Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46ed6b36-b3aa-3f42-ad1b-538f84b5ac1e.roa
File:                     46ed6b36-b3aa-3f42-ad1b-538f84b5ac1e.roa (raw, json)
Hash identifier:          6erwYJE5yOyAgtbs1C8he77PpU1ruk5Lb22iDY8D7Ls=
Subject key identifier:   FD:D7:68:DC:37:DF:27:E4:E5:E2:8F:32:88:2D:59:11:82:62:22:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9489743BE6B02ECD22F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46ed6b36-b3aa-3f42-ad1b-538f84b5ac1e.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        71.206.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:48:97:43:be:6b:02:ec:d2:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=96875cda-c30d-4506-b7fc-80466fd39dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:15:9b:e7:af:a6:9c:f4:4d:b3:8f:64:c7:
                    a1:98:6b:ae:fb:8a:61:12:76:15:90:2b:e2:12:7d:
                    39:84:a0:56:8d:30:b7:19:ba:d9:08:8e:ef:d2:2b:
                    31:90:9f:ec:01:27:c0:4e:80:4f:c4:29:0f:91:36:
                    8d:4c:54:4f:d6:80:08:88:68:23:24:8a:70:df:0b:
                    12:8a:a6:13:b8:2a:f3:8d:3c:03:30:06:ba:c0:5d:
                    99:a0:22:20:f4:48:5f:c7:62:c6:bd:0a:59:94:ea:
                    1b:30:de:5b:e0:79:af:d4:e8:48:5f:28:d3:10:75:
                    6e:0a:e2:e9:56:e4:b8:1e:02:c9:88:8a:f4:33:34:
                    33:2a:fc:18:8d:ce:30:bf:f7:2d:2d:4e:6a:e7:54:
                    72:dd:6d:95:2c:f7:d9:0d:a7:bc:1d:f2:1c:9f:65:
                    26:dd:e8:87:09:47:8c:b2:1b:1e:10:8c:d8:01:fc:
                    9d:94:3d:ec:aa:c0:3d:2f:9f:a9:85:1a:70:02:c1:
                    e5:f6:b6:97:73:96:99:34:81:af:0b:9b:d3:dd:59:
                    3f:37:0f:d7:74:08:58:f8:4c:e0:5a:81:d8:5c:5f:
                    f3:59:8b:a6:eb:b5:ec:1d:ae:17:6f:37:9e:26:41:
                    7c:a1:dd:cb:b9:6b:29:64:f0:8d:70:17:2e:6b:d4:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D7:68:DC:37:DF:27:E4:E5:E2:8F:32:88:2D:59:11:82:62:22:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46ed6b36-b3aa-3f42-ad1b-538f84b5ac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.206.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:60:4f:a3:0c:7e:dd:66:eb:c2:ab:70:ed:c0:49:22:93:37:
         ae:4a:b7:ee:dd:e7:60:55:8c:47:9c:e0:1c:76:a5:e8:75:ad:
         39:2f:bd:3a:80:ce:e5:37:b2:95:bb:a6:7e:b6:1a:07:7f:95:
         de:79:f7:6b:b5:80:73:bc:0e:92:e6:f8:3e:42:90:77:4e:12:
         44:be:43:cc:ef:2b:18:e8:1e:96:23:cb:70:e1:8d:5d:39:0d:
         f9:bd:da:9e:89:43:8a:37:5c:81:18:8d:73:bc:fd:85:11:f2:
         a8:1c:60:d7:fd:8a:61:df:ac:58:e3:52:81:b7:ee:1d:29:95:
         d6:ba:52:dc:63:65:5f:6c:ed:c2:f9:5c:bb:77:00:45:42:d0:
         d9:c2:40:37:08:64:dd:ca:2a:e5:22:60:04:89:74:7f:53:55:
         6b:f6:61:86:01:a1:3a:b0:43:1f:a5:78:2a:3f:4d:13:95:26:
         7e:77:21:5d:aa:04:aa:5b:03:a9:84:c1:56:1e:73:bc:71:c6:
         99:75:c8:8c:88:5c:d4:ad:1a:77:de:47:62:97:ca:7d:c5:46:
         dc:33:b8:f2:59:21:5a:6b:51:3f:5c:4a:28:b1:50:a0:ac:5e:
         a6:c5:37:1c:12:c3:11:08:aa:04:c5:bc:b5:5b:e0:0e:79:ac:
         33:a6:34:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96UiXQ75rAuzSL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
OTY4NzVjZGEtYzMwZC00NTA2LWI3ZmMtODA0NjZmZDM5ZGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoIVm+evppz0TbOPZMehmGuu+4phEnYVkCvi
En05hKBWjTC3GbrZCI7v0isxkJ/sASfAToBPxCkPkTaNTFRP1oAIiGgjJIpw3wsS
iqYTuCrzjTwDMAa6wF2ZoCIg9Ehfx2LGvQpZlOobMN5b4Hmv1OhIXyjTEHVuCuLp
VuS4HgLJiIr0MzQzKvwYjc4wv/ctLU5q51Ry3W2VLPfZDae8HfIcn2Um3eiHCUeM
shseEIzYAfydlD3sqsA9L5+phRpwAsHl9raXc5aZNIGvC5vT3Vk/Nw/XdAhY+Ezg
WoHYXF/zWYum67XsHa4XbzeeJkF8od3LuWspZPCNcBcua9SGWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3XaNw33yfk5eKPMogtWRGCYiJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDZlZDZiMzYtYjNhYS0z
ZjQyLWFkMWItNTM4Zjg0YjVhYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR85oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANZgT6MMft1m68KrcO3ASSKTN65Kt+7d52BVjEec4Bx2peh1rTkvvTqA
zuU3spW7pn62Ggd/ld5592u1gHO8DpLm+D5CkHdOEkS+Q8zvKxjoHpYjy3DhjV05
Dfm92p6JQ4o3XIEYjXO8/YUR8qgcYNf9imHfrFjjUoG37h0plda6UtxjZV9s7cL5
XLt3AEVC0NnCQDcIZN3KKuUiYASJdH9TVWv2YYYBoTqwQx+leCo/TROVJn53IV2q
BKpbA6mEwVYec7xxxpl1yIyIXNStGnfeR2KXyn3FRtwzuPJZIVprUT9cSiixUKCs
XqbFNxwSwxEIqgTFvLVb4A55rDOmNEg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:53 2026 by rpki-client