Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7ea6e-5965-32e1-b15d-ce6519e0c045.roa
File:                     d0e7ea6e-5965-32e1-b15d-ce6519e0c045.roa (raw, json)
Hash identifier:          SK1VbY4NMaqQjRSzgjKoJA25hbPKFEGaqXmfZJN6FgU=
Subject key identifier:   BE:E4:D2:DB:A3:B2:B8:51:71:FF:17:0D:6D:08:3C:5D:54:3B:B9:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85EB9BEADB32495FD25900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7ea6e-5965-32e1-b15d-ce6519e0c045.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        76.129.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:eb:9b:ea:db:32:49:5f:d2:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=d4e36a85-09af-4960-8b48-8601db4d6d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:7f:01:56:2f:77:69:dd:58:8f:c3:88:f5:
                    22:e0:a4:84:5c:62:25:25:00:66:a7:87:79:ee:96:
                    48:ef:00:f9:81:13:9f:26:12:87:1e:b6:8c:c3:ee:
                    15:f2:32:fa:e6:7e:71:f5:fc:51:7d:48:ed:93:71:
                    f8:52:19:26:40:db:72:5c:a3:5e:56:df:30:99:c4:
                    bf:d7:da:ac:ae:fe:95:51:05:b2:b4:43:0d:68:d4:
                    0a:0d:2e:93:ce:f2:58:b1:2f:78:57:da:3e:a2:ff:
                    8b:21:63:87:57:dd:42:19:e8:e0:f2:99:d0:83:58:
                    42:6c:e9:2c:99:fa:c7:6d:35:4b:e3:0b:ca:96:87:
                    5e:1d:2f:4b:23:02:ef:70:ef:e1:1c:f4:cc:00:c3:
                    72:d1:83:3a:59:f2:b7:70:5a:ec:44:fb:50:a4:90:
                    06:1c:f5:fa:f1:27:ef:15:63:87:e6:91:0c:1c:78:
                    0b:f4:d0:76:e3:d8:a5:d2:04:5a:1e:e2:d4:63:09:
                    7f:ec:13:5b:ea:48:a4:ef:ab:98:1d:f2:a1:2b:20:
                    44:04:33:64:56:13:8a:6a:e3:46:25:63:e6:a5:69:
                    58:ab:28:6a:86:ba:d1:19:e4:4b:81:3b:3e:1f:76:
                    70:f2:a8:62:85:02:c0:69:79:05:2f:09:16:82:88:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E4:D2:DB:A3:B2:B8:51:71:FF:17:0D:6D:08:3C:5D:54:3B:B9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7ea6e-5965-32e1-b15d-ce6519e0c045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:48:34:22:00:45:5f:ca:b3:ca:8d:4f:0e:85:aa:ab:1e:
         91:8f:c5:71:8c:7a:5a:06:98:35:8f:09:b1:be:05:e9:bb:53:
         ef:fe:9a:b5:80:ce:45:ec:67:ae:2d:1b:64:a2:63:3a:8b:d0:
         d6:8a:3b:39:c0:07:46:2d:6e:ba:92:e7:66:a7:8a:62:6d:5d:
         a1:73:8c:e6:f0:20:fc:c4:ea:e6:5f:a4:7f:98:a8:3b:ab:7b:
         ee:29:aa:6b:54:ed:f6:ea:6f:3c:c8:eb:b5:f3:49:7b:11:0d:
         83:56:30:f7:ee:19:6d:c4:f1:23:59:76:45:aa:e9:38:9f:f6:
         49:2e:f9:1c:ec:e3:01:90:fd:fc:02:7d:08:8f:c6:1f:a9:60:
         8e:4e:00:b9:27:b8:28:e1:cd:6e:43:7d:cb:21:9a:e4:d4:97:
         a7:78:f8:2a:f1:dc:f2:c8:d3:1e:ee:35:9f:5e:f1:33:9c:b7:
         cb:90:67:03:6d:78:2a:bc:b8:e6:fb:8a:a4:19:64:ac:ea:0a:
         d4:f8:c1:c9:b0:57:6b:aa:df:6c:6a:8a:7b:1f:e4:41:09:b8:
         7c:ef:6d:fa:3b:06:8f:b5:83:c8:b1:13:e1:5a:c3:fa:58:9a:
         49:84:3d:b8:c2:0d:85:48:d6:59:26:9d:18:09:fa:f2:57:6b:
         f3:9a:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:13:49 2026 by rpki-client