Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e7bc93-6b56-33b0-879e-68314e9967e3.roa
File:                     90e7bc93-6b56-33b0-879e-68314e9967e3.roa (raw, json)
Hash identifier:          rdFI5OhWI/Vs70CneYgsYwNWOvBLqyZq4iY2dOT1I3Y=
Subject key identifier:   A7:F9:96:55:72:70:C2:B9:CC:21:45:BE:80:7B:DA:05:B5:F0:0F:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE863C67C3893F3474F3F507
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e7bc93-6b56-33b0-879e-68314e9967e3.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33652
IP address blocks:        67.161.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:3c:67:c3:89:3f:34:74:f3:f5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=e965d5b0-0958-45ac-999a-8c7480971a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:90:ca:57:e3:34:d0:77:69:d4:51:3a:df:
                    ed:42:a8:f0:9d:d8:38:54:dd:9b:a5:35:a7:1b:83:
                    28:2f:02:92:da:de:ef:9b:ba:62:83:a5:d8:1c:fa:
                    03:59:e3:e3:97:8b:2c:f2:0b:de:9f:59:3b:c6:23:
                    18:dd:f8:d1:dc:92:00:47:12:ba:67:fa:aa:19:3e:
                    08:76:6c:0e:88:fc:34:77:c6:2f:02:dd:c7:d5:ed:
                    3a:b9:fd:af:5c:85:9e:aa:26:2e:2e:8f:24:0f:1d:
                    a0:86:3a:e8:ed:4f:46:03:eb:e5:74:a3:03:2f:25:
                    f3:ff:1e:8e:4e:54:51:5b:69:02:69:65:85:ea:88:
                    f1:43:85:0b:1a:92:c2:68:a8:0a:a0:41:79:af:5a:
                    55:10:06:d3:e2:f6:2e:62:15:cd:1d:52:58:2b:0b:
                    0c:3f:d8:6f:7d:ce:33:92:1a:6d:49:07:54:8d:13:
                    d1:6f:e9:46:8e:e6:9f:f3:bc:2a:0b:22:34:72:82:
                    26:09:02:1f:0d:9f:d4:7e:f4:1d:d0:14:77:bd:d9:
                    88:e3:a9:29:5a:48:75:0e:8c:b2:83:89:f0:85:ea:
                    6f:fd:69:3f:bc:d4:74:95:b3:bb:d1:ea:d3:a5:7b:
                    df:6f:3d:70:19:b9:15:df:e3:98:bb:44:04:e1:81:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:96:55:72:70:C2:B9:CC:21:45:BE:80:7B:DA:05:B5:F0:0F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e7bc93-6b56-33b0-879e-68314e9967e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.161.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:f6:81:d5:c2:a5:94:5d:b4:69:e1:8c:8d:bd:8b:d7:20:
         f1:92:6a:b8:4f:60:cc:e5:d8:d4:b3:22:70:61:bc:29:28:16:
         9b:83:9c:a1:dd:1e:93:40:78:eb:82:9f:b4:c0:12:99:4d:2f:
         f2:f0:76:72:43:a8:6f:19:b0:49:f0:95:7e:49:db:0c:b7:c7:
         91:8d:01:86:c7:f2:c5:9b:7e:cf:2e:47:47:ec:24:a5:bc:66:
         ba:78:1c:f2:ee:78:d7:49:ec:24:ba:76:fb:e8:99:ef:a1:3d:
         b0:eb:96:87:68:3b:0b:91:2b:21:7b:90:f9:96:69:00:c3:b4:
         81:4e:4e:0d:d6:0b:b8:5c:72:4e:91:6f:46:f9:6a:97:31:99:
         97:a0:98:1e:80:c9:f6:e4:1e:0d:0d:ff:97:60:83:10:03:af:
         d9:4b:7d:d3:6c:89:e0:4d:a9:7d:04:c5:ab:44:4f:16:b6:a5:
         9b:26:05:73:c1:3f:61:92:1d:c8:e8:7e:a7:6d:b0:4d:e9:b5:
         56:88:a3:5b:8b:a5:45:da:ed:55:ed:cd:ab:a6:72:d5:86:65:
         9d:ee:fe:01:f2:15:33:e2:8c:05:89:7a:e9:31:3b:44:c0:87:
         53:0d:47:77:e4:d0:10:53:5f:21:3e:04:f3:9b:f3:02:0c:69:
         d0:b4:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:29:19 2026 by rpki-client