Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1ec65c2-5086-3388-a3d4-100a32832013.roa
File:                     b1ec65c2-5086-3388-a3d4-100a32832013.roa (raw, json)
Hash identifier:          IkoLIlWs2+BQnbqbrPPy1fg5yMpCO+tflat7AwV4qiY=
Subject key identifier:   C6:7B:6F:3E:87:34:01:CF:52:E1:11:DD:7D:C5:32:23:D5:80:07:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC2BA6328235394DD05DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1ec65c2-5086-3388-a3d4-100a32832013.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        107.4.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:2b:a6:32:82:35:39:4d:d0:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=fb946c90-e77f-4eeb-b776-f9619c2172f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:cf:92:dd:22:b5:6d:87:da:8d:34:9b:35:
                    00:15:db:b3:ab:66:5a:6b:45:57:3e:0a:48:2c:16:
                    b4:48:c7:48:45:0e:c9:ee:59:31:0a:d2:8d:d5:04:
                    ec:d5:70:8f:f8:34:02:cf:aa:9e:00:79:30:56:8d:
                    ee:46:36:a1:73:51:13:3f:ec:23:3e:74:c0:9f:ab:
                    ae:6f:32:b0:ae:eb:ee:b2:7b:33:ae:44:92:41:94:
                    6d:48:54:45:74:7d:e3:16:c0:36:b3:55:e8:fb:38:
                    da:0b:79:89:fd:b7:a3:a9:a3:96:1d:50:19:35:c0:
                    cb:02:dc:fc:e2:f7:78:cb:bb:b1:b5:a7:2a:75:72:
                    1e:b6:cd:53:ee:3b:da:65:a0:9f:a1:a8:39:25:31:
                    83:28:c7:ab:5f:85:b7:b5:c1:18:0c:1e:f7:2d:3a:
                    2a:18:b5:bc:a3:be:bf:c6:f6:5d:69:f9:dc:6c:e2:
                    de:b1:4c:e9:6d:23:ea:b6:b1:10:86:ac:f9:4d:f7:
                    43:4b:c0:05:50:6c:96:06:de:f8:9b:2c:ca:36:e9:
                    8b:cb:ae:c2:e1:c8:9d:b0:ba:02:56:7b:d2:1a:4f:
                    b6:87:dd:83:1d:64:6b:f5:68:94:2b:bd:e1:e4:a9:
                    13:4d:58:6c:b4:a9:29:fc:ee:03:3c:b1:37:44:3a:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7B:6F:3E:87:34:01:CF:52:E1:11:DD:7D:C5:32:23:D5:80:07:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1ec65c2-5086-3388-a3d4-100a32832013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:69:15:0e:95:11:05:48:01:b5:84:e8:4c:9d:d8:b9:35:eb:
         62:7f:a2:e9:07:02:b2:d4:16:6f:33:92:c7:cc:d3:14:00:f0:
         fd:2e:56:f0:33:b6:74:94:b6:05:6e:65:da:71:b5:c2:16:b7:
         25:ae:df:e7:04:fd:6a:c9:5c:cf:e2:46:44:81:d0:d2:75:65:
         cb:d3:95:d7:50:fb:7a:48:20:3a:0e:9a:e8:36:c1:3d:63:7e:
         32:24:a0:1e:d3:53:62:80:12:cc:8a:39:6f:5e:84:2f:bd:55:
         3a:0d:8f:b5:bf:dc:34:5c:4a:f8:c8:a7:e0:dd:63:b3:38:0c:
         65:03:69:07:24:05:e4:71:9e:b8:cb:2c:56:aa:8e:d2:48:2a:
         be:c5:09:38:0b:2a:e3:df:9a:19:51:10:f7:ab:d9:4a:f6:ef:
         ab:30:d7:90:ed:d9:a8:51:26:87:ee:6a:6c:5a:cb:30:7a:7b:
         a5:68:cf:d2:f0:42:4d:6f:91:40:98:6d:d3:be:91:e6:c4:d0:
         9b:ce:b6:ce:ec:c5:b8:fb:28:d2:ad:eb:4e:7f:e4:2e:a5:71:
         c1:2d:3d:4f:74:c2:3b:eb:39:00:c4:18:9a:dc:75:30:d3:4b:
         12:ee:de:bc:36:b0:ea:c4:cb:4d:95:ca:5d:f8:e6:39:7c:cd:
         86:0b:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:45 2026 by rpki-client