Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff83fd28-6957-3a1b-801c-6dad1bd60d47.roa
File:                     ff83fd28-6957-3a1b-801c-6dad1bd60d47.roa (raw, json)
Hash identifier:          MMgLwlVeGq3aTlqYA3vxKfx4Yf8BRMOLBSkT/Sfup3I=
Subject key identifier:   1C:F4:B3:7F:58:53:C4:3B:FA:19:93:23:C7:95:80:B1:40:1A:7C:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A5D8DBF3EF972B6703540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff83fd28-6957-3a1b-801c-6dad1bd60d47.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        76.129.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:5d:8d:bf:3e:f9:72:b6:70:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8d0f3a29-d490-4bb9-bf49-cd170252b675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:0a:e1:4d:f7:a3:9b:91:7d:12:c2:dd:4e:
                    3d:46:67:22:55:2f:fb:cd:62:61:80:28:83:b8:fe:
                    ee:5a:eb:5b:24:27:bf:8f:bb:0e:97:c8:c5:5f:ea:
                    bd:13:7c:c5:e2:d8:34:fe:04:ae:c2:bd:81:39:69:
                    d9:58:60:56:34:52:00:58:0b:5e:2a:4c:08:df:c5:
                    45:08:62:71:11:bc:1e:34:c0:50:ef:02:d8:39:b2:
                    3e:96:26:6d:d0:e6:6d:9b:66:35:c3:3b:92:1b:61:
                    2b:77:fd:d6:92:ec:3f:9c:e1:ab:24:58:c0:7c:41:
                    f8:a7:48:4a:ab:f9:c8:91:29:80:cb:12:bb:b6:b0:
                    f6:08:e0:64:75:4b:ca:26:63:51:95:e3:7c:aa:b5:
                    18:22:b6:4b:0b:45:aa:96:6c:ba:40:e7:bd:01:84:
                    61:f3:96:50:ec:ab:91:c2:c9:39:c0:89:af:76:e1:
                    e8:19:35:bd:0a:78:c6:28:05:41:88:17:e4:ca:ea:
                    71:38:86:8b:e6:46:c4:66:e0:7b:eb:9e:45:97:94:
                    29:b0:0c:ef:2d:5e:cd:d5:d5:fc:21:44:c5:5e:7b:
                    7d:ab:d1:30:56:ad:0a:af:c5:c8:34:c0:05:15:35:
                    f8:fb:9f:d5:84:00:10:d5:da:33:71:d3:fb:26:47:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F4:B3:7F:58:53:C4:3B:FA:19:93:23:C7:95:80:B1:40:1A:7C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff83fd28-6957-3a1b-801c-6dad1bd60d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:8f:8a:c0:5a:45:c2:f4:12:6d:f0:ef:a7:15:40:57:dd:
         62:0c:27:f3:aa:6b:0c:e4:95:8c:3d:68:1d:28:bf:ce:03:d9:
         df:08:e7:cc:84:68:22:49:62:85:d4:e1:5f:91:da:98:cd:57:
         6a:91:81:56:94:d5:1e:25:b9:a7:5e:0e:f4:93:0a:ae:8b:0a:
         34:71:5c:21:54:c5:1b:f1:58:6b:62:63:af:5a:c9:35:04:7f:
         75:b5:09:4b:0b:f2:66:1b:05:40:2f:83:08:04:8e:5b:1d:4e:
         bc:ee:ac:3e:62:bd:f7:17:95:46:cc:2f:b2:bd:fe:94:4d:20:
         c0:5a:d3:b9:cc:03:8f:64:f3:59:6c:29:d4:ea:8f:f0:e8:8d:
         9d:b1:e5:b5:2a:02:ff:4f:71:1f:86:8b:e1:f4:fd:b8:d6:7e:
         3b:66:08:80:0b:c2:60:49:39:66:fd:c2:cf:ce:07:51:6d:88:
         1c:e1:41:3d:4d:d6:a5:37:a6:dc:b9:76:fe:0f:b1:77:01:c5:
         17:c5:db:91:56:fc:75:ae:8d:65:c5:61:4f:46:ef:15:0f:ac:
         5e:fd:cc:3a:fc:d5:30:dd:64:a2:d4:7c:2d:00:6d:90:fc:0a:
         bd:fd:97:6b:23:18:29:81:ae:62:fc:62:42:5d:d1:23:3b:b4:
         b2:c6:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:15:28 2026 by rpki-client