Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2c6d787-b1cd-305d-8bf8-0d99c7673671.roa
File:                     f2c6d787-b1cd-305d-8bf8-0d99c7673671.roa (raw, json)
Hash identifier:          7Y9hXUYNeslOEkl4dpvv2CnbJTNXCHgnWo2WbgYU2do=
Subject key identifier:   73:21:23:3D:59:63:EF:22:B6:68:4A:F3:63:C9:92:96:7B:49:0D:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4977B8BCDA5087AA36459080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2c6d787-b1cd-305d-8bf8-0d99c7673671.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        76.123.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:b8:bc:da:50:87:aa:36:45:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5a71cdbb-18da-4093-9200-1c9b955e7ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:14:6f:51:32:0b:bc:78:c2:4d:d2:7b:83:
                    19:ed:e6:d7:06:47:a3:d3:7f:fd:cc:5d:af:0c:07:
                    b2:67:62:7c:d3:7d:68:d3:9d:c8:52:ab:b3:18:f0:
                    e6:c9:2b:08:0c:75:fd:99:1e:34:0d:f9:0c:dc:33:
                    51:fb:1f:9d:8a:d8:8f:0a:ad:d9:05:71:10:b9:31:
                    7b:c2:5d:33:98:87:39:49:be:2a:6e:c9:f6:70:b2:
                    74:ce:c8:e3:86:83:eb:b4:31:e7:05:a2:92:33:f8:
                    71:a0:59:87:e0:a6:63:5a:f7:f6:18:0e:80:e7:6c:
                    a6:9a:f2:0c:74:ec:58:7d:ae:7d:b7:94:79:a9:24:
                    0b:08:eb:de:ab:5d:fa:46:e7:19:2b:23:a6:24:df:
                    c7:7e:d2:c8:fe:42:5f:70:30:a6:5f:ab:b9:d4:25:
                    b1:35:ce:ac:e8:f7:be:d8:9e:5e:ea:0f:83:7d:53:
                    3b:64:04:d2:6e:7f:b5:0e:a5:80:40:d6:bf:aa:86:
                    49:db:1d:16:67:86:15:ec:fc:8f:f1:7f:27:00:2e:
                    75:df:33:56:6d:01:f7:10:98:cd:99:1f:65:e8:f8:
                    7d:e6:37:b3:99:d9:72:8e:6d:92:ba:ad:f4:c2:45:
                    27:00:87:f2:29:27:a3:a5:db:73:de:a2:87:3e:d9:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:21:23:3D:59:63:EF:22:B6:68:4A:F3:63:C9:92:96:7B:49:0D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2c6d787-b1cd-305d-8bf8-0d99c7673671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.123.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d7:d7:02:c3:69:ba:47:02:ca:39:fb:1f:95:59:84:a3:d7:
         42:6f:bb:50:0f:8c:ed:79:2a:18:03:e7:e0:55:2a:87:95:30:
         34:c3:90:1c:d4:98:ed:02:80:dd:45:fc:bc:79:56:39:1f:df:
         07:21:93:13:29:87:52:c4:de:d1:4d:b0:ef:34:1b:a6:3a:88:
         75:bd:96:61:eb:58:c3:2b:58:67:1e:4c:24:2e:db:91:03:d5:
         ea:76:aa:4d:22:df:5b:a6:a8:cb:5f:1e:dc:dc:84:c2:85:66:
         58:7d:e2:6f:2c:93:46:f8:11:a7:e4:4d:0e:5d:1c:4e:5b:3c:
         08:55:a2:2c:d6:56:db:1c:47:e9:26:c8:0c:e5:f2:4c:a5:61:
         e4:33:b5:cc:af:64:62:18:3b:bc:2e:e1:4e:35:3c:f5:84:6f:
         c6:e1:e5:b3:5d:77:ed:4f:aa:f7:ae:61:a7:e5:84:95:af:ff:
         0f:4b:03:a0:0b:81:0a:54:85:73:49:f9:b0:a5:93:62:49:cd:
         92:70:17:bd:6a:76:26:41:d9:c9:8f:7f:53:a7:54:82:06:13:
         56:d3:b8:fe:1e:85:2b:d8:ce:5c:e6:a5:53:33:ce:e9:51:5b:
         96:8d:af:83:be:f3:2e:88:58:5f:13:d7:b2:83:e9:6e:e2:10:
         fd:03:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:35:04 2026 by rpki-client