Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c33b31db-b662-39fb-9f29-72b621afd2fc.roa
File:                     c33b31db-b662-39fb-9f29-72b621afd2fc.roa (raw, json)
Hash identifier:          yaKmXKRDEzz5iq5lXJmtv2rXV/ZttbuyHt5JorCnMd0=
Subject key identifier:   7D:C2:69:B1:DC:CF:1F:75:05:E5:10:59:87:F7:92:2F:6D:8A:8D:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100704B986844F449559D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c33b31db-b662-39fb-9f29-72b621afd2fc.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        69.180.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:70:4b:98:68:44:f4:49:55:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=39817bae-a179-4d41-bea0-7eab6e1e55d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:8f:ed:b5:78:3d:d4:49:4e:35:fc:6f:b0:
                    64:87:ad:bf:f0:57:f5:3b:a6:7b:a7:c2:f0:9e:8e:
                    a7:27:67:c0:93:af:47:ee:9a:b9:9f:8b:a9:1c:2c:
                    b4:88:67:3d:ab:29:4d:88:76:e5:2e:cb:43:ef:db:
                    88:96:ab:6e:59:7f:b3:02:ad:6e:65:b5:58:ab:d0:
                    2c:d2:86:50:7a:d8:16:f9:95:2c:35:d3:7d:ea:e9:
                    49:c4:33:16:31:1b:c8:a5:e6:91:f8:bb:a8:58:7f:
                    98:6f:0a:cd:30:c2:96:6a:6c:bb:63:bd:e6:1f:9d:
                    d2:ed:a5:c7:54:88:0a:e4:22:68:28:3e:d3:91:f6:
                    bc:20:0f:2d:0d:54:a8:4c:5e:0d:b0:db:4c:df:53:
                    57:26:06:84:4d:6d:fc:e5:b3:af:a6:3d:83:ab:74:
                    23:c8:e5:41:97:68:94:bc:c5:ff:20:6c:17:55:56:
                    29:83:15:81:9f:8a:49:a3:63:8d:fa:09:a0:db:4c:
                    a2:49:66:3c:76:44:38:5a:b4:1b:30:7e:0d:b6:92:
                    1b:26:39:a1:f6:2c:14:7b:63:d8:92:f1:6c:94:56:
                    7d:6a:e6:fc:b9:d1:0e:6b:9b:81:7f:d0:a2:74:3a:
                    cc:5f:29:0f:61:9f:04:58:cf:c6:1d:81:34:ce:fc:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C2:69:B1:DC:CF:1F:75:05:E5:10:59:87:F7:92:2F:6D:8A:8D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c33b31db-b662-39fb-9f29-72b621afd2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:78:37:a9:6a:ab:d2:ba:cd:1c:8a:0a:79:86:a4:63:d2:
         55:d5:19:1f:bb:b1:e5:01:0c:4f:97:37:4b:d1:ce:5b:c7:95:
         9d:d0:95:57:e8:9f:a2:9a:7f:c3:52:2e:63:e9:4c:68:65:46:
         df:7b:1f:e9:d5:05:87:be:88:34:fc:4a:2c:f5:b0:f9:5f:b7:
         03:b4:19:6f:fa:55:32:ed:83:b0:45:27:44:99:1a:41:0b:1f:
         08:9e:64:56:fc:eb:6f:d8:33:3f:82:0c:9b:c7:e0:c8:0a:36:
         40:d4:2f:e1:0b:77:f3:f7:d5:4b:db:f6:5c:b9:dc:b7:e6:fd:
         c6:2e:82:c5:8b:5b:0e:eb:aa:ac:b2:c5:94:46:74:0d:37:a2:
         33:49:0d:7a:9e:01:ca:36:6b:37:47:19:98:a1:74:05:97:91:
         52:5e:86:70:e9:1e:7a:89:df:e9:a6:87:4c:09:cd:e7:f8:71:
         05:c8:ca:22:34:6e:3b:ac:ff:7f:4e:82:23:ba:9c:89:d3:f0:
         c6:4e:77:b1:25:cd:dd:16:63:79:b9:a1:59:d6:bf:04:6d:75:
         21:c6:40:be:31:00:96:00:01:03:11:8b:f9:9c:b0:78:4b:ec:
         ce:3a:e8:79:75:00:8b:c0:2c:7e:16:59:b3:ed:9f:64:86:8c:
         a0:63:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:05 2026 by rpki-client