Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa
File:                     4b5f8813-e42b-308e-9245-8d9162b98fb0.roa (raw, json)
Hash identifier:          UYXk9TUphomHx3quN7mQzX4P0McYG8gNlyyf9/pTH/w=
Subject key identifier:   A7:57:67:68:0D:37:AC:80:8B:41:02:84:43:28:A9:0C:37:4F:07:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA4E1A88DA32A9C9D20710
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        68.86.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:4e:1a:88:da:32:a9:c9:d2:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=52e8977f-c4ce-421e-b204-5baa9525d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:35:06:bd:35:6d:8e:b5:74:ed:77:af:68:
                    30:9f:95:b7:3c:66:c8:b8:bc:78:d9:d8:81:53:3b:
                    cc:ab:1b:c3:a2:f7:9a:8a:93:12:38:71:f3:38:f3:
                    f2:df:1a:06:70:92:e1:48:27:2b:e5:7c:22:17:50:
                    dd:68:b8:76:4c:81:2f:bb:4a:b8:40:a4:8f:b4:3c:
                    53:b0:af:24:0a:64:a5:33:1a:7f:65:80:6c:3a:e7:
                    3a:f8:f8:5f:a7:ba:1e:f1:49:70:a6:4a:08:b6:95:
                    37:9a:50:7f:41:9a:35:40:80:21:bf:83:ed:85:eb:
                    51:82:42:af:85:51:09:9c:c4:f5:08:c4:48:8f:f0:
                    91:e6:17:63:9a:e2:52:0c:b3:48:f9:39:64:58:35:
                    43:7c:cc:d5:b1:44:39:f1:ee:2e:a3:32:5a:db:59:
                    d6:2b:a2:4d:83:f9:5c:24:fb:72:66:8f:fb:f9:1a:
                    01:64:9d:5e:d8:4b:4d:34:8b:d5:24:62:b2:18:8f:
                    d0:60:ec:4f:4f:70:d6:27:d2:de:cb:f0:eb:8e:f9:
                    4b:75:f8:1a:10:15:db:d4:24:5c:1f:5e:43:1e:ed:
                    14:35:db:df:27:91:9e:7e:48:b2:4c:74:6b:fe:5c:
                    f3:80:37:ca:91:e3:2e:77:2a:a9:a1:29:08:45:a5:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:67:68:0D:37:AC:80:8B:41:02:84:43:28:A9:0C:37:4F:07:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5f8813-e42b-308e-9245-8d9162b98fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:ed:a8:1a:1a:e2:ae:0b:5c:4e:f5:c8:65:fa:bb:56:b9:
         17:6e:d8:7b:6c:11:7d:99:45:92:4f:7d:a1:43:2b:da:a6:74:
         16:78:76:91:e3:9f:7a:27:10:04:08:70:27:ca:64:63:58:2e:
         f0:db:11:66:74:8d:cc:dd:80:17:da:9d:69:32:c7:bc:d3:c8:
         fa:49:bf:f2:46:11:09:6a:65:58:df:46:1d:42:46:66:2e:9b:
         5e:61:70:9b:07:8e:27:34:c6:4f:5f:0f:73:6e:32:4d:3d:d3:
         f5:84:a2:5d:26:27:66:06:15:bf:30:c5:38:c7:d4:4c:c3:34:
         84:0e:64:c7:2b:f5:fa:fa:6d:a9:21:2c:ee:18:3f:c7:67:a6:
         31:00:97:5b:50:ee:22:e5:04:cc:ff:64:f2:01:d9:e1:aa:61:
         37:c8:74:7c:51:ad:d8:76:a9:e5:84:85:da:a5:a8:2b:41:84:
         af:38:01:46:bf:10:a2:3e:19:ce:6d:ac:bc:db:e7:fd:3b:6f:
         66:7b:86:89:d4:59:4a:38:a9:be:4c:ce:db:2d:b2:81:1e:2d:
         62:e4:61:d4:a4:d8:04:80:96:93:a1:fd:70:87:9c:87:a5:ac:
         82:f6:52:bd:b3:f9:f6:30:36:45:33:fa:a1:68:cb:f5:45:c3:
         fa:a2:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:56 2026 by rpki-client