Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bce6f5d-6197-3432-bc5e-181d913529e3.roa
File:                     9bce6f5d-6197-3432-bc5e-181d913529e3.roa (raw, json)
Hash identifier:          Osjum+a3IwnOELp/sveRHh960pBffAQ+bSXYzUVKkvI=
Subject key identifier:   7B:C9:53:0E:35:60:36:D0:38:77:3E:2D:E7:72:F2:A5:38:10:A1:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF79E937BA5C3F1767FD040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bce6f5d-6197-3432-bc5e-181d913529e3.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        71.57.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:9e:93:7b:a5:c3:f1:76:7f:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=526fed90-ac51-47a9-9ee1-f7d3050c06d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:16:9a:62:12:09:de:72:25:52:2f:80:84:
                    31:f0:84:50:8a:9e:cc:cd:d8:c8:ef:b4:47:20:33:
                    b4:d4:cf:f4:dd:c7:17:f7:43:e0:84:cf:23:76:7b:
                    18:65:e5:94:d5:dc:69:f1:b5:5b:8a:cd:90:a3:9c:
                    00:9d:83:5d:db:e2:e1:60:a3:18:0d:2b:68:c4:d8:
                    ee:00:02:69:66:b5:7e:29:b0:61:a5:6c:3e:a6:b8:
                    4e:68:49:f0:48:de:ca:d1:08:a0:21:b1:96:12:ea:
                    6d:ee:41:d1:b6:74:3e:0b:6c:29:cf:f5:4a:1e:77:
                    97:ab:18:8c:c0:2a:6d:1d:c1:2d:f1:ab:85:b2:b7:
                    5f:53:be:88:c5:32:9c:35:f6:3c:3e:ff:a8:94:d6:
                    70:d0:a5:da:78:71:c1:f7:1d:2f:f9:a6:d7:d2:94:
                    b2:5d:ba:0b:1f:cb:d2:0a:3d:ae:ed:c0:e1:92:f7:
                    0d:37:c2:90:aa:d3:6c:30:24:69:3f:60:67:82:fd:
                    b6:85:b8:34:aa:09:40:b4:02:0d:50:6d:c5:2b:9e:
                    5a:71:69:01:75:d5:8e:7f:be:aa:c6:55:aa:64:e6:
                    b4:17:e2:87:44:da:05:b2:5f:49:84:73:ff:d0:2f:
                    bc:b4:e2:1d:48:d9:a3:e8:ac:ac:df:69:61:f1:c3:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:53:0E:35:60:36:D0:38:77:3E:2D:E7:72:F2:A5:38:10:A1:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bce6f5d-6197-3432-bc5e-181d913529e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:34:aa:09:22:16:48:f6:25:7f:d0:e8:52:ab:5d:29:68:
         78:db:f5:87:2b:d4:7b:39:16:df:b8:f2:0a:d9:86:e2:c1:cf:
         8f:24:95:f9:71:d8:64:02:f8:0c:99:1d:8b:7d:53:97:6e:0f:
         07:34:c6:0b:d9:a5:7d:b4:08:68:96:bd:9c:a7:f1:d3:7c:9e:
         56:50:1e:46:75:a0:d1:f2:94:8f:d6:10:ac:f1:ad:ab:13:02:
         bc:c4:07:25:57:af:43:0c:05:72:aa:39:46:7b:61:9c:67:02:
         24:c8:d7:84:52:84:f6:12:8d:5a:d6:45:49:80:71:7e:e5:6b:
         5d:90:1a:d2:1d:a1:c9:97:d9:5d:b1:bc:14:f0:cb:87:c7:b9:
         65:5a:0d:3b:80:ef:c7:b9:49:09:d9:55:c6:c1:f0:1e:e2:62:
         22:cb:b8:6e:3d:0b:0e:93:1c:11:e8:40:da:02:1c:4e:9a:49:
         20:cf:53:60:38:55:65:e5:5f:a7:ef:86:e4:9f:4b:98:7c:3b:
         27:81:c9:71:81:5a:76:7b:33:99:0f:1f:47:bb:5d:78:8a:10:
         ef:87:70:e6:cc:3d:b6:c7:1f:9e:2f:dd:e5:7f:48:ce:c1:0a:
         4f:76:89:e2:50:ff:4e:00:c6:bc:ba:fc:61:66:b6:25:91:73:
         c3:77:89:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O956Te6XD8XZ/0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NTI2ZmVkOTAtYWM1MS00N2E5LTllZTEtZjdkMzA1MGMwNmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYcWmmISCd5yJVIvgIQx8IRQip7MzdjI77RH
IDO01M/03ccX90PghM8jdnsYZeWU1dxp8bVbis2Qo5wAnYNd2+LhYKMYDStoxNju
AAJpZrV+KbBhpWw+prhOaEnwSN7K0QigIbGWEupt7kHRtnQ+C2wpz/VKHneXqxiM
wCptHcEt8auFsrdfU76IxTKcNfY8Pv+olNZw0KXaeHHB9x0v+abX0pSyXboLH8vS
Cj2u7cDhkvcNN8KQqtNsMCRpP2Bngv22hbg0qglAtAINUG3FK55acWkBddWOf76q
xlWqZOa0F+KHRNoFsl9JhHP/0C+8tOIdSNmj6Kys32lh8cPMTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHvJUw41YDbQOHc+Ledy8qU4EKGPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWJjZTZmNWQtNjE5Ny0z
NDMyLWJjNWUtMTgxZDkxMzUyOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzl4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkPNKoJIhZI9iV/0OhSq10paHjb9Ycr1Hs5Ft+48grZhuLBz48klflx
2GQC+AyZHYt9U5duDwc0xgvZpX20CGiWvZyn8dN8nlZQHkZ1oNHylI/WEKzxrasT
ArzEByVXr0MMBXKqOUZ7YZxnAiTI14RShPYSjVrWRUmAcX7la12QGtIdocmX2V2x
vBTwy4fHuWVaDTuA78e5SQnZVcbB8B7iYiLLuG49Cw6THBHoQNoCHE6aSSDPU2A4
VWXlX6fvhuSfS5h8OyeByXGBWnZ7M5kPH0e7XXiKEO+HcObMPbbHH54v3eV/SM7B
Ck92ieJQ/04Axry6/GFmtiWRc8N3iT4=
-----END CERTIFICATE-----
Generated at Tue Apr 21 23:00:53 2026 by rpki-client