Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa
File:                     cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa (raw, json)
Hash identifier:          i+63tFksw2Fx4vvkVNtSI/s0LkWX/YUlRNCEWX1Qxn4=
Subject key identifier:   02:05:3D:0E:01:16:3D:3A:E1:0C:08:A8:A7:B0:E2:36:0C:40:26:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB67E6E77268A542302403
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        76.31.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:67:e6:e7:72:68:a5:42:30:24:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=439518af-5df6-451e-8205-38cc5b25123b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:be:e8:bb:70:98:95:9e:6a:a8:7c:29:26:
                    8e:35:b3:00:df:9c:13:98:a2:d2:29:d9:b1:e6:3f:
                    73:c8:d6:2e:dd:ce:48:59:b3:9e:15:b7:57:31:e6:
                    81:72:19:f4:18:bd:bc:4e:92:03:a1:f7:62:cf:91:
                    04:da:57:da:b5:43:90:af:47:b0:6d:0e:a2:44:7b:
                    63:65:90:88:25:bd:b3:73:e7:bd:4b:26:b5:e8:12:
                    ef:f6:34:ee:e5:61:76:69:ac:7a:fc:0c:59:60:4d:
                    e5:77:d5:92:04:a4:da:52:66:8b:19:58:95:05:a3:
                    32:ae:98:c8:67:c3:a7:76:fe:6f:19:65:05:cf:9d:
                    92:99:95:69:a2:62:f4:02:51:c1:01:b4:9a:88:53:
                    7f:e3:62:95:4c:8b:f0:e0:50:5a:66:2e:61:24:c6:
                    48:91:c4:ed:9f:98:a4:9f:4a:f5:b3:31:f4:25:0a:
                    3c:46:b2:1d:9c:3f:0e:01:17:ce:4c:c7:bb:ae:b5:
                    4f:19:da:f0:61:c7:00:fb:c7:24:a6:31:91:4d:65:
                    d1:36:5d:c6:7d:54:60:8a:c5:17:d0:62:48:c7:ef:
                    c7:ea:21:59:f6:c3:dc:e5:f8:11:1e:13:bd:ad:df:
                    06:59:14:ed:d7:55:bf:8e:a6:bd:04:a6:78:37:2a:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:3D:0E:01:16:3D:3A:E1:0C:08:A8:A7:B0:E2:36:0C:40:26:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6ef8b0-2822-3d68-b049-9087bb82a37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:dc:f4:e9:90:ea:78:c7:60:51:39:7c:88:28:81:34:0a:
         52:95:56:6d:37:3f:14:ea:5c:df:4f:2d:8d:db:9b:4f:51:16:
         73:6d:de:df:04:1a:78:55:00:dc:63:4e:bf:4f:70:a8:75:6f:
         2f:42:b1:3b:c4:eb:91:70:32:4d:05:01:d8:4b:0c:c7:e8:7c:
         07:b3:6d:d5:75:16:6b:7a:46:e5:b2:00:91:56:14:2d:07:cf:
         4a:68:5b:2b:ce:06:fb:1b:7d:25:ed:fe:87:9a:90:1c:b2:86:
         77:d3:b6:fb:8a:3f:54:f1:7f:ff:65:e0:4f:50:ba:2f:d7:e5:
         90:9d:e8:33:ed:8e:81:0c:9c:3b:88:2b:a3:5d:85:a7:af:7f:
         82:60:98:fa:c7:8d:2a:09:be:9c:ed:03:89:b9:48:16:10:e1:
         e6:45:60:b6:71:e9:df:9a:32:d4:36:be:ef:b1:a8:e0:a8:36:
         ce:45:e3:4c:c3:75:4e:29:75:f1:84:2f:67:08:1e:79:e1:9e:
         97:ca:dc:ec:15:c8:d6:15:a3:a5:00:3d:29:f1:01:4f:fe:95:
         7e:33:37:d5:99:36:a6:70:a9:0e:1d:fe:e5:ef:18:05:d3:12:
         b6:e8:a7:de:e3:74:1f:ff:d7:5f:f7:ab:23:6a:2f:e9:38:8a:
         83:31:25:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2fm53JopUIwJAMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
NDM5NTE4YWYtNWRmNi00NTFlLTgyMDUtMzhjYzViMjUxMjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW6+6LtwmJWeaqh8KSaONbMA35wTmKLSKdmx
5j9zyNYu3c5IWbOeFbdXMeaBchn0GL28TpIDofdiz5EE2lfatUOQr0ewbQ6iRHtj
ZZCIJb2zc+e9Sya16BLv9jTu5WF2aax6/AxZYE3ld9WSBKTaUmaLGViVBaMyrpjI
Z8Ondv5vGWUFz52SmZVpomL0AlHBAbSaiFN/42KVTIvw4FBaZi5hJMZIkcTtn5ik
n0r1szH0JQo8RrIdnD8OARfOTMe7rrVPGdrwYccA+8ckpjGRTWXRNl3GfVRgisUX
0GJIx+/H6iFZ9sPc5fgRHhO9rd8GWRTt11W/jqa9BKZ4Nyp5xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIFPQ4BFj064QwIqKew4jYMQCbHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I2ZWY4YjAtMjgyMi0z
ZDY4LWIwNDktOTA4N2JiODJhMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATB/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAb83PTpkOp4x2BROXyIKIE0ClKVVm03PxTqXN9PLY3bm09RFnNt3t8E
GnhVANxjTr9PcKh1by9CsTvE65FwMk0FAdhLDMfofAezbdV1Fmt6RuWyAJFWFC0H
z0poWyvOBvsbfSXt/oeakByyhnfTtvuKP1Txf/9l4E9Qui/X5ZCd6DPtjoEMnDuI
K6Ndhaevf4JgmPrHjSoJvpztA4m5SBYQ4eZFYLZx6d+aMtQ2vu+xqOCoNs5F40zD
dU4pdfGEL2cIHnnhnpfK3OwVyNYVo6UAPSnxAU/+lX4zN9WZNqZwqQ4d/uXvGAXT
Erbop97jdB//11/3qyNqL+k4ioMxJRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:07 2026 by rpki-client