Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba8e97f-1ab1-3d95-8b6b-0bab9744ad27.roa
File:                     eba8e97f-1ab1-3d95-8b6b-0bab9744ad27.roa (raw, json)
Hash identifier:          XkNmK1H2aASBZ08VTcSwxU6VdTKOqPHgRzRTVKUyx6Q=
Subject key identifier:   F6:DE:88:90:96:E6:AC:05:46:C6:E4:7A:B9:30:21:97:55:9C:AE:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF61BDE9C77BB48F342FA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba8e97f-1ab1-3d95-8b6b-0bab9744ad27.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        67.184.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:1b:de:9c:77:bb:48:f3:42:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1f11550c-65a0-4d14-9050-428e41ce87ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:9d:43:98:bf:25:00:49:5d:60:c7:36:16:
                    91:92:e1:02:eb:8a:97:a5:c9:0b:ab:b2:b2:3e:15:
                    48:2b:59:67:43:be:90:e7:52:56:55:17:e9:98:2a:
                    2d:02:ab:a9:60:41:50:ce:84:61:49:3a:5f:66:f4:
                    d0:85:52:7d:5c:b0:7f:ab:bd:d9:aa:13:dd:03:0a:
                    11:b4:25:d6:01:a4:51:3b:fa:9e:52:9c:70:49:ca:
                    5a:cb:f1:61:7d:25:ca:d2:f2:aa:e7:89:26:67:85:
                    57:98:33:d1:a0:a3:45:aa:d9:9f:5a:1d:fa:e1:bf:
                    06:bd:34:66:fc:d8:c1:81:89:e9:8f:70:9e:91:10:
                    e8:a6:5f:26:1a:66:c9:1c:3f:12:c5:7f:2a:56:34:
                    85:80:8d:bf:e8:d8:e2:6c:a3:63:f2:42:69:35:d7:
                    26:6f:a2:4c:cd:fe:0d:93:1c:f9:b1:ac:16:9f:73:
                    31:d6:66:34:f7:4b:92:94:6e:b4:08:f2:68:b3:d9:
                    d9:9e:46:0c:f5:69:63:12:fa:66:f4:b7:82:c4:a2:
                    e0:8c:97:87:83:71:0a:87:ce:79:0e:94:43:82:cf:
                    45:d5:d8:09:39:1f:9e:c6:c3:4e:d2:46:12:3f:c5:
                    a6:c7:dc:48:d2:5b:36:fa:56:cd:96:63:bf:55:d4:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DE:88:90:96:E6:AC:05:46:C6:E4:7A:B9:30:21:97:55:9C:AE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba8e97f-1ab1-3d95-8b6b-0bab9744ad27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.184.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:05:44:8c:67:04:ca:e8:7d:d1:14:af:d0:bc:04:2f:dd:ae:
         e0:3e:56:a2:51:68:57:2e:4c:86:45:67:03:d1:61:ab:ff:51:
         65:bb:71:e5:1b:e8:58:53:a4:d6:a0:4f:7f:da:a0:39:4b:7f:
         cc:55:c7:1c:3f:e9:2e:ea:d9:5b:3e:4e:a1:dc:b6:77:7b:11:
         e7:ac:30:af:15:48:ab:6a:59:af:a5:e9:a1:36:84:e6:67:ec:
         fc:14:09:fb:47:4c:af:95:00:93:b6:0f:ed:10:f9:9a:6f:e5:
         1c:4a:a3:78:6f:c2:0c:a6:d8:5c:06:9a:5e:6a:30:1a:33:74:
         a1:3f:93:0c:8e:3a:ef:7c:d2:79:54:c8:be:39:1f:0d:94:69:
         0e:05:61:2b:6b:bf:8a:48:ba:90:99:08:12:8e:eb:40:3a:86:
         5b:fa:eb:e6:22:e3:7b:00:94:74:0a:41:62:43:71:5a:ea:e9:
         a8:51:d6:63:2f:63:e1:57:af:42:d5:d4:8a:c7:6e:34:b7:28:
         48:4f:a2:7f:68:c5:53:2d:4d:89:48:97:0a:46:8a:f1:88:91:
         d4:2b:40:66:65:8d:9e:02:36:76:f2:3b:e1:86:9f:16:c8:16:
         b5:d2:b1:45:f2:fc:75:cf:3f:fa:aa:bf:41:61:45:d4:dd:fb:
         a0:66:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:33:50 2026 by rpki-client