Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3dbac24-8e52-3905-a5df-d39e2bbff909.roa
File:                     d3dbac24-8e52-3905-a5df-d39e2bbff909.roa (raw, json)
Hash identifier:          r4GWIOBnQM/259zNn/5sh0DHyDARCuQZsJoo6cjtDls=
Subject key identifier:   16:8B:23:3B:11:D5:DE:00:22:9F:E0:5F:F0:D7:53:A2:82:E5:7E:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81006DE08ADFF2D873202980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3dbac24-8e52-3905-a5df-d39e2bbff909.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        67.191.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:6d:e0:8a:df:f2:d8:73:20:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=8be83bf1-6dad-4f85-9f6b-fb7f8cd6ba06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:85:2c:b4:0e:6e:55:a6:5a:52:07:61:0b:72:
                    16:2e:e8:43:ed:a9:cf:9a:2d:b2:d4:07:b1:6b:b0:
                    e9:1d:9a:ba:96:91:9e:10:91:0e:57:11:9a:eb:1f:
                    ff:45:8c:52:70:59:67:30:06:80:62:0a:fb:e2:5d:
                    94:dd:21:f3:80:05:75:ed:ab:9a:22:9d:7f:f0:f0:
                    3c:ea:f4:ca:45:ab:5d:9c:8e:f4:50:16:a5:99:3c:
                    88:50:ab:d4:2f:86:16:88:48:6f:d9:c6:ae:f3:ec:
                    06:75:a0:ca:40:e6:c0:d4:d0:b3:32:34:a3:46:ab:
                    cc:55:67:9a:4b:38:29:be:2a:8b:bb:9c:79:46:39:
                    5a:48:7b:ee:d7:0a:ec:8d:0f:de:23:fc:5f:d4:fe:
                    08:a1:83:f6:b5:cb:54:9e:af:47:be:d3:e6:86:74:
                    e4:85:a2:9a:42:ff:bc:3c:78:69:f1:a7:79:fa:d7:
                    be:c4:96:72:cf:32:85:e7:0b:7d:d7:31:2a:3b:e6:
                    19:fb:2d:0b:20:df:cf:18:1a:33:b2:37:2e:29:37:
                    fc:cf:b0:b6:9b:d7:4a:c7:1e:d7:00:fd:cf:9e:ea:
                    8e:15:97:5c:cd:fc:54:b2:1b:cd:fb:42:1d:ad:2b:
                    34:42:13:3d:b4:a5:6e:fd:f0:51:f6:71:a5:6e:71:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8B:23:3B:11:D5:DE:00:22:9F:E0:5F:F0:D7:53:A2:82:E5:7E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3dbac24-8e52-3905-a5df-d39e2bbff909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:bd:64:2d:16:e2:ce:11:3a:1d:1c:8e:00:bc:bb:03:66:
         14:49:af:b8:de:b0:a5:55:0d:cf:2e:bf:16:64:e2:c9:4f:c9:
         c3:4e:97:3c:ba:e1:2d:ea:e3:ad:74:3a:70:e2:7c:cb:8e:89:
         3a:53:9f:b2:c8:fb:1e:77:7f:23:28:97:aa:4f:1a:33:b4:2f:
         32:44:03:f1:e9:5e:73:78:9f:91:bd:75:0f:ae:18:e9:8b:ca:
         3e:40:17:f5:25:13:ba:6d:7b:49:3e:b8:ed:7c:93:fa:1c:ae:
         87:97:36:51:58:34:02:87:44:59:b8:a1:91:15:12:3c:ec:45:
         e7:68:76:2a:d1:15:41:a2:1f:5e:b4:9e:5d:43:07:a7:60:96:
         3f:b7:40:dd:e6:43:96:00:c2:62:93:8b:d1:72:ce:9c:3e:d7:
         2f:c7:dc:1a:4d:3b:a9:c3:98:6a:ce:1a:8a:92:79:38:08:f7:
         f4:c4:94:27:9f:53:54:c5:5e:ed:d2:1f:94:c9:b3:bd:26:77:
         da:08:71:e9:5d:f1:3c:5f:65:cf:48:02:d0:0d:85:39:da:8d:
         3a:75:4f:9d:5d:2a:06:aa:51:41:ba:8f:9b:27:8c:06:31:c6:
         1e:f1:4d:37:65:e9:b1:69:65:ff:cd:0f:25:37:a1:1a:f0:01:
         70:ec:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:47 2026 by rpki-client