Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
File:                     3ced9ba4-003d-3df0-b21f-32f119f8becd.roa (raw, json)
Hash identifier:          St5Emv8IjXGM08+Iox/kXGnk4ag/rBDnGPocpgZRI9E=
Subject key identifier:   75:BE:B4:C5:B6:16:7A:D8:1B:A4:6F:50:5C:F9:ED:51:E1:B1:1A:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A61D3EEEBE855D9E91080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        71.195.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:61:d3:ee:eb:e8:55:d9:e9:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=870438fe-6099-4b79-bbd1-085efae12983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:c0:0a:75:47:f4:1a:ff:1b:b4:fb:8e:66:
                    fa:cd:e4:0c:f8:0b:26:9a:c6:09:d1:df:16:35:62:
                    1c:5b:67:b2:b8:bb:81:4b:34:ea:62:80:e3:b2:2e:
                    02:7a:a5:8a:c7:bb:56:66:45:bf:96:d8:54:cc:0b:
                    2b:81:f0:f1:a3:26:b0:47:48:17:59:7b:99:7a:20:
                    9a:78:93:0d:9a:8b:ca:a2:ca:a7:6b:c3:ee:44:da:
                    d9:30:bb:29:e0:1c:0c:9b:f5:2b:48:d2:d0:e5:5d:
                    0e:17:ac:4a:c7:26:8a:7d:77:36:59:0d:8b:32:38:
                    03:db:0d:c0:51:ff:ae:75:0f:d8:0d:8c:55:1c:71:
                    24:eb:0c:52:99:bb:44:b2:5b:a1:ef:62:61:6b:0a:
                    83:d2:79:f4:21:a2:55:cb:28:7f:1e:ec:66:61:4c:
                    5b:df:3d:9a:5d:8b:f8:61:41:b9:16:24:93:13:96:
                    a1:2c:f8:49:06:e3:52:5e:36:cf:d6:94:36:37:f2:
                    1e:aa:7a:1e:5c:72:81:89:c8:30:58:22:bf:03:c7:
                    9d:83:6a:dc:80:1a:ad:e6:24:93:46:39:03:ae:73:
                    d1:16:96:01:7a:a6:7e:a2:ca:fd:28:84:e3:a7:8a:
                    72:4a:51:f5:7f:03:61:75:d2:ff:9e:e5:de:71:45:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:B4:C5:B6:16:7A:D8:1B:A4:6F:50:5C:F9:ED:51:E1:B1:1A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:c7:10:76:52:84:bc:8c:30:7c:5f:31:a6:49:7d:58:6f:
         57:92:f7:7e:a3:9b:d3:49:e3:16:91:f0:ef:6b:d3:26:c2:1f:
         de:11:c2:fb:90:5f:4b:0b:41:ab:f9:a6:d8:52:44:e2:0c:7a:
         e7:26:78:21:8e:1d:71:e8:76:a3:30:4b:c5:eb:2c:94:82:6b:
         3d:1a:f0:33:a7:43:f3:d4:38:8a:c9:bf:61:a8:00:14:42:51:
         58:f7:32:76:3e:13:26:b1:25:b2:ad:ba:36:9e:06:c0:49:b9:
         23:3d:1d:d4:d4:db:c2:75:27:28:89:b4:6d:c3:d7:86:e9:00:
         c5:7f:ee:09:95:d9:44:a7:59:64:07:bf:ca:a9:16:0c:6c:8b:
         b1:88:6d:dc:e2:a9:17:58:a1:71:be:69:7c:4a:43:cf:b5:52:
         44:e6:29:41:83:d4:63:25:a9:c4:93:d3:69:14:0f:69:2e:18:
         1b:d8:8b:a8:a5:93:94:72:87:4b:db:4f:a9:28:89:1e:3c:34:
         76:7d:50:4c:0d:e0:60:46:a2:59:88:8a:2d:d7:6a:c8:88:1b:
         a3:34:17:72:85:d7:24:44:8a:f4:82:39:4c:5a:ef:8b:13:b7:
         1c:d7:da:44:3e:b9:24:38:9f:cc:9c:07:b6:72:b5:c5:07:a1:
         c8:2c:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:30:27 2026 by rpki-client