Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
File:                     2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa (raw, json)
Hash identifier:          OOovQf9hE0/N6bknnTqbTUsSU0X66DSyZOsKrN0oI7M=
Subject key identifier:   CD:3D:2C:62:36:9C:A0:2D:1A:44:68:0A:99:4C:E1:26:F5:E1:EF:E6
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584D524345B57B83675E833CDAD0
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     40244
IP address blocks:        94.26.84.0/23 maxlen: 23
                          2604:7c00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:45:b5:7b:83:67:5e:83:3c:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=4bfe530f-e923-406c-978c-4ba8d260f829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9b:13:6c:e1:72:5c:83:e1:60:45:16:4b:8e:
                    36:8a:d2:c6:89:a6:02:2b:94:ad:7e:25:c5:6a:20:
                    52:95:90:ed:62:b3:54:23:42:ee:5d:74:df:df:b7:
                    73:3a:95:e1:12:b0:39:00:4a:77:40:54:1a:72:9e:
                    08:f3:c9:06:ff:e2:f0:ee:e3:1f:c4:5d:bc:5d:91:
                    61:86:db:bb:5d:38:90:dc:9c:74:78:c7:ba:03:7e:
                    ee:d1:d7:ec:b1:e4:eb:62:0b:ec:18:71:a2:3d:fd:
                    b2:d9:ee:8b:c8:05:8f:1a:ba:95:68:3b:1a:94:ae:
                    54:5d:7a:64:a3:d8:83:8d:98:b7:e6:1c:c6:39:fd:
                    d4:99:ea:9b:d8:b3:0e:3f:9f:06:a3:76:34:77:6a:
                    5c:71:ee:e7:a5:47:46:e8:1a:5e:bd:82:5e:43:f8:
                    1b:4a:4a:4c:f6:9b:c4:27:e8:78:36:57:5a:40:76:
                    95:c5:40:2c:04:2e:c4:df:2d:a4:e7:f5:31:b9:5b:
                    0a:4b:82:63:50:93:c3:37:62:cb:95:14:70:98:b0:
                    f1:33:5b:1b:f4:e1:0a:ee:ed:1d:26:2b:52:21:b1:
                    8a:6f:33:a9:9e:09:85:d3:9a:43:bc:0a:49:4a:4f:
                    f2:62:f2:49:87:96:be:da:65:71:8c:14:50:27:3e:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3D:2C:62:36:9C:A0:2D:1A:44:68:0A:99:4C:E1:26:F5:E1:EF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.84.0/23
                IPv6:
                  2604:7c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f8:b8:de:ce:15:65:47:14:2f:ce:09:da:de:f0:57:d7:dc:
         86:54:b8:9d:c3:bb:37:34:0d:4c:75:9c:1c:b0:7a:5a:f2:1e:
         0f:cf:54:0a:c3:04:76:1d:1c:98:d2:b4:75:8c:76:89:ef:3c:
         47:06:9b:b3:34:bb:e6:63:8d:39:53:9d:bc:62:2c:f4:17:1a:
         af:6e:ca:ce:72:79:72:db:a8:02:eb:a1:d4:ec:24:66:37:e7:
         46:4e:8c:0b:a4:d9:77:fe:47:03:61:0e:e9:dc:fa:3d:e6:8f:
         ea:88:c7:4f:b7:8b:85:92:e4:1c:f3:11:51:43:13:e4:c2:2d:
         f9:bd:aa:1e:42:10:65:a0:86:9a:68:eb:6d:cc:31:0a:80:d1:
         3a:28:35:9b:f3:9e:3a:6d:31:7f:c5:c1:8b:6e:7f:57:0d:ea:
         da:be:c8:da:ed:c3:08:5b:b1:68:6c:19:b6:7d:cd:4c:f1:57:
         aa:08:5b:e0:b6:17:79:f7:93:18:08:81:3b:af:56:ab:c0:ee:
         4f:e3:fe:9b:d2:c0:1c:f2:36:8b:bd:65:a3:e5:86:3a:ac:bb:
         c1:1c:8c:e8:ed:a5:9f:5b:ac:ab:88:2a:0d:70:a6:20:50:55:
         90:ac:71:00:92:aa:a6:3b:e4:47:07:7d:3e:d3:ad:5b:62:99:
         96:07:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:59 2026 by rpki-client