Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d4d01b-60c6-30f5-9efc-7c2f58e5cd4f.roa
File:                     48d4d01b-60c6-30f5-9efc-7c2f58e5cd4f.roa (raw, json)
Hash identifier:          n1JZ5mznR4McaFXO3w1iE4J9p58K3ShV69a9injSggI=
Subject key identifier:   95:9B:85:B4:B2:0E:93:14:9D:C1:98:94:2D:76:DA:63:D5:FE:A1:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52437CF82BA428F7D5E94440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d4d01b-60c6-30f5-9efc-7c2f58e5cd4f.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        75.65.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:7c:f8:2b:a4:28:f7:d5:e9:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=a2dfc36c-d815-48be-a675-21901f9f4fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:1b:64:2d:cc:21:53:bf:80:e5:d7:02:ff:
                    d5:91:13:61:40:8b:be:b1:7a:91:28:c3:1d:b5:85:
                    fc:13:b7:85:21:40:2b:de:cb:de:fb:99:2d:32:6a:
                    ef:e0:3c:6e:f8:8a:40:d2:99:b8:fb:fa:b5:19:dc:
                    74:f4:45:55:42:f8:37:9d:a9:82:9c:48:45:ef:77:
                    40:06:0f:92:10:8b:1f:d2:a5:f7:a4:79:bd:bb:d4:
                    37:cd:2e:5d:04:39:ac:c6:5f:7a:03:a3:f1:6e:41:
                    05:2b:c0:7b:64:80:17:2f:14:1e:8e:3c:5e:fd:96:
                    73:50:c4:53:57:38:f3:9c:13:c6:5d:0c:c7:16:82:
                    24:79:e5:01:98:1a:fb:9f:11:fa:7d:71:00:32:1c:
                    bb:36:2a:3a:10:82:3f:a5:9b:d6:7c:c5:09:74:d6:
                    d0:9b:2e:42:8d:91:8f:57:1a:8a:50:98:f7:96:c2:
                    7b:8e:ca:8b:de:70:74:ed:9d:35:4e:b3:7d:29:e2:
                    96:2e:77:fe:47:76:8b:16:7b:e5:96:e3:23:b2:12:
                    73:0f:f6:f7:b7:a4:99:98:9e:70:b3:99:2a:99:3f:
                    34:7b:96:56:0a:a1:dc:9d:59:ba:2b:60:04:4f:3e:
                    b0:45:0c:c7:2e:35:96:05:91:da:6a:92:63:e6:ee:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:85:B4:B2:0E:93:14:9D:C1:98:94:2D:76:DA:63:D5:FE:A1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d4d01b-60c6-30f5-9efc-7c2f58e5cd4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:89:86:5c:24:cc:77:c0:78:30:27:30:73:55:07:d9:16:
         22:09:c7:3c:30:fa:ea:31:50:c4:1e:c3:2e:a7:fd:54:1a:fa:
         83:5c:47:36:24:4e:3d:41:84:d6:f7:9c:9e:32:43:9b:61:a0:
         df:29:9b:b9:10:8c:69:4c:78:fc:20:a6:38:9c:f4:10:98:af:
         7f:04:0c:31:43:d4:2e:ac:8c:20:09:be:89:d5:df:66:dc:84:
         0f:d2:bd:e4:55:16:a0:96:03:75:19:b4:e9:15:0f:2e:3e:95:
         16:a6:63:47:45:d7:2d:62:bd:00:12:0e:92:c3:e4:41:98:25:
         35:1a:55:73:6c:5d:56:3b:e6:23:01:0d:a9:96:7f:4d:42:60:
         fb:72:fa:24:56:47:92:b5:29:56:39:b5:2c:8f:4f:ad:94:31:
         a4:51:a8:2a:6b:b9:5d:bc:5b:70:09:86:dd:b9:69:a0:f8:e2:
         7a:0a:3f:14:4c:17:3a:28:5c:c0:c4:49:1e:5d:96:c7:90:cc:
         4c:9c:c6:e9:2b:76:a4:74:a2:b8:71:41:31:e7:35:4f:1b:a5:
         49:4a:03:7d:1f:5e:a3:0c:55:89:7f:ca:d4:fd:b4:fe:da:95:
         d7:97:19:0e:96:8e:08:52:b1:7f:86:6f:06:d9:f1:37:51:8e:
         5b:d9:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:24 2026 by rpki-client