Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3980f87-7d0d-3604-a216-f8b6c72766c9.roa
File:                     a3980f87-7d0d-3604-a216-f8b6c72766c9.roa (raw, json)
Hash identifier:          RfwypPav1Wp0Jx5P7TgP1J3P641X1HaH+7byehicTIQ=
Subject key identifier:   AD:24:69:93:2E:C4:20:8C:73:9E:38:CC:66:8A:7F:8F:D5:F2:1A:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFB89F81C98CE11C9B9080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3980f87-7d0d-3604-a216-f8b6c72766c9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        76.118.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:b8:9f:81:c9:8c:e1:1c:9b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=743694ff-af3d-44f6-ba05-78275edb1bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:c1:af:32:89:84:66:af:99:cd:af:6e:56:
                    38:f6:bc:5d:65:34:5c:fd:57:d6:88:b8:8f:c4:0a:
                    16:8c:fc:a2:70:f0:5f:97:78:e1:2d:fd:14:73:ec:
                    39:e3:fb:c8:04:cb:2e:8b:f5:09:21:bc:13:02:bd:
                    0c:94:8d:99:7b:99:e5:3e:42:2f:5a:40:70:6d:af:
                    e0:9f:4f:95:c0:09:1e:af:d3:8b:b8:46:74:b6:fc:
                    c6:d5:cd:b7:8f:57:4d:5e:c3:6f:a5:56:1d:af:02:
                    3b:72:57:de:16:d4:29:4c:6e:69:70:db:f6:a2:12:
                    a9:a1:c1:58:bd:a6:e6:3c:20:dc:3d:0c:f2:1e:4d:
                    0d:dd:ea:ba:40:3f:8d:92:9a:2a:b6:ba:7d:9a:1d:
                    28:1f:75:ce:73:93:ad:83:1e:02:6c:4f:cc:4c:54:
                    25:cc:68:d9:14:cd:90:cd:e6:fe:e2:5d:dc:e5:e2:
                    90:21:c4:6d:01:39:f5:53:e2:64:af:d4:b0:2f:fe:
                    9b:9a:cc:84:ff:db:c0:ac:82:e8:6a:6a:8c:b5:bf:
                    17:a1:bb:b2:e6:fe:77:d1:25:7c:57:eb:83:a6:f3:
                    3c:3e:fd:4f:4e:94:a1:93:d5:14:6c:b2:72:84:d7:
                    36:20:0d:3b:4f:b9:d0:cd:83:ee:ca:23:97:df:aa:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:24:69:93:2E:C4:20:8C:73:9E:38:CC:66:8A:7F:8F:D5:F2:1A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3980f87-7d0d-3604-a216-f8b6c72766c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.118.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:31:a7:a2:c4:64:18:03:57:60:4e:59:c7:1d:a1:c0:93:
         c4:09:09:a2:75:27:97:b8:1b:2a:09:9f:ec:c7:ad:30:5f:dc:
         0c:f8:d9:b5:c9:f3:88:46:3c:df:f8:22:5e:e1:ca:78:47:39:
         05:9c:52:42:c6:86:87:30:e5:f9:55:41:fb:24:d1:6e:0f:15:
         9b:6b:02:29:98:db:80:2c:be:90:10:e1:79:8b:56:a6:cc:79:
         28:b3:af:db:95:45:16:a2:d5:94:21:f7:21:be:c1:a2:13:ae:
         9e:03:56:0d:31:89:fc:4e:b2:ee:d1:7b:fd:9b:aa:b2:9c:5a:
         d7:a4:d2:c1:58:e5:5e:df:7f:6f:ae:82:78:08:47:08:e1:16:
         97:c1:78:ff:ed:8f:db:d1:9e:b8:cb:49:bb:19:a6:c0:93:2a:
         5c:80:7f:0c:d0:89:b4:bf:75:ff:4d:5f:7d:9d:a0:0a:b0:d3:
         c9:67:cc:8f:f2:f5:89:d6:31:39:21:8a:19:cd:c8:43:ec:1b:
         02:95:1e:d7:cd:bc:3d:1f:da:9d:57:cf:79:cd:08:23:f4:13:
         c8:0c:5a:da:62:5a:e4:99:46:bf:61:e6:61:72:e1:c2:35:c8:
         67:ab:6b:c8:6a:4a:9a:6c:34:66:dd:b4:cb:19:34:01:db:5e:
         44:8a:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:39 2026 by rpki-client