Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e99662ed-10d3-3b61-879a-1811e805f773.roa
File:                     e99662ed-10d3-3b61-879a-1811e805f773.roa (raw, json)
Hash identifier:          btrmNhBWeSjW/7nE47f0eZt6+uui9ZKaXOyNDu0P80s=
Subject key identifier:   4F:CA:0F:AE:C3:E3:7B:D2:6F:FC:52:D3:19:5A:B5:A0:EA:AF:E1:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58C46A9C3FF1FFFA9B2A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e99662ed-10d3-3b61-879a-1811e805f773.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        67.188.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:c4:6a:9c:3f:f1:ff:fa:9b:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5e394172-bc92-4451-84cf-632f83d01d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:55:65:c5:52:06:42:db:01:a0:0e:2e:5e:
                    4e:73:76:0b:ca:bf:4a:ea:91:46:47:fd:76:bb:45:
                    c0:94:e9:34:1e:67:35:da:06:b6:1a:c6:9a:ea:1c:
                    9b:23:ce:ee:f7:9f:53:96:dd:fa:e1:48:d0:f3:b6:
                    d9:f3:71:4e:d6:7b:6a:fd:f0:08:77:96:fc:f8:00:
                    8e:89:bc:09:c2:36:94:3f:a7:b5:88:1b:eb:92:a2:
                    8a:a2:68:6b:25:14:bc:68:2a:9c:27:a3:3b:8a:7f:
                    85:a3:35:11:b3:90:3d:d4:ea:bd:54:13:19:9f:76:
                    15:93:e3:74:f3:f9:5b:2c:8f:6e:d3:51:00:67:e3:
                    01:ec:7c:b3:3c:b6:c6:40:65:18:ed:82:c1:ed:79:
                    a2:d0:8d:6b:f6:01:d3:c3:a0:b0:73:1f:6d:b5:a4:
                    7f:c7:50:0d:da:ff:ee:e1:3e:ac:f7:f5:41:1e:13:
                    ba:3d:58:21:22:9a:42:4f:e3:d0:33:1a:22:1d:b4:
                    cc:5d:44:66:80:55:df:55:8c:0f:13:9d:8e:63:36:
                    08:0f:8c:3d:84:f3:20:5e:ed:00:8a:7f:1d:bd:8b:
                    0d:71:2f:09:be:65:4e:a2:f6:dd:22:bb:f5:26:6f:
                    fc:50:e4:83:fd:20:49:cc:9e:62:9e:8f:7d:b3:86:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CA:0F:AE:C3:E3:7B:D2:6F:FC:52:D3:19:5A:B5:A0:EA:AF:E1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e99662ed-10d3-3b61-879a-1811e805f773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:f5:43:7f:22:ea:a2:df:a9:e0:c2:25:60:3d:1e:ae:6b:b5:
         05:5c:d5:d3:f8:f1:27:99:c3:ef:ae:9b:9b:14:fb:15:08:16:
         3a:c5:ee:d3:4e:3c:b3:1a:a7:4d:3d:ce:b8:83:c8:ea:4f:24:
         db:83:4d:fe:a4:09:53:02:b6:0a:c3:e4:57:59:76:f2:85:74:
         4d:01:dc:6a:1a:76:9d:59:08:82:56:4b:1d:58:63:99:d5:3a:
         0e:cf:44:db:79:9d:4a:e9:34:ca:95:fe:bc:5f:65:7f:cd:67:
         04:23:32:53:43:c5:60:08:fc:5b:ee:c4:40:8d:6b:7a:df:54:
         f1:f9:09:88:3f:5a:0e:85:c0:0e:51:d4:ff:45:cb:ce:12:f5:
         34:52:f6:59:07:61:d0:82:3b:24:d7:a7:d1:88:24:13:6f:30:
         36:94:36:cc:1d:3b:e7:c2:0c:43:8b:d3:53:02:13:fc:26:67:
         ce:3b:84:49:41:32:46:b6:ae:18:67:49:0b:e2:51:7a:56:0b:
         75:a4:95:c1:49:86:fc:4f:c5:26:e8:2a:ef:9a:62:f1:af:10:
         4f:fe:c5:8b:d2:fa:c8:80:8a:e4:7e:38:63:da:fb:ca:35:cc:
         ce:fe:22:bb:c0:a3:52:80:f9:0b:b5:94:6f:43:a7:8d:02:55:
         60:c8:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:49 2026 by rpki-client