Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f136aa1-41af-3c22-9e2a-2c8ecbaa15f3.roa
File:                     9f136aa1-41af-3c22-9e2a-2c8ecbaa15f3.roa (raw, json)
Hash identifier:          Y5jOoiKlr97PMZ0OmFI7ZPDzyzsZGaTY0CsOGQAuWrY=
Subject key identifier:   4A:FE:C7:CF:C2:76:94:03:A9:FD:6A:98:35:4C:8B:8B:9F:94:7F:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81005CE1A1B900C1C7A34900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f136aa1-41af-3c22-9e2a-2c8ecbaa15f3.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        174.49.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:5c:e1:a1:b9:00:c1:c7:a3:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=2c56ea62-a590-4ce2-9e43-15513e2e8341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:17:ad:85:3d:5b:c3:1f:32:26:bb:cc:71:
                    d3:40:51:c1:95:8d:33:ae:5f:d9:16:4f:fd:20:54:
                    5b:ca:5a:94:e8:65:d0:df:5c:c7:e3:d8:2f:f7:bc:
                    a9:61:4b:51:2a:3c:d8:18:88:1f:74:9f:ff:a1:1f:
                    2b:b0:20:9c:11:31:b4:fa:99:67:32:de:b7:fc:9f:
                    bb:57:c6:5d:73:d1:b8:a5:ba:c8:f7:01:2b:0f:06:
                    8c:aa:f6:d3:1a:c7:72:2f:a4:9f:84:cc:1e:89:cb:
                    42:ef:11:ca:e2:80:56:36:50:0e:32:d1:26:d5:d7:
                    0d:ac:51:9b:7f:a8:9f:d7:71:52:f2:4b:6d:d2:00:
                    7e:89:38:46:53:ed:ae:a0:f1:61:2a:64:1c:e9:91:
                    25:25:ba:d2:cb:55:78:c1:bd:bc:2b:28:ca:ee:c9:
                    62:0b:94:c5:67:11:85:ed:94:4d:6a:14:74:3a:30:
                    a6:77:81:78:65:26:2e:74:6c:e7:c9:cf:d6:63:11:
                    1b:84:92:35:71:bc:27:58:50:95:45:4d:04:0b:53:
                    2b:12:83:95:35:b0:43:cc:10:b4:ec:33:83:a9:fa:
                    53:8f:ba:bc:33:f6:fc:72:b7:e0:da:b7:d8:d4:f6:
                    bc:84:78:c7:6b:db:7f:b0:29:41:bd:3d:ac:48:e4:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:C7:CF:C2:76:94:03:A9:FD:6A:98:35:4C:8B:8B:9F:94:7F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f136aa1-41af-3c22-9e2a-2c8ecbaa15f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.49.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:85:ff:e3:18:e2:ed:dd:72:49:1f:69:8c:4e:b0:72:a4:
         48:fd:af:0c:b8:1d:6a:ed:fb:47:62:02:aa:14:09:2d:56:93:
         57:be:95:25:4e:c2:94:43:12:17:23:73:1e:13:08:c9:19:39:
         ea:68:0d:43:3f:67:22:ad:f1:e8:e5:57:5c:8d:79:b6:52:44:
         d2:53:f7:ee:04:35:f5:86:80:d3:71:b7:1d:d8:0d:15:34:95:
         eb:6c:39:6e:0f:c6:49:57:f5:f5:a8:25:1d:3c:b6:87:8e:f3:
         c5:62:2d:15:8b:62:4d:a1:18:94:78:df:59:7c:ad:cc:79:4c:
         df:44:b3:a2:df:46:34:4a:24:af:bb:f4:e6:74:a3:fa:32:61:
         e4:58:68:37:2e:a7:fc:30:0b:15:ad:f1:aa:92:6f:68:8c:a9:
         ed:40:4c:53:64:12:c5:7a:6a:f5:f6:65:4d:5f:1b:52:4c:b7:
         88:47:d9:4d:73:5a:dd:5e:bb:89:e8:78:96:ce:cb:75:84:7c:
         a2:86:cb:af:bc:98:e4:d6:78:20:ca:d1:ae:36:0c:df:ff:d1:
         2c:cb:9e:3d:ca:24:ab:17:2f:7a:3e:4f:db:75:6e:e1:ec:ad:
         87:b1:1d:76:9f:d5:9c:81:78:1f:4e:f7:80:07:e8:cc:73:61:
         67:9e:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:21 2026 by rpki-client