Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ac784-7682-347c-9864-2ccf724ff514.roa
File:                     7e8ac784-7682-347c-9864-2ccf724ff514.roa (raw, json)
Hash identifier:          5AXUec67/kCrNhaPR8+pyAm4O5Zs6v3ux7YyIO8VxNc=
Subject key identifier:   24:85:44:B3:1E:78:ED:70:61:9A:7B:AF:E0:96:1D:E2:19:88:95:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE59688F8D4D56CA4A4A79C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ac784-7682-347c-9864-2ccf724ff514.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        174.52.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:68:8f:8d:4d:56:ca:4a:4a:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5875e36b-6024-4594-96c6-c00b95f227eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:80:c0:4d:27:50:ec:97:66:1b:fb:e8:83:
                    41:5a:81:6a:b0:66:12:05:31:f3:36:76:1d:63:87:
                    e2:b5:aa:e2:a8:77:b3:00:be:93:57:6e:5b:1b:60:
                    30:92:2a:92:78:02:61:5b:38:13:8a:da:09:55:1e:
                    56:1e:8a:57:b9:dc:0b:2e:22:20:da:3d:78:fc:67:
                    05:4d:a1:d9:c4:a8:76:c7:2b:76:b7:f2:9e:49:ec:
                    db:f7:d4:aa:82:ce:b7:8d:11:42:3a:c2:a4:d3:d6:
                    0f:87:81:b3:bb:69:07:50:2d:95:4f:d7:47:8a:cf:
                    4a:86:5a:0c:d9:da:c8:f3:75:36:05:8e:a6:e5:3c:
                    eb:d1:6e:c9:57:c4:fb:7b:69:04:4a:61:de:d7:e2:
                    1c:d4:73:a9:61:1e:b0:73:2e:31:7b:7a:6d:95:74:
                    55:36:98:2c:41:9a:be:0b:7d:48:7a:fd:74:55:56:
                    e8:95:2e:cf:5f:19:38:06:4c:32:c0:d9:76:a2:3b:
                    4c:c1:56:67:c7:50:d5:f8:74:e0:ec:a6:89:aa:f8:
                    d1:98:b6:6a:35:b4:3e:b0:af:68:63:53:57:4a:cd:
                    6b:fc:cb:95:0d:7d:81:71:a5:a6:b1:bc:d7:36:b1:
                    1b:7d:32:8f:31:c2:f7:49:52:87:64:78:e1:51:05:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:44:B3:1E:78:ED:70:61:9A:7B:AF:E0:96:1D:E2:19:88:95:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ac784-7682-347c-9864-2ccf724ff514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:76:a3:c1:bf:93:e9:a6:55:e3:20:e8:cf:da:3b:c4:ef:
         90:ab:e5:01:4d:66:4b:33:41:4d:e0:b2:1d:82:30:f4:5a:35:
         d1:50:43:ab:d5:18:83:71:3f:7d:06:4a:a3:e5:6c:01:eb:f4:
         25:3d:65:db:ed:cc:85:41:74:84:af:a2:82:c6:40:76:5c:c6:
         95:dd:7c:6c:17:5b:a3:6a:c8:d2:be:b2:50:13:18:24:e2:de:
         fc:a1:f4:0b:9b:e4:62:16:46:56:e0:88:ee:ae:04:08:6e:01:
         12:55:47:55:75:72:c9:11:7a:a2:dc:00:bd:4b:18:71:b5:fc:
         e1:08:89:53:6e:41:09:b6:7d:39:e4:db:86:0d:76:8a:7c:37:
         3f:68:4f:31:2c:e2:7c:f1:b8:62:be:bc:78:4f:1e:d3:ec:5b:
         b2:59:f9:46:19:f8:7f:91:1f:5b:3e:5e:cf:79:59:09:89:70:
         04:7a:46:d9:70:bf:ed:cf:49:98:0b:f9:b7:4c:06:f8:85:ba:
         a3:c1:9a:6d:95:a1:94:eb:f1:b3:34:f6:13:b2:ed:fc:6f:9c:
         27:bd:bb:76:38:56:04:cb:1f:d9:2b:a0:97:e8:f1:df:49:28:
         e1:02:f3:94:40:8a:03:90:ac:28:65:7b:2f:81:e2:5e:ee:76:
         fe:8b:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:56 2026 by rpki-client