Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964ba41e-7972-37c2-908e-5279b41b7593.roa
File:                     964ba41e-7972-37c2-908e-5279b41b7593.roa (raw, json)
Hash identifier:          oxPGk18Vy5ju5J2AnozBh8CJ01EHLU8DJMuo2SdvW1o=
Subject key identifier:   0C:C6:04:CB:C8:5A:8D:4A:F8:DD:59:FA:43:D4:21:53:B1:7C:91:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7DEF48FC21F1BCA3CD280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964ba41e-7972-37c2-908e-5279b41b7593.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        66.31.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:de:f4:8f:c2:1f:1b:ca:3c:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=19267a1f-7e74-40b7-bddf-876480e5a052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cd:50:9f:c3:6c:98:94:87:b6:93:1a:6b:34:
                    18:77:80:64:01:98:43:ca:ee:60:7b:bd:d4:98:23:
                    40:b4:b1:6c:76:e1:90:94:d8:bd:3d:6c:fa:bf:9b:
                    6b:9b:15:4a:32:aa:63:7d:8b:4a:51:d7:6c:47:a3:
                    12:78:44:53:63:53:28:cc:15:0b:6d:fd:cf:63:71:
                    b7:ec:5b:92:fd:90:d8:5a:be:05:ec:c6:9b:6d:29:
                    be:43:59:70:8e:e8:b6:74:c1:02:1d:bf:52:75:b9:
                    c0:09:59:00:2a:2e:86:63:73:29:66:12:3a:4d:24:
                    d3:ea:fc:9f:9f:f0:aa:df:c6:cd:06:bd:a6:d8:7e:
                    39:11:5c:8b:16:0a:5c:51:76:5a:52:17:66:74:04:
                    11:4d:04:b8:c5:a8:2f:37:b7:74:5e:80:56:fa:6c:
                    57:2b:8b:8b:81:78:9d:7e:cb:ae:05:3e:3c:b0:42:
                    94:a8:22:a1:22:85:bc:f2:6a:83:c4:08:ee:a6:3b:
                    bb:77:cd:12:bd:0d:3e:33:74:0a:6c:13:6a:7b:e1:
                    db:51:85:f8:64:bc:ad:18:b8:29:a5:b7:08:59:d4:
                    29:47:da:7c:ec:eb:b3:6c:06:c9:99:9e:a2:76:25:
                    cf:ee:be:53:a9:e6:9b:e9:5c:16:8a:42:fa:f4:4f:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:04:CB:C8:5A:8D:4A:F8:DD:59:FA:43:D4:21:53:B1:7C:91:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964ba41e-7972-37c2-908e-5279b41b7593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.31.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:2b:ba:da:c8:47:de:9b:bf:19:74:3d:fb:59:11:47:cd:
         d4:7b:b9:05:9a:cd:19:ba:15:a6:ab:7a:48:71:ed:54:5e:32:
         40:36:d0:eb:e5:32:16:37:11:d9:0b:3e:5d:d6:8b:95:5a:48:
         73:0e:97:5c:cd:bd:da:59:f1:e1:07:7a:72:81:23:05:a7:1b:
         4e:29:f6:f5:f0:36:dc:72:48:6d:29:a0:a4:82:ba:c0:d3:30:
         02:04:a4:2d:a8:9f:8f:72:a7:51:20:49:80:5e:5d:74:22:d9:
         b6:c8:f9:8f:3d:35:38:96:d8:c4:b0:ea:9b:50:86:03:17:fa:
         2d:cf:74:5e:be:f4:5b:e8:b5:72:93:56:47:49:91:31:b1:7d:
         09:ac:08:fd:ec:d3:62:f8:3a:b1:0f:a2:c1:71:f5:65:c1:11:
         f1:0b:69:bf:eb:3d:58:97:72:37:53:67:00:c7:a2:1f:9d:10:
         a5:ab:e6:65:f2:1e:be:0d:5b:ff:e9:3a:e1:05:f0:c3:30:76:
         67:dc:60:97:ee:4f:d2:0b:3f:57:86:0e:0a:f0:3c:fb:63:6b:
         07:d7:be:21:e2:d6:96:54:82:1d:ad:88:1c:ff:7f:49:ad:e8:
         4b:ce:89:9e:72:67:1e:77:91:1b:b6:b1:c7:e2:04:7d:89:25:
         64:a4:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:32:52 2026 by rpki-client