Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa
File:                     4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa (raw, json)
Hash identifier:          0VGMDhXMZ2IxQLEV1CwfrLUE38zVUFp1XeNCunuxJmQ=
Subject key identifier:   F6:A8:6B:72:28:F8:90:6F:15:B6:5D:83:AA:72:38:3D:21:94:27:7D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC458406216B4F41F0C0BE38
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11404
IP address blocks:        199.27.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:84:06:21:6b:4f:41:f0:c0:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=2c920f71-373f-4e54-a8f7-4cb5147d9863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:66:37:7f:1b:74:a1:c3:b4:93:c6:ad:77:
                    1a:2c:43:3c:07:d0:28:df:f8:23:b1:0c:7d:34:14:
                    d4:8d:4d:65:68:f1:98:70:7d:66:9a:61:b8:fe:a3:
                    9e:14:2a:57:51:0f:6e:92:df:bb:61:8b:e3:b5:1d:
                    54:3a:4a:d1:23:59:cc:b2:7f:bf:56:ca:29:1f:4b:
                    d7:b6:9b:ac:46:26:dc:29:fb:cd:92:38:67:1b:a4:
                    3b:17:95:b5:91:17:38:d8:e3:06:80:c2:ef:fc:7a:
                    f3:5e:90:41:e7:e8:91:0a:17:36:45:08:6f:48:dd:
                    fc:cc:86:e8:98:55:eb:f6:02:0d:fc:46:8e:ef:f4:
                    28:7f:e5:d6:74:df:2a:ba:a1:51:ca:fb:f1:2c:37:
                    40:fa:27:19:fd:ae:b4:37:a6:7f:fa:3e:3b:40:0e:
                    2f:70:cd:98:68:e0:b9:00:4b:5b:e0:aa:66:5e:e8:
                    6e:b7:bd:14:3e:d2:a6:8e:28:72:15:3d:c3:bb:95:
                    57:54:00:df:5f:73:8d:e4:97:65:d3:20:6e:44:b8:
                    7c:f0:66:a4:5c:3a:cd:b7:ed:d5:ed:cb:6d:f5:23:
                    a3:77:05:f0:ee:13:a4:4e:01:67:da:d0:91:a0:33:
                    0b:23:dd:ed:82:0a:9b:01:38:c9:e2:d1:23:9d:02:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:6B:72:28:F8:90:6F:15:B6:5D:83:AA:72:38:3D:21:94:27:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:c4:de:ea:fb:a2:98:3e:96:6f:44:2a:2f:39:c3:08:16:
         57:73:b1:da:dc:27:77:58:05:bc:70:9d:f2:1c:f8:f5:c4:16:
         78:40:46:f9:96:31:86:2f:35:45:9d:4a:53:6c:aa:46:75:91:
         c6:a0:53:92:3f:07:d5:99:87:8e:48:98:32:96:bd:e2:f4:db:
         a1:4d:d8:ba:c4:a7:3d:b5:b3:bd:30:f1:70:57:a9:05:9f:b0:
         b6:74:d2:ed:2a:60:1a:f7:fc:fd:f2:33:ef:f8:0b:bd:3b:82:
         6b:c2:9c:f6:1e:10:79:e2:7c:ac:a5:7a:d8:95:5e:ae:fc:01:
         d0:c0:ca:70:fa:6d:97:84:a8:db:6b:fe:6a:f0:e0:f3:27:5a:
         a7:45:1b:00:98:06:9f:95:38:b9:4c:af:54:38:a7:bd:41:39:
         18:63:f5:cd:c8:5e:ee:39:0f:72:0a:ef:65:01:aa:da:31:3e:
         b0:2a:62:8e:a2:17:c3:8a:34:df:53:7c:8d:71:25:54:e0:7c:
         f7:97:e1:34:c7:89:5c:33:ab:ff:7f:aa:f3:a8:31:9f:41:ee:
         2f:65:b6:bf:86:26:f1:65:82:c9:41:65:c3:65:35:88:76:3e:
         00:8e:c7:ff:92:f5:31:db:89:3c:f8:da:65:a1:60:98:7e:b9:
         53:33:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:26 2026 by rpki-client