Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89ae34e-2b1f-3609-9930-cec3890a55a9.roa
File:                     c89ae34e-2b1f-3609-9930-cec3890a55a9.roa (raw, json)
Hash identifier:          LqXVuwyfPGTfp7oWnuQK2d2s5hH+ZF8M7nyMz3qlUVk=
Subject key identifier:   BD:98:60:35:3A:DC:16:F4:21:8E:2D:9B:F0:0C:56:B5:5E:6A:60:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57468E0C143C1E60FAD800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89ae34e-2b1f-3609-9930-cec3890a55a9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        67.177.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:46:8e:0c:14:3c:1e:60:fa:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=06a9d81d-252c-4cd5-b79e-a098155774f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:ce:bf:db:1d:61:f8:3a:29:b6:61:62:5a:
                    d2:01:ca:1a:e4:dd:a3:0b:5f:17:93:61:e5:6e:bc:
                    83:91:f0:c6:f5:73:b3:da:0a:89:87:e9:b9:b1:ab:
                    10:46:e1:73:63:19:2d:f4:fd:f0:9e:a4:0b:bb:c2:
                    95:01:03:89:ab:a6:51:53:cf:ec:83:e6:68:4a:ff:
                    2f:f3:b0:38:64:88:ae:fb:ab:f3:ad:58:89:40:c9:
                    27:73:21:bd:92:76:d3:8a:38:ea:e2:c7:fd:cb:c4:
                    73:4f:b2:ea:fa:3e:87:31:24:f9:39:76:92:19:bd:
                    06:60:1f:76:ea:bc:00:e5:ea:de:e4:8a:96:7c:71:
                    00:f8:32:7a:d5:2b:df:b3:8a:2a:b8:f1:8b:a6:5c:
                    75:c7:9a:74:e6:f5:fc:0f:d5:ea:1c:fb:fd:d7:94:
                    dd:73:9b:4c:98:18:72:d1:18:39:cc:ed:be:b8:ec:
                    df:fa:17:5a:cd:c9:26:bd:7d:76:38:61:21:25:80:
                    2d:99:36:77:4a:47:13:f9:25:73:6a:66:e6:a5:d2:
                    ed:3b:4d:c2:6b:e3:3f:26:27:d6:d8:78:0d:a3:14:
                    51:b7:41:47:cc:41:20:5b:7d:99:68:cd:e0:7c:53:
                    19:df:a7:cf:41:ff:dc:84:28:81:42:c3:f4:06:b0:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:60:35:3A:DC:16:F4:21:8E:2D:9B:F0:0C:56:B5:5E:6A:60:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89ae34e-2b1f-3609-9930-cec3890a55a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.177.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:c7:74:07:7d:ec:98:5e:91:3e:e9:fd:20:d7:08:3c:d2:
         78:ac:fe:41:8b:52:1f:55:09:6e:27:2f:bf:72:64:6f:7e:27:
         f2:21:c8:26:f3:55:98:87:a1:29:99:70:75:43:93:ad:9f:1e:
         d1:9c:68:26:72:85:19:7e:ef:d8:d2:4a:fb:ae:76:a2:44:8d:
         30:f5:67:fe:49:f7:d4:aa:4d:c8:44:f4:f9:82:05:98:87:59:
         28:8b:05:41:26:2f:6a:fa:ff:71:d1:6b:0a:90:ec:4e:1e:26:
         d1:65:d7:26:14:8c:7d:ea:4e:04:aa:25:b3:4d:b4:6a:3b:f4:
         19:88:2d:c8:08:c0:d7:86:1c:9c:23:d0:97:82:2a:fc:e3:f0:
         69:7a:ef:1a:c1:ad:c1:ac:d1:e9:63:f7:d3:a3:a0:28:0a:d7:
         5d:69:62:82:1f:1c:aa:7a:d0:5d:21:27:b8:35:78:72:ae:8a:
         2d:83:5a:e1:01:7c:93:02:e3:59:ba:03:ab:0f:97:67:c0:b8:
         cf:bd:2b:95:85:9a:a0:1c:8c:95:3c:60:22:c8:0e:26:58:fd:
         c9:48:d6:56:3d:26:80:7b:08:e6:e5:98:87:71:b1:17:11:21:
         51:09:ab:dd:ce:51:71:1d:58:62:6f:c8:fc:03:f5:ca:07:f0:
         47:eb:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:20 2026 by rpki-client