Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4838f0df-17bf-3c5f-8384-7197534512c9.roa
File:                     4838f0df-17bf-3c5f-8384-7197534512c9.roa (raw, json)
Hash identifier:          iGxcPEmAe8+qqmwBch6vdVNFJYJjQC+IiYahc5JZntI=
Subject key identifier:   DD:71:A5:84:6B:D3:9E:FE:9B:0E:D3:1E:27:6C:13:DA:0E:57:1E:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5B44D2FAF0950C8B672980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4838f0df-17bf-3c5f-8384-7197534512c9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        174.62.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:44:d2:fa:f0:95:0c:8b:67:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d6cd13f1-a7a4-46e8-a703-8b636058b236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:96:99:39:bc:fa:d1:4b:88:f5:ca:ed:76:a4:
                    71:cf:88:e3:f1:54:1d:71:2e:1a:d9:f2:12:75:89:
                    0b:6f:00:6d:62:c3:c0:92:b2:d8:b9:95:c9:f7:91:
                    cd:05:7b:78:97:ef:9d:24:cf:c3:5a:fb:4f:6b:c2:
                    57:7f:92:ac:bd:12:67:96:26:80:58:47:91:45:fb:
                    59:74:2c:5d:94:0d:ab:97:58:6e:a6:a5:99:4d:fc:
                    6a:ed:71:16:4d:13:a1:93:a7:00:dd:74:76:2e:c4:
                    c1:fc:75:4d:6b:1e:03:df:b5:aa:9b:79:ea:b8:49:
                    cb:a4:57:0b:32:92:fd:8e:0d:30:ec:fd:79:85:7d:
                    10:64:84:44:c1:06:1d:d6:31:d1:35:01:a2:e7:80:
                    0f:b8:ed:9c:b1:54:10:03:72:4d:3c:7a:73:63:01:
                    14:e0:76:12:4a:13:df:a4:8c:10:64:ba:77:88:57:
                    16:2f:46:35:6d:e2:02:8e:05:bf:fb:2a:2b:98:a4:
                    c1:dd:5c:85:b0:3d:91:1a:20:cb:52:ee:45:33:d8:
                    3a:09:90:cb:cb:4c:3d:a4:ed:52:1d:75:e6:94:b0:
                    f4:0c:a1:4d:86:16:12:0f:cc:e9:dd:1c:b9:7d:fb:
                    38:3c:2f:85:34:2d:75:fe:ff:0a:26:07:c7:2e:de:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:A5:84:6B:D3:9E:FE:9B:0E:D3:1E:27:6C:13:DA:0E:57:1E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4838f0df-17bf-3c5f-8384-7197534512c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:c6:21:40:75:8a:68:6a:7d:8d:69:17:d5:49:bf:e7:26:e5:
         28:cf:d3:7d:2b:0d:2e:25:57:87:a5:ab:1c:b9:b2:6a:c5:f3:
         75:cf:66:1c:b7:13:4c:cc:36:64:02:ab:b3:f1:d6:8f:e8:f8:
         c4:69:50:df:23:64:f0:52:63:fc:dd:1f:7d:22:69:1f:1d:01:
         0e:b9:cd:b7:22:64:04:70:38:a1:e5:70:24:5c:ef:5c:db:33:
         f3:4f:7c:9a:f6:a1:3b:1a:f9:05:8f:88:ce:c6:49:d3:93:f2:
         c6:17:51:26:24:a8:0a:80:2d:11:5d:50:36:fd:c0:4b:f7:6a:
         0a:06:f4:33:ce:c7:56:03:30:05:60:ea:81:b9:ff:a7:7c:86:
         8c:53:7c:24:53:57:19:95:4c:7c:f1:e3:b3:97:79:65:fe:e5:
         71:ca:11:18:25:b8:f9:67:82:48:b0:c1:77:f8:0e:c8:b2:dd:
         9b:dc:2a:59:34:cc:f9:02:bf:8c:82:7e:5c:94:83:e1:eb:a4:
         d2:10:4d:63:9a:6d:91:8e:b9:3b:c6:e5:bb:29:5f:0a:3e:07:
         db:97:09:bd:4d:a3:2c:cf:c4:43:86:89:c7:36:ef:5b:9b:33:
         3c:ab:a1:1a:fb:6c:2f:71:6b:2a:5c:aa:40:99:40:c0:da:b9:
         22:79:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:23 2026 by rpki-client