Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fed18be4-1d5a-36f2-b8e9-16016061bde1.roa
File:                     fed18be4-1d5a-36f2-b8e9-16016061bde1.roa (raw, json)
Hash identifier:          EP7TDhcpECrYPq9zTD4K0UsDMms3DBI5Aoov8E3EgNc=
Subject key identifier:   A2:B3:8D:3C:C2:69:FF:E8:D8:41:1F:2D:53:E2:78:C6:5F:18:27:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52437FA3BE9A67665E0B8D50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fed18be4-1d5a-36f2-b8e9-16016061bde1.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        76.107.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:7f:a3:be:9a:67:66:5e:0b:8d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=e0d55192-d4c0-4ea3-9459-aa6f526f9549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:42:d4:88:4a:2c:ff:c5:ef:0c:6e:7b:86:
                    b1:7f:d1:f9:28:84:2b:35:b5:33:a5:c1:a6:8a:13:
                    7a:e4:75:1f:31:9a:26:7f:58:95:2a:f5:bc:29:04:
                    3f:9d:9a:b5:b2:66:19:80:17:86:18:f7:9e:26:30:
                    eb:dd:2d:2a:52:a7:dc:65:b2:7f:fb:e9:cc:46:d5:
                    6d:0d:da:4b:cb:1a:97:7e:c9:92:30:1d:85:c9:2d:
                    e0:7c:3e:42:b6:be:3f:66:18:5e:48:1f:47:92:0b:
                    6c:d5:6d:c1:c5:34:8a:00:0b:ef:8a:39:46:53:d7:
                    4e:ff:87:c1:57:24:4b:49:07:7b:42:7e:62:fd:e8:
                    bf:b2:95:6b:72:37:6e:4a:02:e3:47:af:01:22:ad:
                    01:76:55:0d:42:d7:23:3d:92:18:09:61:3b:e1:5f:
                    3b:48:a1:37:ee:eb:ec:29:b9:46:a5:f2:8a:fe:d1:
                    d5:17:b2:52:cc:85:92:6e:d1:05:57:94:a7:8b:57:
                    6f:66:0d:d8:d2:15:d6:41:be:e0:23:ad:e1:14:bb:
                    c0:1c:c9:f3:65:62:2f:59:a9:b3:51:be:87:bb:ae:
                    ff:25:67:1a:5e:68:be:b0:c0:62:f3:f9:c3:3c:e7:
                    a5:1d:e1:e4:38:69:cf:34:7b:12:2d:fa:31:59:1a:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:8D:3C:C2:69:FF:E8:D8:41:1F:2D:53:E2:78:C6:5F:18:27:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fed18be4-1d5a-36f2-b8e9-16016061bde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:e2:ae:82:e0:9b:8b:7a:72:9c:9e:e1:f2:82:64:4d:d7:
         2b:4e:f1:1a:22:e5:f8:22:28:ba:c9:ad:76:96:89:a0:7a:5b:
         b2:cc:19:76:cd:49:78:49:f6:26:a8:2a:31:f2:ff:3d:0b:c0:
         40:07:04:96:57:5b:63:20:c9:f5:27:ae:f2:5e:2c:a7:1b:06:
         f3:70:8a:56:66:5f:00:86:0d:ef:f4:ec:13:30:2c:0a:78:ac:
         6e:6e:85:70:58:04:89:fa:96:91:75:fe:7d:3b:de:2d:a8:8a:
         0e:de:e7:0f:9b:fe:be:e0:85:60:ba:17:31:ad:3a:f4:06:58:
         ac:b2:0f:7c:35:2a:78:85:77:93:92:aa:2e:1d:d3:f3:59:0d:
         28:84:cd:36:dd:55:f5:92:62:10:73:bd:1f:37:90:59:4d:b5:
         73:d0:ed:c6:20:b6:09:6a:ac:16:e8:e8:b5:2f:4f:79:b4:e0:
         64:7b:b5:29:43:c1:47:9b:16:65:e0:7c:5e:9a:e0:57:76:a3:
         1b:a4:44:9d:27:ab:fa:7e:26:d4:56:e3:d2:6e:4b:0a:65:1b:
         1a:41:7c:b6:f9:8f:72:60:1d:e7:9f:27:4e:9d:cd:ec:d2:65:
         d8:eb:84:ef:e0:31:bb:2f:bc:9b:77:86:77:5e:e8:fa:68:17:
         27:81:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:03 2026 by rpki-client