Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dcdc0ba-7c0e-3171-b1a9-481d497643da.roa
File:                     5dcdc0ba-7c0e-3171-b1a9-481d497643da.roa (raw, json)
Hash identifier:          y8P7gBRMX7KqM28owst4KLb/rbd1eveGxKvjXJN4BA0=
Subject key identifier:   0B:73:19:A4:1D:63:FE:E3:6F:61:28:76:D5:F6:89:60:BA:A3:FE:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BD2A6BA49F39F2AF84400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dcdc0ba-7c0e-3171-b1a9-481d497643da.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        71.57.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:d2:a6:ba:49:f3:9f:2a:f8:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1d8d5af6-8b0c-4a7f-b38e-3ffc6e363c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:04:be:6d:b1:e6:ca:23:72:24:9e:ea:1d:
                    6e:1d:3d:9f:79:d9:2e:07:b4:73:2f:cd:61:c7:78:
                    36:f2:dc:57:a7:36:9f:f2:5a:e5:eb:07:c8:8a:67:
                    ba:b4:1f:1e:77:9d:37:68:fc:d1:90:9a:39:39:34:
                    d9:da:d4:ea:e3:7c:d2:d9:95:b6:d8:9d:47:7f:d1:
                    12:2b:14:23:8b:f2:9b:1d:89:37:11:4c:c2:0d:87:
                    7e:1d:1f:91:bc:f4:ce:6f:8f:c2:47:c2:38:de:ef:
                    c8:06:88:1b:41:e8:30:65:eb:93:9f:b6:88:7b:9e:
                    ef:08:3c:b5:13:ba:85:1c:bb:1e:1e:c8:53:52:35:
                    f9:b6:48:9c:e4:d8:06:5e:a8:5b:98:63:ec:a3:ee:
                    96:16:30:66:6f:1c:be:ac:2f:dd:a3:ba:c9:78:2c:
                    f7:d7:15:a0:4d:c2:63:2c:fe:3e:6b:c6:2e:8f:33:
                    d9:16:15:35:74:87:f3:ff:28:8a:35:3d:8f:8f:e2:
                    8f:db:c5:28:53:f6:e3:5d:ea:cb:83:50:a4:28:63:
                    f9:a4:61:58:b2:c8:c1:5f:b4:c8:c2:9d:34:78:c0:
                    2b:95:9d:41:21:1e:2b:b5:27:e7:99:17:71:ac:a0:
                    fb:5f:6e:8a:c3:1e:6c:2b:97:38:19:92:89:45:19:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:19:A4:1D:63:FE:E3:6F:61:28:76:D5:F6:89:60:BA:A3:FE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dcdc0ba-7c0e-3171-b1a9-481d497643da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:7f:f4:a4:0c:16:e7:aa:10:2a:aa:e4:6c:50:f5:f7:47:
         1c:37:4c:75:78:9d:1c:ae:df:14:f9:61:13:9c:1b:4f:36:a1:
         b7:69:a0:c4:9e:aa:87:85:63:7b:b1:76:d8:ca:a9:6e:87:2e:
         36:17:b2:72:e2:2d:6c:87:e4:93:77:1c:d6:5a:41:5b:95:38:
         42:77:1c:c4:6e:81:7d:45:45:4e:08:0a:e5:3f:e6:69:d1:29:
         4d:f4:c1:61:20:c4:d8:de:d2:1b:d8:8d:3d:5b:4f:a2:b3:28:
         41:9a:19:46:11:f6:b5:fd:ae:a9:8b:1f:8b:5c:78:cc:2e:7c:
         17:67:82:44:5c:56:e1:59:fb:a5:f6:aa:4e:73:65:2f:5f:1f:
         79:21:39:31:56:20:be:ca:cd:fd:22:21:ca:88:8b:cb:3f:88:
         6d:f1:2b:32:4e:a0:93:7e:fa:b3:63:44:95:d2:dd:ec:e4:ca:
         3f:e5:22:34:ad:65:8a:d9:5f:4b:bd:95:73:32:a7:7a:cc:35:
         6a:81:59:c3:8f:df:b3:00:71:99:64:a5:ba:86:cc:00:f0:0d:
         77:de:10:13:6b:ab:49:96:ea:24:24:ad:13:d7:45:76:95:f2:
         bd:1a:30:3c:2c:27:18:54:7b:c4:89:34:b7:55:0c:ef:c2:61:
         64:84:2d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW9Kmuknznyr4RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MWQ4ZDVhZjYtOGIwYy00YTdmLWIzOGUtM2ZmYzZlMzYzYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiwEvm2x5sojciSe6h1uHT2fedkuB7RzL81h
x3g28txXpzaf8lrl6wfIime6tB8ed503aPzRkJo5OTTZ2tTq43zS2ZW22J1Hf9ES
KxQji/KbHYk3EUzCDYd+HR+RvPTOb4/CR8I43u/IBogbQegwZeuTn7aIe57vCDy1
E7qFHLseHshTUjX5tkic5NgGXqhbmGPso+6WFjBmbxy+rC/do7rJeCz31xWgTcJj
LP4+a8YujzPZFhU1dIfz/yiKNT2Pj+KP28UoU/bjXerLg1CkKGP5pGFYssjBX7TI
wp00eMArlZ1BIR4rtSfnmRdxrKD7X26Kwx5sK5c4GZKJRRnKRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtzGaQdY/7jb2EodtX2iWC6o/4QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRjZGMwYmEtN2MwZS0z
MTcxLWIxYTktNDgxZDQ5NzY0M2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRzlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVOf/SkDBbnqhAqquRsUPX3Rxw3THV4nRyu3xT5YROcG082obdpoMSe
qoeFY3uxdtjKqW6HLjYXsnLiLWyH5JN3HNZaQVuVOEJ3HMRugX1FRU4ICuU/5mnR
KU30wWEgxNje0hvYjT1bT6KzKEGaGUYR9rX9rqmLH4tceMwufBdngkRcVuFZ+6X2
qk5zZS9fH3khOTFWIL7Kzf0iIcqIi8s/iG3xKzJOoJN++rNjRJXS3ezkyj/lIjSt
ZYrZX0u9lXMyp3rMNWqBWcOP37MAcZlkpbqGzADwDXfeEBNrq0mW6iQkrRPXRXaV
8r0aMDwsJxhUe8SJNLdVDO/CYWSELT8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:07 2026 by rpki-client