Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996697f5-1747-309d-adcc-311894512c67.roa
File:                     996697f5-1747-309d-adcc-311894512c67.roa (raw, json)
Hash identifier:          Bbs4+REY2FbNpeZ/IiBLpYWX/7Uxp/5yraVKRyUjFYA=
Subject key identifier:   59:DA:65:F7:77:39:BD:61:F0:C6:49:74:6A:D0:45:CC:A5:74:90:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497889C87DC23764D662C9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996697f5-1747-309d-adcc-311894512c67.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        67.180.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:89:c8:7d:c2:37:64:d6:62:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=364f0ce2-4f8e-4437-b58a-db53523996e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:fe:d9:50:40:6e:74:54:11:d3:e8:1b:2f:
                    59:9f:41:0e:8b:20:33:68:c2:e5:3f:a5:5a:6a:05:
                    cd:90:30:74:ac:ff:0e:97:bf:b2:6d:95:e5:f1:5a:
                    fe:a7:f5:d0:db:e2:48:0e:b8:49:b2:dc:a5:87:54:
                    4a:87:6d:3d:74:ba:93:86:a5:13:d0:1e:88:d9:9b:
                    51:f7:23:e5:ca:36:91:6a:fc:b3:d3:3f:d7:d1:21:
                    08:49:d8:26:46:1b:b1:14:fd:ca:d3:01:69:d1:84:
                    4a:be:ee:b4:7f:29:a9:24:76:ac:bd:1f:5b:de:83:
                    70:6f:85:09:07:d8:4d:3e:b5:12:d5:1a:f8:bb:bc:
                    b7:b2:ab:04:5c:64:1d:7e:8f:8c:c0:bf:79:94:d5:
                    d6:5e:0d:f8:86:f8:d9:88:7d:00:9a:bd:e4:b1:fe:
                    1e:f8:d3:86:58:ea:32:09:65:ea:ac:66:6d:f3:6d:
                    1c:45:16:fd:03:61:ac:b3:05:41:c5:67:04:ba:cf:
                    e9:19:0a:6f:53:0a:2e:b0:b5:75:48:0a:d5:30:b7:
                    d3:be:f2:52:df:e8:0d:eb:a4:b9:e6:70:a3:25:b3:
                    23:36:19:35:ab:12:55:4e:ed:66:26:d7:28:5d:de:
                    0d:0f:00:5a:95:83:76:99:a1:d7:c8:72:ec:ac:c7:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:65:F7:77:39:BD:61:F0:C6:49:74:6A:D0:45:CC:A5:74:90:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996697f5-1747-309d-adcc-311894512c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:7c:4f:6d:9d:38:2f:e9:a8:53:63:62:76:a5:17:a8:a2:
         89:c4:4f:7a:52:c9:e8:e7:f5:45:9d:6c:88:3c:69:a6:2d:87:
         47:e0:27:45:91:95:a3:67:34:27:fe:f8:f0:84:8a:99:09:87:
         83:ea:73:0b:9a:71:4f:b4:e1:14:c1:05:65:e9:a4:8e:5d:14:
         6b:5e:17:9f:38:5c:0f:53:da:03:97:2d:10:79:44:01:e4:80:
         94:3c:1c:87:16:4f:b8:fa:d5:04:45:d2:e6:2a:8c:e8:88:f3:
         15:a8:e6:49:b6:d3:cc:29:9e:98:0d:52:50:f8:14:eb:f8:f6:
         6d:36:a3:16:8c:be:e4:ea:49:82:3d:b1:ef:51:0a:58:c5:69:
         4f:ad:82:fb:b9:ea:d4:75:63:a9:26:dd:f9:7b:0c:a0:15:12:
         5d:33:e4:2a:16:88:0f:b5:21:1f:c8:40:f9:cf:c1:ec:29:e9:
         0a:ec:ac:4e:69:ae:28:ec:08:45:68:f9:78:ae:f0:21:fc:8e:
         6e:eb:88:93:a8:af:32:9f:05:da:ee:da:9e:74:90:da:51:82:
         cf:66:ee:e0:c8:5c:85:96:c2:55:56:19:4a:ab:21:1c:4b:06:
         0e:22:1b:97:e4:2e:35:bc:aa:08:64:db:43:fd:68:1c:93:86:
         df:c0:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:14:06 2026 by rpki-client