Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0514de76-4f38-302e-88c9-4c7876d60f64.roa
File:                     0514de76-4f38-302e-88c9-4c7876d60f64.roa (raw, json)
Hash identifier:          RYlNvEB0zQMBBxCatrIyveQfi9imLBSdVE/a03pJYrY=
Subject key identifier:   DE:42:C8:C3:87:1A:8C:99:73:3A:30:58:D4:C4:AC:C9:89:E9:34:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81008C1C1956F5C69A842BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0514de76-4f38-302e-88c9-4c7876d60f64.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        76.145.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:8c:1c:19:56:f5:c6:9a:84:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=cf9a9f3b-e422-4a9d-9ef2-06107f0d269f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:a3:9c:69:ed:5d:7e:ac:e4:45:f8:f7:39:
                    ce:80:88:1a:32:86:9a:a7:08:27:da:fe:b3:a4:eb:
                    ad:8c:a2:ad:cc:ad:ad:ce:53:96:5f:a5:09:5e:0c:
                    eb:e1:82:1a:ef:55:89:bc:f5:ed:ee:44:d5:df:53:
                    1b:31:59:48:2b:08:98:eb:2f:fa:cb:41:87:3a:96:
                    b7:ea:eb:35:7d:23:45:c0:2d:d9:c7:63:10:65:2f:
                    df:03:21:5b:63:08:c0:50:79:61:2f:f1:4c:b9:39:
                    29:f1:d1:e8:23:9f:71:7f:08:44:98:78:89:fd:6c:
                    1d:46:70:31:43:47:c6:59:e4:6a:9e:6b:68:f3:f9:
                    cf:b6:70:09:3f:34:98:cb:dc:e5:8f:9a:0f:5e:91:
                    6c:55:45:cd:24:16:36:de:f6:f6:42:97:41:17:21:
                    d7:f0:94:30:4f:bc:39:0d:f0:a5:e7:51:a7:50:d4:
                    1b:6b:04:d8:3f:25:b0:03:cc:4a:2c:af:b5:6b:f9:
                    ba:72:a0:53:4e:7f:eb:e1:f6:32:46:86:80:9c:23:
                    67:ff:d9:1e:a3:15:d5:52:08:f8:e0:14:67:6f:e0:
                    9d:8d:dd:5b:65:a6:ce:1b:1a:3b:33:0a:18:8d:80:
                    70:e8:53:1d:7e:f6:bb:9c:48:3c:82:d4:03:43:79:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:C8:C3:87:1A:8C:99:73:3A:30:58:D4:C4:AC:C9:89:E9:34:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0514de76-4f38-302e-88c9-4c7876d60f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:0c:bd:87:9f:8f:e1:9f:17:51:b6:df:fa:ba:9e:40:53:
         a6:d0:83:7d:73:17:72:28:84:d1:60:0c:7e:89:bf:ec:56:94:
         59:71:38:37:6d:f4:95:f5:8a:23:24:8d:e1:de:cd:a7:a9:5c:
         27:02:e3:87:3a:5a:c8:13:16:dd:6d:47:9a:98:d0:8e:de:fe:
         49:af:8f:d1:2d:81:9f:d5:b9:04:68:fd:be:76:34:e4:a4:b6:
         c9:9a:90:83:da:73:57:5b:a5:d0:ff:b0:ed:e1:93:34:90:b3:
         12:be:e7:e4:d3:1e:55:8a:14:de:03:b3:11:2b:8e:9f:dc:d0:
         17:03:b4:f2:ce:fb:e3:9c:2b:c8:a0:fa:ea:ee:b3:d5:40:4b:
         91:fa:fd:b3:82:84:9a:ae:fe:8b:71:ef:48:7e:f4:53:73:c6:
         ea:c2:10:84:1d:1b:89:48:ee:0f:da:95:7e:6d:6a:44:ab:d0:
         79:73:86:40:56:46:26:93:92:8b:e3:ca:bf:c4:82:c0:e9:dd:
         a0:7a:b5:1e:00:08:c8:83:72:61:29:57:34:35:ce:71:ed:1b:
         cd:2e:81:b3:9a:04:49:0d:2c:10:62:e2:d0:c5:53:04:25:40:
         a2:53:bf:c4:42:2f:20:c2:f1:31:6f:dc:bd:64:cb:06:64:2b:
         ae:5c:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:51:17 2026 by rpki-client