Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eaf9fa1-5edb-3d8f-9b4e-468bd158f04b.roa
File:                     2eaf9fa1-5edb-3d8f-9b4e-468bd158f04b.roa (raw, json)
Hash identifier:          ZaMecIGwc72IRSKyr1BLC1Jjk1DocxstwpYryt5rvtA=
Subject key identifier:   19:BF:BB:81:4A:ED:F2:EF:CA:18:AF:52:3A:4C:02:52:92:58:6A:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D769C0E41E94122D96380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eaf9fa1-5edb-3d8f-9b4e-468bd158f04b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        69.253.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:76:9c:0e:41:e9:41:22:d9:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=376b5986-8684-42b6-8ed1-4cc72af0609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:f4:ab:82:47:ad:74:af:45:32:ae:d6:51:
                    63:40:e6:23:e1:13:ac:08:10:7c:2b:c1:04:72:94:
                    d2:d5:35:a8:d0:bc:11:67:cc:cb:46:19:85:a2:12:
                    62:d4:e0:19:f7:a1:ba:4e:81:97:ae:ee:fe:d3:f3:
                    53:37:7a:93:40:e0:1b:49:4b:ad:4b:3d:b0:0c:b2:
                    57:06:c8:04:a7:44:7a:41:93:ea:19:d5:4f:e0:19:
                    6c:b7:bf:36:89:45:7a:cb:7e:7a:3b:8e:d4:38:5b:
                    28:c9:de:7b:fe:1b:aa:a2:fd:2b:0e:34:7d:0b:ba:
                    a5:08:bd:27:48:7d:ce:8a:07:0d:cf:5f:15:8d:a5:
                    b6:4d:4b:79:b3:e0:e7:78:f5:53:96:5b:2a:e9:16:
                    bc:05:0a:06:74:ee:49:a5:e9:ae:d2:c1:7f:40:2c:
                    15:50:ed:b3:24:64:a8:a8:43:13:3c:6e:ed:b2:6b:
                    59:ed:0d:1f:e8:32:0d:3a:37:05:1b:48:95:56:82:
                    2c:35:45:20:a7:dc:5f:53:e2:19:07:7d:0c:20:32:
                    27:a6:d9:a0:3d:23:ac:3c:07:fc:b7:a5:04:5e:8b:
                    e5:32:9c:73:99:40:6d:69:6c:c7:a3:63:85:e8:d8:
                    26:44:e0:df:d4:ee:48:d0:f0:79:78:ba:38:a9:10:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BF:BB:81:4A:ED:F2:EF:CA:18:AF:52:3A:4C:02:52:92:58:6A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eaf9fa1-5edb-3d8f-9b4e-468bd158f04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:53:6c:d6:61:f4:c4:7d:39:af:2c:43:48:ca:80:84:9b:10:
         dc:25:61:79:df:3c:7b:52:6f:3c:19:41:c1:13:e7:78:21:13:
         8c:29:81:e5:6f:cb:1c:13:ab:68:fe:3f:0e:5d:68:78:d6:67:
         58:6d:72:44:91:e2:a7:9e:1c:66:e7:2a:21:37:c9:3b:38:a0:
         22:a7:6d:a5:97:f9:0d:e8:e3:78:d5:29:55:c4:bf:04:3b:32:
         cf:2e:81:06:e8:a0:86:e4:42:94:40:e0:7f:41:05:91:c6:be:
         65:63:33:c0:49:31:dd:3a:a3:ec:c6:d4:78:95:6e:3c:71:64:
         b0:2a:20:22:c2:87:33:7e:c9:f5:d6:15:02:69:7a:7a:79:de:
         99:df:38:c6:be:9c:ce:c0:bf:d9:94:7f:34:9b:6a:56:c2:c7:
         07:92:53:de:61:73:f6:ce:56:73:c6:1a:a0:77:e3:cc:43:ac:
         87:8f:df:41:a6:1b:ea:64:d9:6a:b2:c7:a2:9d:ef:dc:31:4c:
         eb:54:b3:bb:1e:59:e8:94:a9:78:b6:f8:19:02:73:24:bd:c6:
         3a:a6:0d:94:b7:92:28:14:a9:5f:41:87:1f:45:b6:7e:f8:f1:
         55:99:09:63:0e:97:8e:d6:d5:20:4b:5b:df:9f:8a:a1:cf:0c:
         74:2c:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:48:59 2026 by rpki-client