Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55441090-873f-3254-a142-7f19a87c50cb.roa
File:                     55441090-873f-3254-a142-7f19a87c50cb.roa (raw, json)
Hash identifier:          4B+7BUV9+rDLmUvZpOIcGzE4yxAcia3k2TVxiMJgVcE=
Subject key identifier:   74:0C:5B:61:20:6C:DC:E5:ED:9B:D6:BF:E0:1C:D3:56:FE:7F:F0:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC6CA826ED9C2552651900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55441090-873f-3254-a142-7f19a87c50cb.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        174.170.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:6c:a8:26:ed:9c:25:52:65:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=e2f5e076-feef-47e0-8ed6-2e7bcdb06428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:17:40:d5:01:b1:47:9e:15:e7:0d:5b:ff:
                    f1:fd:76:8f:8a:30:bc:14:da:73:46:00:6d:e0:f0:
                    de:48:3f:03:72:f6:a3:03:41:f3:6a:e5:16:bf:90:
                    ba:d9:36:83:f1:59:d6:f8:94:59:86:26:a5:63:c6:
                    59:9b:e6:53:55:39:b4:7c:c5:20:55:51:ec:64:97:
                    d2:c3:05:71:5b:49:54:29:cb:ca:cf:ef:c7:a5:00:
                    b4:b6:52:d4:ac:3f:d4:0f:e0:70:7a:d9:4a:e8:c8:
                    b2:91:16:a1:bb:c9:e7:c8:ff:8c:5c:0f:bc:34:22:
                    1c:14:d1:c9:4e:94:fa:12:5f:a7:b1:0e:56:2e:ea:
                    d2:e4:00:43:e7:5a:cf:d1:09:61:ad:81:e4:3e:d1:
                    90:49:c8:07:a8:fa:61:3d:7a:a2:fa:56:62:94:66:
                    fa:0b:ae:2e:a4:d2:ff:a3:43:9d:48:cb:01:cd:01:
                    75:d4:be:b1:4a:71:56:2c:2b:4a:30:bf:af:ad:82:
                    db:bd:b1:68:44:08:32:c1:c3:37:e5:e1:5d:12:1f:
                    62:a4:cb:f0:d1:90:f9:2d:68:c9:6c:2d:30:fa:a0:
                    94:7e:21:bb:2d:02:af:93:c6:04:da:1b:cd:f6:ac:
                    cd:2b:a7:16:88:a9:87:fd:8d:1d:64:77:3c:97:bc:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:5B:61:20:6C:DC:E5:ED:9B:D6:BF:E0:1C:D3:56:FE:7F:F0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55441090-873f-3254-a142-7f19a87c50cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:cc:b0:a4:da:7c:52:95:f8:1a:20:9b:19:67:65:b2:d4:
         1d:ed:a8:4a:51:8a:d4:80:d2:1e:5d:6c:51:ca:c8:3e:92:d9:
         b8:56:ca:bb:5a:0b:8e:d1:4c:73:ff:1d:bd:7f:ec:75:64:84:
         c7:be:24:03:fa:29:79:06:93:c1:11:3b:c1:3c:17:28:3c:09:
         5e:37:5e:74:54:47:e6:d5:00:06:7f:91:49:33:2e:a5:57:57:
         1b:2f:cf:da:52:ec:d7:81:c3:7a:13:d7:c5:29:a6:76:00:5e:
         b2:a6:0f:02:8f:49:44:1f:8a:72:e7:2b:18:ad:e1:85:c0:b9:
         c6:f5:61:d5:61:0f:24:d0:af:a8:59:0e:37:16:3a:79:75:b1:
         c7:3a:b3:8d:bd:9d:8f:aa:1d:9b:f3:2f:03:35:59:f5:12:40:
         5f:b2:cc:3e:24:0d:71:b0:a3:fc:a2:b3:36:1b:b1:1b:34:a9:
         62:13:31:8f:98:2c:5a:72:96:8e:2a:ee:7e:7a:fc:25:38:f5:
         ae:8c:26:fd:fe:e8:46:06:f9:03:29:b8:ca:e0:83:28:29:0c:
         7f:07:a2:0a:d9:88:d9:c3:17:8e:97:78:4c:37:75:87:40:29:
         48:69:ae:33:81:70:d6:b4:6d:2e:c6:4e:1f:78:ef:aa:c3:af:
         a3:bd:e7:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGyoJu2cJVJlGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ZTJmNWUwNzYtZmVlZi00N2UwLThlZDYtMmU3YmNkYjA2NDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3YXQNUBsUeeFecNW//x/XaPijC8FNpzRgBt
4PDeSD8DcvajA0HzauUWv5C62TaD8VnW+JRZhialY8ZZm+ZTVTm0fMUgVVHsZJfS
wwVxW0lUKcvKz+/HpQC0tlLUrD/UD+BwetlK6MiykRahu8nnyP+MXA+8NCIcFNHJ
TpT6El+nsQ5WLurS5ABD51rP0QlhrYHkPtGQScgHqPphPXqi+lZilGb6C64upNL/
o0OdSMsBzQF11L6xSnFWLCtKML+vrYLbvbFoRAgywcM35eFdEh9ipMvw0ZD5LWjJ
bC0w+qCUfiG7LQKvk8YE2hvN9qzNK6cWiKmH/Y0dZHc8l7zxsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQMW2EgbNzl7ZvWv+Ac01b+f/DDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU0NDEwOTAtODczZi0z
MjU0LWExNDItN2YxOWE4N2M1MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLDzLCk2nxSlfgaIJsZZ2Wy1B3tqEpRitSA0h5dbFHKyD6S2bhWyrta
C47RTHP/Hb1/7HVkhMe+JAP6KXkGk8ERO8E8Fyg8CV43XnRUR+bVAAZ/kUkzLqVX
Vxsvz9pS7NeBw3oT18UppnYAXrKmDwKPSUQfinLnKxit4YXAucb1YdVhDyTQr6hZ
DjcWOnl1scc6s429nY+qHZvzLwM1WfUSQF+yzD4kDXGwo/yiszYbsRs0qWITMY+Y
LFpylo4q7n56/CU49a6MJv3+6EYG+QMpuMrggygpDH8HogrZiNnDF46XeEw3dYdA
KUhprjOBcNa0bS7GTh9476rDr6O956A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:52 2026 by rpki-client