Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452ec938-4213-3e1a-b3bc-f188189145ec.roa
File:                     452ec938-4213-3e1a-b3bc-f188189145ec.roa (raw, json)
Hash identifier:          xOjWB/DNKol9WlD2XDg78rybE3DxYax9R0TlmT3i2zo=
Subject key identifier:   A8:67:E5:A5:71:19:87:C2:77:19:F0:E5:6B:99:18:A3:D7:B1:22:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81008D3FC57EB684AA0DD300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452ec938-4213-3e1a-b3bc-f188189145ec.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        76.20.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:8d:3f:c5:7e:b6:84:aa:0d:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=af657aa8-ad67-4122-a7f7-3e0af1c109b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:57:43:7f:98:b2:4c:d6:33:03:e3:bf:03:
                    d5:04:34:7e:bb:a4:64:79:3d:f6:b1:b0:7a:28:c7:
                    05:f8:aa:2a:ed:a4:23:a6:01:2b:f7:44:de:ad:d5:
                    b6:ba:7c:cc:95:35:c7:91:f0:64:0a:1b:06:e4:2c:
                    49:1a:82:6b:da:7f:df:fc:6c:61:32:4e:ff:b2:02:
                    42:42:d5:40:c8:5f:3f:1d:16:5a:0c:20:88:9c:5e:
                    9b:4e:95:f5:f6:fd:df:ec:23:21:c7:30:a7:37:04:
                    e1:50:e6:99:10:0d:23:58:24:0b:34:4b:e4:1a:e6:
                    2f:d6:cd:f6:c7:2b:d1:45:85:29:39:b7:21:c9:fe:
                    03:11:ef:9b:77:7d:db:f2:0e:32:3a:b2:13:e5:94:
                    d2:ba:66:65:6a:b8:29:e2:5e:5a:a4:2a:8d:3f:52:
                    43:8b:48:01:cc:af:87:31:68:8e:fa:c8:df:05:e6:
                    f9:58:24:be:00:16:c8:5b:e0:a9:b9:ac:55:4c:f0:
                    99:04:69:e4:68:c3:12:d8:d8:b3:24:a2:9b:fc:71:
                    2d:89:10:0e:95:e6:ce:d1:23:f9:65:a2:7f:cd:21:
                    7c:b1:48:51:20:e5:a8:a7:36:7e:eb:18:d7:95:60:
                    79:b6:ad:1d:66:5d:b3:e5:b6:75:46:65:99:ee:a8:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:67:E5:A5:71:19:87:C2:77:19:F0:E5:6B:99:18:A3:D7:B1:22:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452ec938-4213-3e1a-b3bc-f188189145ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.20.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:0c:8f:03:40:50:75:14:c9:1f:47:1b:77:1f:d0:1c:26:
         5f:0a:7e:10:8f:40:56:5a:30:9c:7a:a4:e3:f2:8e:08:02:8d:
         09:ef:3d:73:f3:16:a8:f3:8b:bb:10:0a:9b:69:50:1a:33:77:
         6e:ce:86:f7:43:ca:e0:db:a1:dc:04:d4:5c:f8:e9:90:f4:4e:
         15:96:6c:1a:0e:b4:ed:58:c6:3c:ef:d1:d1:35:07:c2:c2:ad:
         93:a0:8c:eb:6f:56:a9:dc:40:6d:71:ee:5e:67:33:4d:ce:f1:
         8a:fc:c1:03:a7:94:99:a6:1c:67:aa:f2:40:b2:f0:de:6a:ac:
         a4:b7:3f:5b:1d:d9:96:12:d3:c4:97:05:59:66:2e:05:9a:0b:
         8b:9b:65:ff:4e:79:29:3e:18:e3:72:0a:c3:f0:4e:24:88:93:
         bc:80:25:a0:31:d1:db:c4:99:71:e1:65:ed:f3:65:16:15:f1:
         0b:82:4d:a0:86:3d:7f:89:bb:69:ae:d7:88:24:15:5a:42:80:
         89:dc:0c:fe:72:31:30:f7:34:95:72:54:de:94:0e:25:79:bf:
         d7:5b:af:9f:b4:d6:d3:67:2f:bb:f0:f7:6d:58:89:06:4b:38:
         de:22:b9:d7:8a:dc:9e:96:bf:3a:a3:48:ee:55:36:3c:23:58:
         59:1a:f4:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAI0/xX62hKoN0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
YWY2NTdhYTgtYWQ2Ny00MTIyLWE3ZjctM2UwYWYxYzEwOWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIRXQ3+YskzWMwPjvwPVBDR+u6RkeT32sbB6
KMcF+Koq7aQjpgEr90TerdW2unzMlTXHkfBkChsG5CxJGoJr2n/f/GxhMk7/sgJC
QtVAyF8/HRZaDCCInF6bTpX19v3f7CMhxzCnNwThUOaZEA0jWCQLNEvkGuYv1s32
xyvRRYUpObchyf4DEe+bd33b8g4yOrIT5ZTSumZlargp4l5apCqNP1JDi0gBzK+H
MWiO+sjfBeb5WCS+ABbIW+CpuaxVTPCZBGnkaMMS2NizJKKb/HEtiRAOlebO0SP5
ZaJ/zSF8sUhRIOWopzZ+6xjXlWB5tq0dZl2z5bZ1RmWZ7qiArwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhn5aVxGYfCdxnw5WuZGKPXsSJ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUyZWM5MzgtNDIxMy0z
ZTFhLWIzYmMtZjE4ODE4OTE0NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLmDI8DQFB1FMkfRxt3H9AcJl8KfhCPQFZaMJx6pOPyjggCjQnvPXPz
Fqjzi7sQCptpUBozd27OhvdDyuDbodwE1Fz46ZD0ThWWbBoOtO1Yxjzv0dE1B8LC
rZOgjOtvVqncQG1x7l5nM03O8Yr8wQOnlJmmHGeq8kCy8N5qrKS3P1sd2ZYS08SX
BVlmLgWaC4ubZf9OeSk+GONyCsPwTiSIk7yAJaAx0dvEmXHhZe3zZRYV8QuCTaCG
PX+Ju2mu14gkFVpCgIncDP5yMTD3NJVyVN6UDiV5v9dbr5+01tNnL7vw921YiQZL
ON4iudeK3J6WvzqjSO5VNjwjWFka9Kk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:50 2026 by rpki-client