Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d818eb3b-699b-34c7-a677-1d49cc4a2d86.roa
File:                     d818eb3b-699b-34c7-a677-1d49cc4a2d86.roa (raw, json)
Hash identifier:          I9Ttug9UiuIUOvneTVEYCjuzJ0I7Xr3yQPI7jamAUS8=
Subject key identifier:   C6:F1:80:DA:6E:4F:12:35:FE:4B:DA:46:63:25:00:6C:18:01:5C:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5889B2A35B5B885FE0617C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d818eb3b-699b-34c7-a677-1d49cc4a2d86.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        76.16.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:89:b2:a3:5b:5b:88:5f:e0:61:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5de47b01-b913-41eb-b670-59ce2737aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:94:4c:0d:b4:26:8e:52:50:a0:eb:54:36:
                    61:e7:c1:9d:2c:5e:a3:ed:ef:25:f8:a8:e3:ad:24:
                    69:ae:00:fc:56:b6:22:9a:5b:9d:d6:82:61:11:85:
                    21:54:3c:92:4d:dd:cf:a3:fb:72:67:62:11:02:d5:
                    5d:ee:67:ca:a6:71:06:27:ab:99:0b:fb:38:ab:4e:
                    d0:17:46:78:96:37:6b:e1:42:72:c4:63:be:db:2a:
                    7b:d8:76:07:4b:02:88:5c:78:1d:54:c1:08:bf:fc:
                    69:55:87:fa:4d:6a:fd:53:67:43:29:f9:24:fd:11:
                    40:9f:73:91:2f:97:40:42:fb:34:00:b9:df:e2:1c:
                    38:9e:3d:4a:a1:42:73:f2:f1:08:a3:a7:e6:72:b3:
                    d0:c4:b8:c1:7a:fa:eb:40:f9:f7:2d:3a:2f:69:9a:
                    32:e5:eb:29:7a:6a:15:64:3f:da:a4:38:9d:6d:46:
                    23:b8:57:57:be:78:ab:fa:7a:ac:3a:77:70:38:11:
                    49:be:4d:e3:cf:a2:5f:60:f4:b0:60:68:8a:4a:cb:
                    71:97:23:46:1e:28:01:e3:de:71:8c:9d:5c:c9:72:
                    98:ef:11:1d:de:7c:b5:ff:73:75:78:a8:6a:33:9f:
                    db:2a:08:54:3a:ce:a5:07:fc:bf:21:4f:75:32:b7:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:80:DA:6E:4F:12:35:FE:4B:DA:46:63:25:00:6C:18:01:5C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d818eb3b-699b-34c7-a677-1d49cc4a2d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.16.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:91:51:6d:91:b7:61:a0:33:5a:5f:f3:4c:9e:71:0e:68:1e:
         cf:51:78:a5:93:f0:4c:97:c8:96:28:50:b5:a8:0d:c9:1a:9b:
         68:05:4d:be:ee:7f:41:50:b9:09:b0:fd:99:d1:51:c6:74:0a:
         04:e9:2a:f7:7e:ec:4e:5d:e0:cd:89:1c:56:3a:02:e1:68:fc:
         cd:e4:a8:61:7f:0a:ae:db:ad:f7:2a:20:1b:a1:9f:03:82:03:
         ad:06:66:bc:7b:c6:9f:5c:3d:46:8d:fa:51:db:b2:84:ad:13:
         88:4b:cc:32:8c:22:bf:c3:11:18:79:44:65:24:f3:36:e5:58:
         e8:46:a0:0a:bf:76:ad:b2:b3:ce:16:e8:a8:d4:eb:f0:3d:bf:
         66:ba:8c:22:7e:16:99:b8:a6:7b:67:ae:07:f6:9f:65:af:61:
         59:56:8d:b2:5b:ae:e0:1f:e9:06:d1:a7:cc:20:8e:0f:ea:a8:
         bb:0d:32:71:21:60:c4:e6:d3:47:43:ec:06:9f:34:a6:e6:11:
         fa:c9:6a:46:2d:0c:94:c9:a8:01:cf:24:36:11:40:8d:df:40:
         64:a9:a3:ff:e3:f5:75:15:66:e5:3f:ad:2b:c6:f6:a8:d1:22:
         40:f2:e4:48:03:6f:7f:63:e3:b9:d6:4f:b1:4a:ae:88:e4:10:
         2b:d9:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:58 2026 by rpki-client