Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f448683-1e33-3ead-a96d-1a3dbcc9971d.roa
File:                     8f448683-1e33-3ead-a96d-1a3dbcc9971d.roa (raw, json)
Hash identifier:          l4Gmanjva/y5RG83L4g4WdJYxVpuOCi3PPHq42ahYPo=
Subject key identifier:   78:09:C5:9A:D6:AB:56:7B:A3:41:0A:37:39:F2:94:49:42:44:31:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4977BEE3A383507EE4D18980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f448683-1e33-3ead-a96d-1a3dbcc9971d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        76.129.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:be:e3:a3:83:50:7e:e4:d1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f26a2fb2-86c6-4211-b849-7b184abfdbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:e3:31:28:21:01:b5:21:13:eb:18:9d:e9:
                    27:00:5f:ca:57:6a:8e:45:61:fb:36:9a:56:62:40:
                    d0:4c:13:ee:da:74:e0:40:75:78:58:c8:da:c8:36:
                    cc:f8:d8:6a:08:97:9f:dc:54:b9:8b:fd:61:ff:6c:
                    da:5c:27:6f:fb:15:f5:97:ac:e2:77:e8:e7:43:4d:
                    81:67:13:ec:1f:c6:ec:8a:5d:8a:51:d9:67:80:c6:
                    f3:9f:b5:33:27:51:a6:97:7a:47:ce:fc:c2:94:5d:
                    d9:17:34:89:a0:55:de:45:c4:b8:1d:2e:a6:f3:ae:
                    50:44:fb:5b:d8:3d:8a:72:da:11:a1:73:ea:37:31:
                    79:bb:82:b9:dc:7b:74:f3:8b:ad:d6:42:c0:e4:a1:
                    00:97:14:9f:4e:f1:bb:e3:81:05:4f:98:a6:e4:f9:
                    14:c9:a3:82:0b:f7:28:cf:66:05:ac:f9:1e:90:0e:
                    79:02:eb:db:75:a3:bb:2a:8d:63:2a:c4:2b:2f:64:
                    59:de:7e:1c:a1:ab:cd:51:ab:2e:a9:7d:1f:5f:f8:
                    0a:1b:f7:94:1d:61:d0:91:ee:8b:a3:ae:41:69:11:
                    23:c0:fe:c2:ae:94:18:6c:e8:71:ab:97:e5:51:b2:
                    18:5b:d3:e9:22:33:c6:84:79:e2:58:69:18:08:c8:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:C5:9A:D6:AB:56:7B:A3:41:0A:37:39:F2:94:49:42:44:31:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f448683-1e33-3ead-a96d-1a3dbcc9971d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:1a:f3:fa:1f:a5:5d:76:a3:2f:ae:6c:be:62:a1:c9:25:
         2a:3d:08:a0:a7:df:aa:8f:01:4b:82:16:dc:ca:cc:3a:d3:3b:
         4b:fa:b9:35:8d:86:6f:35:70:ce:ef:28:c1:8e:be:12:2c:fa:
         71:03:a0:0f:d4:90:e7:fc:1a:79:0b:84:1e:d1:1e:38:28:c2:
         8f:50:7b:d3:05:e0:5d:b1:2e:0d:57:ac:6b:af:ff:66:9a:df:
         b0:8f:63:75:6c:d3:8a:38:83:5e:11:9e:e6:a5:aa:4e:63:17:
         84:a7:ab:75:13:49:f3:27:0d:54:f8:10:82:4d:75:83:3c:59:
         54:8c:f1:1a:e9:5e:41:45:f4:eb:db:6a:87:b3:34:d7:90:81:
         35:e4:58:0d:f5:75:b5:33:4b:4d:e2:cb:8b:68:91:68:04:38:
         29:9b:e6:ad:2b:16:08:91:21:10:a3:07:ab:ed:1e:ae:1a:91:
         5f:92:76:76:50:12:e5:ae:71:4e:0a:96:c4:da:d8:a0:af:e6:
         e5:2d:9c:92:0d:26:f6:d8:85:c5:80:87:be:01:fe:d2:23:1c:
         8f:29:f1:d1:69:20:f9:8a:99:b0:5a:08:59:27:3b:e1:dc:94:
         8e:87:10:c0:1b:57:a6:00:0b:47:91:08:ff:19:45:d3:35:15:
         cc:13:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:29:09 2026 by rpki-client