:68:85:a8:9e:07:d0:f3:04:9f:94:39:4b:78:
         fd:91:26:97:08:3e:90:38:aa:76:2c:d1:d8:76:1c:e9:c1:2b:
         cf:e0:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:32:08 2026 by rpki-client