Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99cf0f26-be4d-3477-956c-c6310af04290.roa
File:                     99cf0f26-be4d-3477-956c-c6310af04290.roa (raw, json)
Hash identifier:          orEYOqY2uqPWK6z9mhZBpwxVpRl/jlYkJoKrsC5ttlI=
Subject key identifier:   2A:76:92:2C:93:AB:38:58:5E:6E:74:25:30:90:90:CB:1C:C0:B2:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF90CCC157E529863EBAF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99cf0f26-be4d-3477-956c-c6310af04290.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        76.102.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:0c:cc:15:7e:52:98:63:eb:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f023f81b-f5cc-44e3-a290-6168604f8b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:12:f3:87:ea:2c:20:81:15:fb:dd:a1:4f:
                    2d:d5:34:cd:71:75:e9:e1:72:03:c2:f1:e2:e3:2c:
                    d9:4d:39:19:b9:94:6a:cd:de:25:eb:1f:0e:97:51:
                    0e:08:7b:64:3a:e5:ea:cc:a6:ac:4d:f1:ac:59:3c:
                    2c:63:30:21:b5:55:f9:f6:c3:91:5e:63:b2:8c:8b:
                    a4:cf:fb:d0:8d:9f:fa:53:82:d3:cc:fb:b5:7e:e5:
                    0f:32:f4:62:6f:50:1d:3c:61:e6:0c:64:75:13:c7:
                    16:a9:89:84:23:a8:09:30:46:0d:56:f5:bc:fd:aa:
                    53:fd:75:30:b5:bf:fa:bb:8c:97:5a:d0:45:11:37:
                    73:40:0a:c7:20:61:b1:8b:31:16:d9:14:77:91:15:
                    55:92:ec:b9:f1:aa:7d:ea:97:66:00:af:7c:89:e1:
                    cf:07:63:ac:75:e7:65:15:e9:c6:cf:40:b8:af:7b:
                    f1:72:b2:5f:f6:b4:21:38:83:6e:e6:de:5c:17:16:
                    2d:d6:d6:9d:43:20:59:07:9a:24:e0:34:66:95:07:
                    49:0d:4d:d5:73:56:75:0b:45:ab:92:b6:84:0c:8e:
                    55:a4:d8:e0:39:53:37:87:b7:04:8f:b5:3f:5f:e7:
                    01:92:65:0b:8e:b8:e4:a2:4d:4a:bb:84:78:07:01:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:76:92:2C:93:AB:38:58:5E:6E:74:25:30:90:90:CB:1C:C0:B2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99cf0f26-be4d-3477-956c-c6310af04290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:82:d8:73:49:82:d1:d8:ba:86:56:ca:11:85:16:b4:9a:af:
         8a:cd:b7:d9:11:7b:72:bc:7a:d2:52:cc:a4:f8:10:a8:e4:bb:
         d9:26:76:78:b8:bc:35:f0:16:62:39:e2:b0:39:d7:78:52:a2:
         1f:22:09:5d:e7:0a:f3:3c:a8:01:29:ee:0e:16:6e:e3:94:97:
         20:30:2b:55:76:e9:ec:b4:52:22:d9:7c:a6:d5:9d:45:ca:65:
         6c:28:46:16:64:c4:24:a3:69:31:27:81:8d:15:a1:92:af:b6:
         ec:7e:91:8e:b8:7e:c2:89:a4:69:15:26:be:80:65:16:a0:ea:
         79:e6:5b:39:3f:96:1c:5b:04:d7:d4:38:b2:fa:5f:93:86:d7:
         cf:08:70:14:8b:8f:d4:92:4d:b4:e2:ee:5e:a8:57:16:16:d2:
         aa:9b:28:55:bc:79:dd:50:4e:02:0e:23:7a:03:20:c1:c7:49:
         43:09:70:1e:8f:f9:3d:31:f2:d0:73:cd:b5:30:ff:cd:a7:6a:
         6c:c0:05:e3:95:a3:4b:00:81:97:ae:cc:e2:54:9d:77:fd:7e:
         e6:b6:96:14:f1:e8:56:25:95:25:33:8f:ac:fd:b1:21:60:43:
         ae:11:95:18:6a:36:eb:fd:54:fe:87:18:66:5b:6c:eb:99:0d:
         22:54:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:02:54 2026 by rpki-client