Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa
File:                     d57f2545-a413-39ab-ba93-7867b3dff4c2.roa (raw, json)
Hash identifier:          erRJ8Rv9Y2D8vlYVVkpFOXNFpfSkR9gtunJFMz5kBdU=
Subject key identifier:   FE:56:57:AA:80:E4:21:39:C5:3A:DE:C0:2A:9D:CD:1E:3C:4C:14:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFC7E6396515960DF1D780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        174.162.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:c7:e6:39:65:15:96:0d:f1:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=50638292-47e2-44f1-805a-1cb597773ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:5c:35:93:6f:a5:4c:6f:29:35:77:d0:a3:
                    08:df:70:0a:43:be:47:c4:74:38:47:20:83:b2:8d:
                    83:9c:20:26:48:87:fb:eb:3a:fc:35:4d:52:0c:30:
                    f6:0c:3d:67:60:d3:9b:30:0d:fc:68:ee:13:cd:3e:
                    83:fb:c6:68:9a:ef:57:03:64:1f:d8:9a:a0:43:89:
                    cf:54:35:6e:9e:50:7f:66:df:fc:5c:9c:d2:9a:2a:
                    6b:2d:78:d2:f5:81:0a:17:bd:99:6d:fb:50:e3:76:
                    74:2e:92:4f:c6:1a:d0:36:44:03:33:a8:8e:13:ed:
                    b7:31:ef:85:6d:6a:e9:d9:12:e7:68:05:08:4c:09:
                    be:8e:0d:d4:09:44:b0:f4:fc:67:e1:43:88:12:0f:
                    29:e8:21:90:b4:3f:07:09:7e:ef:c7:f5:20:4d:29:
                    df:9e:ca:6f:2f:1a:39:78:21:f2:97:c6:4f:41:9f:
                    55:f2:47:16:76:a8:4f:bd:52:a6:b5:63:53:99:d6:
                    00:4e:98:19:39:be:39:1a:95:89:34:18:6b:54:4a:
                    d4:6b:b8:ce:47:27:06:4e:e8:28:8c:c5:2b:fb:eb:
                    29:be:ac:b6:d1:d2:00:37:d3:d5:7c:cb:60:3a:71:
                    c2:fa:5f:cd:3b:0d:14:d6:88:06:b5:21:93:e3:1a:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:57:AA:80:E4:21:39:C5:3A:DE:C0:2A:9D:CD:1E:3C:4C:14:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:03:ae:df:ed:06:bb:ab:a4:7d:dd:8d:55:1b:54:01:53:
         4b:78:55:d2:7f:12:f3:dc:17:7b:50:1a:1c:e6:46:7f:b0:bc:
         ad:ad:5a:84:bd:5a:22:2e:7e:c0:39:c9:b9:e1:17:fb:e8:1d:
         2d:f3:5f:3d:0f:57:fe:91:d9:4d:7f:ba:f9:88:bf:6f:97:11:
         06:71:b2:0a:80:1e:be:d5:ae:89:91:b2:68:33:9e:ad:da:1b:
         87:02:57:a4:07:83:77:f9:37:d5:90:51:3a:e1:a5:09:76:f0:
         3c:84:16:15:1b:22:83:fb:bb:57:20:52:26:58:b6:cc:71:17:
         5b:37:23:16:28:a2:b1:11:18:f3:44:3a:aa:2e:6d:62:f5:f2:
         da:dc:43:3d:c6:77:e6:fb:32:89:be:ff:14:91:28:75:de:1c:
         27:da:6d:21:22:37:cf:de:54:c8:9d:f3:13:55:1e:a9:0a:81:
         2e:68:a2:9c:80:ee:4c:27:6e:11:c3:0b:f2:2d:b0:cc:82:d8:
         27:1e:7f:cf:a5:da:0f:be:96:78:bf:ec:4e:58:c7:2a:54:e7:
         36:aa:27:9c:c0:b1:f7:cb:67:fa:39:67:1c:d8:89:cb:42:3c:
         df:24:5b:21:b7:79:09:4b:26:e2:cb:b0:a4:e3:19:70:c2:9c:
         35:14:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:26:49 2026 by rpki-client