Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1866df6-f10a-34be-89eb-b276e6e8f600.roa
File:                     d1866df6-f10a-34be-89eb-b276e6e8f600.roa (raw, json)
Hash identifier:          rIuwQWP08oq36wDrOX1Uaptfo7/j1Iq1mx6nBW8bgss=
Subject key identifier:   86:B1:06:F5:CC:52:C0:CA:1F:55:E6:28:7B:CE:8E:B6:9C:A9:0C:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF714EEEF7DED871CA55100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1866df6-f10a-34be-89eb-b276e6e8f600.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        71.226.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:14:ee:ef:7d:ed:87:1c:a5:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=efb6dfb4-b0b9-4792-b3fe-bef119b6bacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:c1:1f:4d:b0:ab:6b:ec:a0:36:63:89:a9:
                    c4:af:1a:f0:93:a6:06:95:93:64:f6:6a:55:3b:fd:
                    51:36:d9:1d:5f:c7:08:70:a6:89:ea:45:2b:03:33:
                    52:b4:f7:1d:af:a6:3c:7e:23:14:90:8d:f2:1c:f3:
                    d7:2a:69:91:b5:46:07:12:52:5b:d5:e1:b1:92:66:
                    98:49:fd:98:1a:57:0c:98:98:55:23:f3:bc:23:31:
                    91:2d:3f:ad:88:e4:1c:b0:4e:1f:f5:c5:aa:d8:17:
                    bd:5e:a0:b2:53:d4:15:54:b6:94:ba:87:bc:84:4b:
                    26:a1:bd:0b:1d:5f:53:e4:20:95:77:21:5e:3e:31:
                    53:38:32:18:5d:4d:57:25:ad:35:8a:b1:97:0d:11:
                    c7:08:2c:6c:b9:42:42:a0:80:84:6d:59:59:25:82:
                    14:31:0a:33:e6:3f:16:9d:33:a9:5a:a5:83:67:04:
                    6a:fa:a6:60:d9:ca:21:80:fc:9a:68:b5:9c:68:91:
                    e6:31:85:3f:8e:bd:84:af:de:8b:d1:de:e2:14:5b:
                    9d:18:76:35:24:fa:b3:23:22:38:98:39:6a:04:09:
                    ea:4e:a2:8a:71:bf:6c:d9:c3:3d:25:df:82:3c:e9:
                    79:68:a6:de:42:76:aa:46:03:51:9b:9c:03:ad:9c:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B1:06:F5:CC:52:C0:CA:1F:55:E6:28:7B:CE:8E:B6:9C:A9:0C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1866df6-f10a-34be-89eb-b276e6e8f600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.226.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:30:bb:38:d8:21:3c:f1:ce:34:8b:9c:2b:21:0a:95:01:0b:
         52:be:bc:8b:34:d1:39:03:31:85:09:97:82:c9:ff:31:8c:cd:
         49:5c:2a:a6:34:85:53:7f:14:95:fc:f9:db:ad:22:53:a6:f3:
         0c:b5:09:72:02:28:08:6b:45:5b:03:d3:cc:b0:fc:6d:f8:9b:
         9e:16:e7:9d:20:07:fe:f0:07:23:96:61:9a:80:ba:9c:a8:a9:
         77:cb:37:4f:e8:93:a9:d1:34:0b:17:07:90:33:a7:8a:5c:5f:
         8d:32:58:2f:10:a5:80:0d:45:c2:c8:bf:b6:69:77:94:fc:06:
         85:9f:a9:d8:a7:ea:53:ed:7c:11:8a:bb:26:da:71:db:cd:db:
         94:8d:19:19:bf:62:51:9b:2a:eb:9f:e2:a8:c7:40:a3:77:4f:
         b6:e8:9e:e6:76:eb:54:ed:17:04:24:d4:a1:12:a5:a1:ad:75:
         2f:3f:b6:49:db:e5:c5:92:cd:fb:81:b7:6a:3c:86:c9:c7:2c:
         6f:a0:c7:c9:4a:8a:32:44:e3:e5:8d:48:fd:c9:d9:77:bd:6e:
         b3:95:ec:6c:01:dd:c6:20:3a:fa:89:82:76:f9:74:38:36:08:
         ac:df:a4:ec:41:53:19:94:37:d4:2b:65:10:44:25:ec:73:62:
         aa:76:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:10:21 2026 by rpki-client