Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a98be0c-cbe6-38bd-98a6-9cc31cff6772.roa
File:                     1a98be0c-cbe6-38bd-98a6-9cc31cff6772.roa (raw, json)
Hash identifier:          lLO0LLUCyGqgNsk4wr3t0AbZqg+v00b05lk3rR7XCDY=
Subject key identifier:   DE:38:37:9B:F5:80:68:F1:9D:8B:BD:31:0E:A9:57:63:96:49:AC:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAEA5D8761EF286F35CD30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a98be0c-cbe6-38bd-98a6-9cc31cff6772.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        75.69.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:ea:5d:87:61:ef:28:6f:35:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=742d7754-26e3-4a79-b1c6-459f596984da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:ff:5e:45:43:9f:7e:65:8e:39:e4:b1:73:
                    69:8b:b0:0b:09:63:ea:8d:a3:17:da:1b:fe:b5:33:
                    5e:62:17:f7:e2:ba:4b:4c:05:a7:7e:63:f4:92:04:
                    ad:c0:33:1c:34:61:49:f3:45:b2:8c:a2:03:06:01:
                    13:76:b9:0a:3d:f1:ff:c4:ce:e9:2f:0a:d2:d0:f1:
                    ed:81:76:e0:b6:f0:bc:3f:95:9b:3e:6c:85:5e:54:
                    69:d1:ef:8d:e8:63:dc:e3:76:a6:29:b2:63:66:d1:
                    b4:83:a5:80:8b:22:30:ec:c2:79:e8:00:ae:ca:d4:
                    c4:97:fc:f6:5b:3d:bb:ac:13:81:93:04:6e:94:53:
                    27:b3:a5:b6:d5:cf:b1:e3:95:e2:38:27:72:d5:a5:
                    bf:b6:c4:0a:fb:f4:0c:8e:a5:45:24:62:2a:bf:b5:
                    ae:d6:55:78:b4:ef:69:ee:85:1c:f0:ae:a3:4e:fd:
                    94:cf:db:7d:a7:c1:15:32:80:92:4d:7e:df:b2:3b:
                    53:11:12:44:20:c9:97:20:d7:6e:b8:31:0a:2c:19:
                    88:9f:0c:a2:f1:2c:5a:a1:89:f5:00:9f:0c:de:22:
                    83:77:96:fd:77:b7:4e:78:29:e3:94:96:ee:05:1e:
                    0d:93:58:ff:02:da:fe:8e:f3:04:58:d3:43:d2:e5:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:38:37:9B:F5:80:68:F1:9D:8B:BD:31:0E:A9:57:63:96:49:AC:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a98be0c-cbe6-38bd-98a6-9cc31cff6772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.69.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:38:7c:05:ad:e4:92:d1:5f:92:74:ac:ac:09:d9:ec:3d:bd:
         32:5e:b9:09:2a:53:95:01:ea:73:6e:13:81:9e:7a:73:43:16:
         6c:72:11:a8:a1:ca:f4:dd:a1:4b:05:c8:50:60:49:c1:6f:1b:
         6a:9d:0d:64:0d:c7:15:a9:61:38:c9:50:d0:d2:3c:16:1f:cd:
         54:60:5d:b9:3a:78:c2:c6:7c:b6:da:eb:cc:ab:b2:da:6a:a7:
         1a:7a:c6:a8:88:18:db:2d:67:6f:6b:cc:71:44:bb:98:c7:df:
         3a:10:c4:64:0f:0c:59:cf:57:0a:29:14:73:a7:47:02:e4:63:
         3a:f4:9d:f6:1c:3a:39:52:e0:ad:f0:26:8b:e6:6e:91:8b:c9:
         8d:13:22:9c:93:43:a3:ae:db:65:1c:18:fd:8b:2a:a9:f1:3f:
         cc:8d:e3:f7:68:aa:59:7e:06:6f:7b:f8:64:18:cb:25:2f:85:
         3d:bc:41:c0:c8:66:d3:b2:4a:c9:ae:46:f4:6a:d5:35:c5:7b:
         95:4f:98:e1:ab:0b:e8:78:a5:94:01:17:3b:46:b9:f7:42:72:
         12:fa:a5:68:30:4f:d1:95:44:6d:8c:6e:1a:13:d8:a2:36:67:
         a4:0e:d7:54:c5:a2:01:06:11:69:0f:dc:9b:13:c8:09:6b:c9:
         04:d7:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:20 2026 by rpki-client