Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
File:                     a41a09c6-4c03-3685-a8a0-213adac37033.roa (raw, json)
Hash identifier:          IwKHZGfGeEPwAnWtPI/v1s1JjGrbpm5h61dp19qtlRQ=
Subject key identifier:   77:B2:BA:07:E2:D0:93:77:D0:E8:EC:D9:25:FC:05:98:29:7F:6A:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58FD7D475DDAE4F8ECC080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        76.102.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:fd:7d:47:5d:da:e4:f8:ec:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=290c81d5-4928-44d6-90fe-2ba4582c40dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:6c:40:b4:29:9c:9f:5b:8c:6a:c9:54:4a:
                    8a:9c:cd:de:98:70:83:53:d7:5c:30:20:24:5c:ac:
                    de:b3:ad:c5:b0:3b:0b:25:83:c7:f4:9c:37:e2:45:
                    71:a5:92:92:5e:fd:c7:ae:13:2e:67:bb:97:ee:22:
                    d5:be:0f:a2:bc:dc:58:49:1f:c7:75:ac:b9:6f:33:
                    46:57:f0:e3:a6:1f:a1:b0:28:b6:a9:ee:6c:db:8e:
                    fe:90:80:14:94:9e:d1:0b:91:b3:a6:78:41:2a:47:
                    ce:60:cd:75:20:01:d0:ba:b7:b6:4f:1e:bc:ea:5f:
                    5e:c4:7d:07:93:5f:6f:e6:34:24:12:1a:2d:b6:f8:
                    9a:57:e8:3f:c5:d0:ff:75:3e:14:71:ef:6e:35:29:
                    32:99:35:95:9a:7f:54:00:a7:1d:64:96:0f:6d:89:
                    0a:87:2a:b3:b7:4e:6f:8e:eb:3d:33:db:61:2c:d2:
                    f0:37:90:d3:27:90:66:4f:a8:97:00:c4:1d:57:35:
                    74:93:e5:7b:43:ca:61:47:30:4b:ea:b7:7b:3b:e6:
                    79:04:ba:0c:b2:86:15:9f:b2:70:c0:cd:fe:38:cb:
                    05:f6:70:a1:db:c7:55:1d:08:0e:54:14:6d:97:61:
                    af:11:41:15:c7:03:56:e7:63:c2:d8:af:86:98:9e:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:BA:07:E2:D0:93:77:D0:E8:EC:D9:25:FC:05:98:29:7F:6A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b5:c3:b8:8e:59:b1:78:5a:fb:4d:68:85:fb:ee:ed:5f:68:
         8c:15:1d:4c:72:60:bd:2d:c1:30:01:46:9d:58:52:b4:0e:d9:
         f1:44:d8:ea:9f:61:1e:9f:25:2e:97:85:4b:b3:8a:ab:f9:ed:
         e4:48:82:b5:ab:6e:f8:d6:ed:f9:52:bb:9d:63:96:bd:15:0c:
         07:e6:24:2c:98:8f:e1:d6:7c:3c:b0:70:8b:65:d8:30:70:0e:
         ce:fb:8a:11:83:1d:12:2c:88:74:1f:44:ff:54:5a:6c:cc:c9:
         b0:0e:df:7b:90:bb:48:a7:2b:47:b7:68:e3:08:38:08:bb:9d:
         82:cb:7d:bf:da:5d:04:c0:99:db:97:a3:3e:80:77:5f:e5:a0:
         38:ae:6c:29:51:3d:ad:1f:fe:13:51:32:87:d9:de:ad:44:99:
         40:f7:89:f8:91:6d:f1:7a:e5:a3:d5:7c:89:55:99:39:67:b2:
         0e:bc:d4:f0:24:e8:61:dc:24:02:36:e8:83:33:16:a7:4c:d5:
         cd:2b:6d:0f:18:ab:36:d7:c9:da:b1:44:59:cd:2f:02:2b:35:
         ea:84:de:9f:99:14:e5:72:63:dd:8c:95:a9:9c:be:17:32:ed:
         3e:26:aa:df:f3:ca:23:c2:81:47:d8:5e:0d:a6:45:b9:40:53:
         28:c9:cf:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWP19R13a5PjswIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjkwYzgxZDUtNDkyOC00NGQ2LTkwZmUtMmJhNDU4MmM0MGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthsQLQpnJ9bjGrJVEqKnM3emHCDU9dcMCAk
XKzes63FsDsLJYPH9Jw34kVxpZKSXv3HrhMuZ7uX7iLVvg+ivNxYSR/Hday5bzNG
V/Djph+hsCi2qe5s247+kIAUlJ7RC5GzpnhBKkfOYM11IAHQure2Tx686l9exH0H
k19v5jQkEhottviaV+g/xdD/dT4Uce9uNSkymTWVmn9UAKcdZJYPbYkKhyqzt05v
jus9M9thLNLwN5DTJ5BmT6iXAMQdVzV0k+V7Q8phRzBL6rd7O+Z5BLoMsoYVn7Jw
wM3+OMsF9nCh28dVHQgOVBRtl2GvEUEVxwNW52PC2K+GmJ5j5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHeyugfi0JN30Ojs2SX8BZgpf2pvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQxYTA5YzYtNGMwMy0z
Njg1LWE4YTAtMjEzYWRhYzM3MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTGbsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGu1w7iOWbF4WvtNaIX77u1faIwVHUxyYL0twTABRp1YUrQO2fFE2Oqf
YR6fJS6XhUuziqv57eRIgrWrbvjW7flSu51jlr0VDAfmJCyYj+HWfDywcItl2DBw
Ds77ihGDHRIsiHQfRP9UWmzMybAO33uQu0inK0e3aOMIOAi7nYLLfb/aXQTAmduX
oz6Ad1/loDiubClRPa0f/hNRMofZ3q1EmUD3ifiRbfF65aPVfIlVmTlnsg681PAk
6GHcJAI26IMzFqdM1c0rbQ8YqzbXydqxRFnNLwIrNeqE3p+ZFOVyY92Mlamcvhcy
7T4mqt/zyiPCgUfYXg2mRblAUyjJz/k=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:25 2026 by rpki-client