Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09bbdbd-9c73-3fac-aa17-5e42c37d73af.roa
File:                     a09bbdbd-9c73-3fac-aa17-5e42c37d73af.roa (raw, json)
Hash identifier:          ZQZP3pvsEL/WSp2qaiFjZp/VBHkGB7yTFDE4rXh301o=
Subject key identifier:   47:F0:CE:9A:81:7A:CD:84:45:A4:30:21:0D:2A:EF:2F:84:B5:F2:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85E9E8165E542CB9814900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09bbdbd-9c73-3fac-aa17-5e42c37d73af.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        76.114.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:e9:e8:16:5e:54:2c:b9:81:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=cc2b26c2-7e9c-47af-8e76-371fba1a816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:09:44:ef:86:0f:1d:8e:2f:ea:46:12:b9:
                    af:30:68:27:a8:df:c0:a6:a6:5e:35:e1:da:86:96:
                    0c:e8:33:6e:5d:9b:9a:e9:d6:20:95:93:ff:c0:3e:
                    01:91:a8:05:ef:04:95:8b:fb:4e:1e:2f:79:0f:49:
                    2f:a0:79:26:39:39:77:e5:63:65:eb:14:8a:82:74:
                    06:d1:83:81:ec:e5:bc:0f:9e:e8:76:7f:41:37:34:
                    a9:6a:98:b5:59:05:17:7e:1b:c8:a8:a8:b1:f0:c5:
                    4e:f5:5b:96:20:da:b2:59:d9:d7:64:ab:0a:3f:c4:
                    d7:62:72:01:6b:5e:dc:82:f4:33:2b:a9:5a:5a:75:
                    e8:7c:d1:ec:5f:fe:37:5e:1f:9d:84:37:bd:45:76:
                    ce:c2:09:db:f8:e5:cb:b6:51:e5:87:91:88:89:33:
                    92:9d:23:90:dc:5e:81:b1:95:bb:45:2e:45:6e:76:
                    5f:63:00:22:41:8b:9b:67:54:2f:78:3c:cb:92:5a:
                    b5:db:be:a9:34:8e:54:49:40:a8:a8:90:a9:a1:c9:
                    ad:8b:21:a3:d2:38:0d:07:a0:b1:74:bf:f5:70:14:
                    4d:a3:e0:55:14:13:9d:8e:76:33:31:d3:bb:9e:fe:
                    de:2b:18:52:78:28:d1:20:7a:2b:71:49:85:ce:9e:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:CE:9A:81:7A:CD:84:45:A4:30:21:0D:2A:EF:2F:84:B5:F2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09bbdbd-9c73-3fac-aa17-5e42c37d73af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:2b:fe:be:e1:0a:aa:d2:68:2b:fe:71:e2:0b:b8:b6:c2:c0:
         12:36:fe:24:82:1c:fc:2f:a8:ef:b5:ae:b2:ce:eb:87:e0:b2:
         01:a3:56:bb:ee:4c:95:38:47:e7:f8:80:df:02:63:23:f5:eb:
         79:a6:95:f1:c6:6b:13:36:d2:ad:40:14:5e:ff:89:e6:cf:a1:
         21:6e:d3:1b:12:b1:6e:5b:27:79:96:1f:95:3c:66:71:a0:8e:
         ce:6c:1d:e2:9c:fc:59:bf:a9:a6:f1:08:8d:51:13:6c:6a:24:
         0b:26:87:83:fb:f2:86:cf:bc:02:64:e4:de:56:b8:2b:43:32:
         64:53:c8:07:f4:f7:df:c5:0a:cb:40:ab:4c:c5:de:22:49:20:
         2b:e4:33:e5:e7:04:f1:47:98:8b:09:8f:18:88:8c:60:cd:4c:
         b0:37:ed:c0:ca:10:25:29:b9:34:ab:9c:fb:2c:0e:8c:df:03:
         83:90:75:f4:b0:ea:f6:c3:d0:6a:de:5f:69:99:2b:54:78:cf:
         c0:55:3a:df:94:d7:1c:a7:de:16:f2:ee:5c:37:f5:c0:e7:7a:
         70:00:41:1e:5d:e8:ca:8f:e3:19:8b:c7:50:ba:98:de:74:df:
         75:1b:a8:20:2d:83:8d:cc:19:a5:06:b2:aa:5f:26:ca:4f:13:
         a9:47:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:28:38 2026 by rpki-client