Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61b136c-d548-32a1-92e6-b34af699a90f.roa
File:                     b61b136c-d548-32a1-92e6-b34af699a90f.roa (raw, json)
Hash identifier:          SpgOPfRnzlfPqS6RcW72Irk700hikGp9uqx06k5K4KQ=
Subject key identifier:   69:B9:C8:BF:98:58:01:ED:DA:B7:A2:F0:0B:39:F1:3F:B2:E8:00:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5AD1EF4A7186ADE3C9B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61b136c-d548-32a1-92e6-b34af699a90f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        71.224.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:d1:ef:4a:71:86:ad:e3:c9:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=59c27ea3-e3a9-44db-96b7-86b37911d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:ed:7d:8e:77:ae:fe:93:58:bb:89:0c:07:
                    30:34:76:ad:8d:3c:13:ec:5e:ed:68:cb:26:7e:9a:
                    e3:21:e5:7f:41:47:54:07:f8:19:65:fa:dc:fd:be:
                    96:c6:62:c1:91:27:fc:31:c0:e2:da:55:78:de:5b:
                    f6:ed:b3:e8:9b:a5:93:bf:31:ea:bc:80:04:47:83:
                    b0:5e:aa:c2:39:29:f0:13:c6:4e:76:28:e1:df:1d:
                    be:c7:0f:fe:9b:4f:a5:7a:8d:bc:de:df:28:29:80:
                    c1:36:98:e0:4f:86:57:ea:10:6e:c1:07:b3:1d:17:
                    37:22:54:4a:03:8f:4e:93:2c:ef:fd:4f:cd:33:a9:
                    65:65:75:93:0d:13:9c:cf:ec:c7:33:a5:02:e9:5b:
                    30:fa:86:09:39:35:0b:1b:87:ae:2a:45:dc:de:29:
                    dc:d1:5e:78:34:5a:d2:ea:ec:e9:7e:c9:5b:b5:8e:
                    23:24:d8:d8:90:16:64:2b:9a:1d:ad:c7:63:5b:86:
                    1c:4b:ce:b4:fe:a1:3d:12:48:bc:2e:10:18:24:c1:
                    43:99:ae:24:bb:78:58:c1:40:a5:c2:32:43:96:15:
                    55:6d:01:56:5e:d1:64:a0:dd:f7:de:4e:19:3a:1d:
                    7a:df:d2:dd:ba:47:b6:8a:e2:4b:27:30:f0:0c:7e:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B9:C8:BF:98:58:01:ED:DA:B7:A2:F0:0B:39:F1:3F:B2:E8:00:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61b136c-d548-32a1-92e6-b34af699a90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:e3:19:91:37:d4:df:15:55:c6:aa:d3:a7:4b:dc:78:75:
         0e:c7:22:5a:65:3b:dd:61:fe:e4:55:51:c0:1f:46:3f:1e:fd:
         12:b8:02:d0:69:51:bf:95:21:93:5d:ac:9d:b4:19:ad:0d:99:
         cc:d9:5d:5a:bd:a7:85:f2:e1:3a:65:9c:43:47:33:3c:d2:c4:
         20:f5:4c:ea:1f:2e:15:91:0c:36:ea:1b:05:e0:64:f3:c3:80:
         9b:fa:d7:2f:fd:01:c3:02:15:32:cd:10:7e:d8:73:9d:30:c7:
         2b:48:ca:36:37:e6:f1:0e:6d:aa:e5:9b:25:31:ea:1c:62:26:
         55:24:9a:26:b9:22:2d:93:46:38:8d:b6:78:7d:ed:12:c1:b9:
         8d:fb:cb:f6:ed:25:f5:bc:e2:82:15:c8:a6:48:07:e9:c1:6c:
         6a:00:ee:fd:1b:51:4b:2a:9c:87:f5:66:b1:bf:dd:02:b8:18:
         39:85:01:3c:63:bf:48:fe:ad:89:10:72:b0:ca:ce:57:1d:97:
         67:40:fe:8d:d5:f3:e1:9c:d2:d1:8a:0e:09:1e:2c:93:f6:89:
         be:d5:20:98:f6:60:f7:6e:49:fa:e0:da:35:e4:fc:2d:f1:f4:
         c0:76:30:89:83:34:0b:bd:d8:68:12:91:33:a3:c0:83:c7:b5:
         d8:63:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:47:45 2026 by rpki-client