Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91c36ad-01d3-3c29-98a1-77f88b9dbbc9.roa
File:                     f91c36ad-01d3-3c29-98a1-77f88b9dbbc9.roa (raw, json)
Hash identifier:          wcXQFzq3pmEjYzTvpylkuAURz/6/muML8SawA3DWEGU=
Subject key identifier:   DC:48:0A:2A:05:1C:C9:C1:70:7D:4C:2B:86:E0:D5:A2:D4:6F:50:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57BBE4656F2C4A6F399B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91c36ad-01d3-3c29-98a1-77f88b9dbbc9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        69.253.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:bb:e4:65:6f:2c:4a:6f:39:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=32ce7de0-a5df-4697-a3f1-c984af64c992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:97:44:ae:03:f3:3f:45:92:b7:8a:9b:ba:
                    b2:01:34:c4:cc:9e:01:20:8b:f1:69:e2:d0:ca:eb:
                    6d:f0:ba:65:0c:17:97:46:ea:44:6d:b4:35:9e:f5:
                    0d:8a:c7:aa:26:3d:ce:91:25:af:db:63:c8:5c:19:
                    15:cc:a5:ec:fa:63:90:81:9b:5a:80:c0:8c:25:c7:
                    17:24:9d:6f:da:38:49:3f:07:17:ce:62:e4:e2:70:
                    45:1f:9b:6f:d3:e9:08:30:3f:86:f4:f2:c7:d9:bd:
                    2c:6f:1c:58:e7:3a:5f:64:47:d7:ed:86:80:ae:32:
                    ec:73:c1:98:5e:59:1b:5f:5c:73:e5:27:92:34:d3:
                    36:3b:ab:72:12:13:34:e1:b2:bb:ab:69:b7:cd:b9:
                    fc:3f:3d:bd:f4:84:9a:21:77:df:4b:51:c5:3d:39:
                    9c:fe:91:7e:e6:17:80:cb:5f:ea:ba:66:06:e2:ba:
                    84:29:6c:f6:0e:06:78:d3:03:79:b3:2f:2e:3b:de:
                    38:99:45:0c:31:06:a7:8f:c1:ef:18:a9:21:e6:c2:
                    57:78:95:11:cc:ba:f1:ee:19:ae:24:66:66:92:eb:
                    f0:82:04:11:e2:8d:dc:56:46:03:c0:3c:c8:fe:5c:
                    88:99:df:89:b0:96:82:9d:77:7d:94:09:32:e3:51:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:0A:2A:05:1C:C9:C1:70:7D:4C:2B:86:E0:D5:A2:D4:6F:50:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91c36ad-01d3-3c29-98a1-77f88b9dbbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:00:27:13:59:88:24:f4:d2:66:ff:c0:06:49:02:15:7c:b3:
         bf:26:d7:ab:10:2c:1c:7b:05:0c:b1:0d:34:e4:f0:e7:e7:48:
         4b:4c:19:e9:6f:80:76:a1:a5:32:a5:9d:9b:66:5f:9e:18:62:
         97:95:99:72:94:be:b2:13:32:00:dd:52:47:0f:6f:76:38:4b:
         65:5a:a8:6d:22:99:02:28:78:da:b1:0e:57:08:36:72:3b:3a:
         92:3e:c9:8e:cb:2f:09:f1:05:1c:ee:16:9f:b1:6e:7e:71:e0:
         e7:f7:14:d6:a4:6b:88:ef:b7:66:1b:c9:2c:0a:57:03:bb:38:
         69:6c:7e:84:92:ac:78:21:40:6a:b0:a0:18:0c:0c:b6:f9:9d:
         61:bc:84:bf:26:91:c8:99:eb:38:ff:0f:96:45:ce:a4:ff:02:
         f5:2c:f9:7f:b5:65:f7:e2:62:10:71:7d:d1:06:53:1e:3b:68:
         9f:0d:20:cc:4e:1d:a3:e8:9e:30:06:75:40:bc:2a:2e:cd:0e:
         3b:9d:97:a5:7b:83:50:f5:fe:3e:60:d6:4c:04:5d:d7:72:40:
         cb:86:80:3b:2c:50:d6:92:d2:ec:81:db:94:b1:98:17:41:f8:
         df:88:b5:f9:06:09:39:70:21:a8:41:6c:61:09:12:7e:2a:86:
         88:c9:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:41 2026 by rpki-client