Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aa6af9f-7e6e-3aaa-8a7a-5c33f4ae81ef.roa
File:                     9aa6af9f-7e6e-3aaa-8a7a-5c33f4ae81ef.roa (raw, json)
Hash identifier:          Yv9D8Ba5iLrrNeyIZoHzoSRHoLjg1v2+T80Jz1bEQKc=
Subject key identifier:   02:F5:8A:1C:0D:94:91:7F:E4:C3:52:71:55:9F:70:C4:5F:A2:EF:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F948FFA0834F1D9C48A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aa6af9f-7e6e-3aaa-8a7a-5c33f4ae81ef.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        76.136.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:94:8f:fa:08:34:f1:d9:c4:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7208a70f-b45f-4d03-a8d6-8283e61c2ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:63:bb:db:d0:1f:59:36:2f:0a:5b:11:0a:
                    ec:e0:ff:2d:f4:b3:df:07:81:9a:50:94:88:39:65:
                    aa:00:15:32:3a:d9:0b:2b:ab:de:9d:b2:02:4a:57:
                    18:a1:30:ff:7c:74:37:2a:0b:90:15:90:57:b5:86:
                    bf:13:00:17:e0:ad:e6:dd:fa:3b:b1:bf:01:51:47:
                    72:5b:26:b7:01:2c:b8:3c:ba:40:e1:40:75:04:ea:
                    72:9e:cf:5f:1d:fb:c9:fe:28:77:f8:82:d0:05:78:
                    5f:3b:59:8d:73:e8:08:bc:70:3a:cd:69:db:bd:b1:
                    82:8e:78:e9:d6:f9:49:a4:5c:96:cd:7a:d5:f8:ca:
                    a5:82:42:31:2f:7f:55:0e:fa:6d:7a:6b:d6:2c:23:
                    ad:e9:14:67:2b:c3:77:3f:f0:d2:4c:5f:84:27:75:
                    c7:cd:23:72:db:21:cd:ed:46:d5:b9:15:f5:79:8c:
                    88:dc:73:8d:47:af:8e:fd:e4:03:b3:e5:6c:13:33:
                    26:ce:82:17:5d:c5:43:75:d2:85:b5:fb:ab:c7:0d:
                    99:f6:32:b0:4f:4f:39:49:25:ee:9d:9d:a5:05:c4:
                    74:bf:45:43:12:a7:98:a2:18:8d:98:fd:60:71:41:
                    10:b8:6c:5e:7e:09:ed:19:41:3b:03:e5:51:ae:bb:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:8A:1C:0D:94:91:7F:E4:C3:52:71:55:9F:70:C4:5F:A2:EF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aa6af9f-7e6e-3aaa-8a7a-5c33f4ae81ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.136.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:99:eb:80:81:b0:d2:36:93:ea:38:5e:4c:0f:9f:71:56:92:
         1a:40:5c:78:2a:92:15:7e:f1:53:d4:2b:9a:cc:df:ca:5d:ea:
         fd:14:97:2b:3d:34:66:dc:71:5c:58:ac:d8:0f:77:d7:73:1c:
         05:ff:a0:de:7b:1a:9f:01:3f:40:51:e9:bd:67:df:94:a0:c6:
         55:b0:27:20:31:48:18:07:2f:05:ac:91:29:e6:f4:4c:55:21:
         f8:1c:84:eb:91:17:98:6a:d4:64:30:b3:0c:d0:62:80:60:3b:
         df:8e:c6:09:23:b1:9b:ae:20:39:2d:c2:be:7b:7f:28:f4:e4:
         66:23:e8:03:e8:6d:bc:f7:9e:e3:c6:fa:aa:74:e6:b1:f5:0e:
         41:3c:e9:84:ea:a2:8b:43:ad:12:a4:b7:da:59:b1:7d:6d:46:
         0b:0d:46:01:2e:2f:e1:1d:c5:3a:1c:8a:4a:d4:58:9c:bd:f4:
         4f:10:44:38:8c:52:6a:90:c9:c3:1f:39:73:6c:6f:a2:a5:78:
         c9:52:69:34:78:93:80:de:3d:1b:38:c6:37:36:15:9a:f8:e5:
         c4:89:01:70:32:06:3a:5f:07:5c:d0:11:33:85:4e:18:ff:f0:
         d9:49:0c:b5:e8:bf:13:4f:1c:63:9d:c4:6b:9b:05:56:7c:ff:
         30:c5:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:21:37 2026 by rpki-client