Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa
File:                     5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa (raw, json)
Hash identifier:          V9YAu2htodPEpnxb8BTuEQ+F2xvOE1NtQ2PxmcGmy9g=
Subject key identifier:   FF:F8:41:C4:47:3C:F4:CC:A7:67:73:19:73:76:AD:34:B0:C4:F2:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981F34CB908A6DB626FCC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        76.113.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:f3:4c:b9:08:a6:db:62:6f:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=25f5aa8b-1eeb-458e-be67-4ae163c5a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:83:4d:4e:30:24:ac:4e:25:70:54:23:87:
                    3c:e8:db:72:dc:1c:17:e4:48:27:8b:04:02:01:bd:
                    d3:c4:2d:2d:7e:f7:4a:06:7d:c1:ba:d2:ee:ce:55:
                    85:57:cd:70:ba:c2:f4:e0:c8:ed:f2:a8:43:89:be:
                    90:39:cd:71:f9:50:9b:50:e9:27:cb:7a:20:f7:06:
                    1b:72:e9:df:65:f7:1c:e4:e8:41:ce:d3:ac:5d:03:
                    c9:5c:69:66:b6:df:f3:88:1b:fe:77:c5:a5:c1:34:
                    33:f5:02:78:82:c2:0b:35:94:30:c2:c8:d9:aa:24:
                    7a:c1:3c:fb:44:eb:0a:ee:48:cd:39:b3:80:2b:85:
                    59:fc:08:4d:5c:e3:b7:18:85:37:fc:e3:15:1a:67:
                    d7:44:09:c8:30:98:f2:a2:fc:4a:48:79:17:39:08:
                    00:b5:1c:94:56:f9:a0:25:fb:9d:8a:b0:98:b8:30:
                    d0:46:92:f4:2b:ab:bf:31:b9:f7:7d:23:fd:05:85:
                    5e:7d:7e:f0:f8:be:96:fc:8f:02:2e:b1:90:67:8a:
                    76:4c:1b:98:c0:70:89:39:70:fe:02:49:11:cb:83:
                    a9:a6:04:d4:28:5b:85:03:58:1b:d2:e6:e5:a7:9c:
                    af:9e:14:ca:82:cb:c4:16:ce:42:69:32:7b:a9:43:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:41:C4:47:3C:F4:CC:A7:67:73:19:73:76:AD:34:B0:C4:F2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.113.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:2a:9d:3f:19:6a:29:03:16:df:0a:89:2d:76:82:bc:01:c4:
         5a:40:ef:e5:16:24:eb:16:65:86:92:55:9b:47:fa:9a:e2:d6:
         fd:c0:f9:3b:b9:3f:ae:73:8c:14:61:d9:b1:8c:90:06:35:6d:
         21:60:bc:24:b1:1a:7e:c1:b2:28:9f:97:10:19:33:4c:15:68:
         09:f0:35:68:bb:38:32:07:1f:f8:9d:c7:7e:5b:92:a3:24:89:
         3a:bf:6e:87:ea:b5:ff:ef:dd:2f:c6:77:8f:b4:12:93:50:0a:
         eb:74:5d:ca:4f:7f:ce:d6:28:f6:b6:7c:fa:e8:22:99:82:36:
         6a:e0:87:f1:4d:bb:8b:bc:11:de:5d:55:67:96:55:82:bb:0d:
         e7:fe:3a:f8:1d:3d:f5:2a:ae:54:74:77:42:e8:b0:3a:dc:4d:
         be:0f:50:56:6e:a3:f9:8f:de:38:2e:4b:5f:2a:13:1e:fa:dd:
         d5:a6:a0:2a:2c:fe:f7:01:8a:ff:b4:40:2f:a1:62:f9:31:23:
         74:5e:17:eb:9f:12:18:04:1c:f0:75:32:c4:d8:0c:a3:31:66:
         a5:91:24:de:5e:50:31:04:1d:99:bf:b7:77:1c:63:13:df:2a:
         19:36:c2:a4:57:99:9d:dc:c8:f0:14:6b:0e:1b:da:16:f8:7d:
         91:f6:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:11 2026 by rpki-client