Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83a25145-5a9b-3421-9f21-2c8dab2e66a5.roa
File:                     83a25145-5a9b-3421-9f21-2c8dab2e66a5.roa (raw, json)
Hash identifier:          CBRc9yjIR8Tz2HOySeZ2hjdyiFs/Za12yMTq8mxUgdE=
Subject key identifier:   73:8F:CB:CF:71:DC:17:EC:F5:16:D6:9F:5B:5B:0D:03:7B:01:7B:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9DDBE2623EC35C2B3F500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83a25145-5a9b-3421-9f21-2c8dab2e66a5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33662
IP address blocks:        76.30.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:dd:be:26:23:ec:35:c2:b3:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=c12f3b09-f334-47ba-bf4b-4f2597f969e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:2f:0b:fb:25:ed:73:3a:53:a0:7c:82:c0:
                    d7:d9:84:3e:a8:90:af:09:7c:c5:af:b8:44:8c:6a:
                    72:d1:b6:b7:dd:6a:e9:42:7e:d9:1f:3a:75:57:21:
                    7f:f3:44:89:21:2d:e4:d7:61:e0:d0:47:04:ad:ea:
                    25:d7:88:03:c0:28:82:d3:3c:29:b1:70:d0:0f:94:
                    64:ca:e2:aa:65:66:74:93:49:8c:b6:14:3c:a8:e8:
                    ba:0a:f8:7a:dc:6e:73:1d:85:73:84:9d:51:ac:0b:
                    4e:10:36:ae:e7:02:f3:79:e3:d3:86:b9:c4:93:d1:
                    b1:ab:3a:c7:cc:73:88:96:0d:f0:8c:f2:95:59:95:
                    11:fe:02:30:6c:f5:df:e6:83:b9:16:e9:98:a2:2b:
                    ab:4b:ec:08:52:e3:89:01:14:9a:05:69:ca:50:59:
                    7d:b4:21:20:fc:35:3d:0d:b8:0b:ec:d8:8e:a8:a9:
                    47:aa:9b:59:12:e0:1e:22:5a:d0:87:a2:a6:37:35:
                    8a:c1:40:66:0c:10:38:aa:26:2b:62:91:ec:c8:a7:
                    5e:af:a1:c5:cd:47:dd:53:6c:25:64:d2:22:e4:af:
                    45:4d:73:e7:d0:06:da:f1:55:e5:8d:e7:4b:52:62:
                    92:94:fb:5c:89:64:8a:ca:6c:7d:83:3d:4f:21:68:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8F:CB:CF:71:DC:17:EC:F5:16:D6:9F:5B:5B:0D:03:7B:01:7B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83a25145-5a9b-3421-9f21-2c8dab2e66a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:76:d6:1f:7c:2f:f9:33:68:41:44:17:e1:ef:25:07:13:41:
         52:12:b5:8e:9d:2e:09:9d:06:9f:b7:96:8a:07:51:cf:86:0c:
         a7:72:45:7c:d1:6f:d3:14:c7:3a:c5:24:34:d0:3d:36:b0:2c:
         57:4c:0f:fb:46:3c:88:c3:d3:77:8e:1d:d3:89:ae:e6:93:54:
         de:cf:3a:d4:f5:00:b9:3d:1c:0c:8a:54:f5:8e:fc:a8:58:45:
         5e:d3:ab:40:46:7f:5e:ec:0b:71:66:86:59:3c:29:f3:4c:90:
         64:fd:97:37:32:fd:7b:45:23:23:1b:6a:d5:87:55:c7:d2:33:
         5a:2c:7d:8e:36:46:8d:e6:d7:d1:d0:6e:3c:24:cd:d7:78:6f:
         d1:0b:ae:96:24:36:3f:d7:58:9d:c5:69:b4:ae:5f:a6:6e:89:
         c6:8b:96:89:2c:3c:d7:68:65:c5:c4:b9:bc:93:2a:22:1b:4c:
         a2:49:de:60:6a:ea:ef:22:6c:f7:96:6e:26:4b:e7:a3:54:98:
         0f:1b:48:41:4e:c7:ce:67:51:98:c0:63:dc:9a:b9:d8:51:14:
         3a:08:a0:50:c0:85:45:00:46:72:10:ac:de:0e:e1:42:10:47:
         0a:89:48:e7:9e:7a:cc:76:a8:fc:fb:78:7a:4a:db:d2:92:a7:
         bd:3e:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:36 2026 by rpki-client