Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5269fed3-0e38-345f-88ce-ccf659ad67d4.roa
File:                     5269fed3-0e38-345f-88ce-ccf659ad67d4.roa (raw, json)
Hash identifier:          cpNzsC00qer5D7Q0s+ig7n14mj/wRbTWLaJJHVeYDmY=
Subject key identifier:   1F:9A:4D:7B:9B:89:EE:75:77:02:32:03:50:9F:92:EE:BD:2E:3F:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58836814D5AC77A48A97C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5269fed3-0e38-345f-88ce-ccf659ad67d4.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        76.141.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:83:68:14:d5:ac:77:a4:8a:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=acce3d8a-8b37-4e94-8052-2e01d781de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:3a:cf:67:c9:a7:4f:f5:65:07:5e:45:0e:
                    c5:e5:e2:bc:00:02:e7:f9:f9:0f:3a:6d:86:5f:ac:
                    8b:09:61:70:90:ee:26:42:52:f3:22:bd:29:4e:7a:
                    0d:3a:7b:47:b4:c7:4f:57:ad:40:82:14:b3:88:e1:
                    f1:2d:df:5f:3a:ac:29:e5:b8:b5:04:22:35:c3:8f:
                    ba:44:91:38:53:36:5c:6c:bf:5e:da:e3:c2:df:01:
                    0f:fb:5d:87:e1:a5:73:56:d2:d4:fe:a6:ab:12:41:
                    7a:10:27:32:aa:f8:5e:0e:14:87:82:11:c8:c8:42:
                    b3:8c:b8:4a:cf:dd:7d:d6:ac:3b:92:be:56:02:00:
                    43:2b:0e:9f:99:ed:b0:e7:f3:47:73:c8:e8:fd:51:
                    4c:fc:54:d0:d7:96:39:ab:33:50:0a:51:62:00:be:
                    93:bd:e3:94:72:89:dc:54:43:27:fa:d2:0e:b3:cd:
                    c8:77:ea:58:d4:b5:b0:9b:aa:c6:55:80:30:20:fa:
                    f8:37:d5:b9:dd:7c:69:b3:93:ea:a2:45:35:62:33:
                    ce:24:8c:c9:d2:f8:06:cd:6d:d5:12:c8:e0:78:59:
                    9d:c4:b0:83:41:90:5a:6e:b8:3e:48:2e:46:a1:f2:
                    ec:9d:a7:3d:32:df:5b:cc:ea:95:0e:ba:6a:42:79:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9A:4D:7B:9B:89:EE:75:77:02:32:03:50:9F:92:EE:BD:2E:3F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5269fed3-0e38-345f-88ce-ccf659ad67d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:7b:58:c6:d2:f7:04:af:7a:38:b2:ab:9c:69:f7:e8:6c:
         77:72:b0:2e:9a:66:79:d7:93:ed:92:78:ef:29:c4:82:de:68:
         fc:0f:46:31:91:5c:c2:9b:2b:6d:4b:47:f1:c6:de:dc:10:b0:
         4b:1e:0b:31:eb:fa:e4:08:d8:ce:03:47:f7:4b:d3:3d:a6:59:
         5a:32:14:2e:47:72:46:ac:a3:25:57:4a:1e:53:a3:f0:9a:85:
         3e:78:90:80:69:5f:6d:ca:6f:2c:6c:a4:58:6b:44:9f:c9:e5:
         83:2d:ba:82:c2:45:54:2e:d4:eb:78:64:ab:c2:c9:f0:b6:5d:
         60:f5:6b:c5:2d:ff:73:ba:94:b2:77:e0:ab:bc:ac:8a:4d:06:
         7b:d5:7a:3a:20:63:62:5e:da:40:05:b7:31:50:88:51:d2:c0:
         47:25:cc:6a:42:a5:24:03:77:2e:b1:e9:1b:82:46:b6:45:1c:
         4f:d4:62:41:c3:45:7a:17:b0:48:de:a0:ab:d2:94:5c:77:bd:
         24:4f:f0:5a:31:a4:8e:fe:d3:41:f8:d2:e4:8c:c2:2d:48:47:
         dd:3e:63:fe:e7:ab:80:46:8b:c6:b0:f3:b9:59:33:78:22:eb:
         6b:09:8c:16:e2:8f:62:59:ed:69:19:91:f9:18:bc:32:27:6c:
         6a:d5:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:39 2026 by rpki-client