Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
File:                     9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa (raw, json)
Hash identifier:          9EeqZ5/CS00uW/GMWIkcEfdIVbWIN/t7h9BkuWRq4eY=
Subject key identifier:   9B:FA:02:88:18:ED:5D:31:F5:21:10:29:96:81:70:37:AC:F8:C0:15
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584D8EF980CFA203B505202DA380
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     40934
IP address blocks:        69.48.238.0/24 maxlen: 24
                          209.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:80:cf:a2:03:b5:05:20:2d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3fab1780-6815-4c10-b1cf-d8ed67763bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:4e:78:31:c2:c5:d5:76:6b:de:a8:f7:ce:
                    ce:15:a5:45:4a:ea:9e:ae:f4:38:d6:36:12:16:ba:
                    54:26:09:84:bf:44:b7:f5:8b:a8:aa:96:cc:e0:4a:
                    67:73:05:86:fc:d6:66:31:33:17:14:38:32:5e:2c:
                    e4:52:79:eb:80:f5:a4:85:4e:cc:f0:10:54:85:ca:
                    0e:5f:58:c2:31:86:af:64:eb:ff:d9:5d:e8:63:58:
                    3b:84:e9:58:a8:29:67:1b:a8:cc:5a:10:fb:e4:a4:
                    f6:45:e6:bd:12:ae:88:d7:59:f0:2f:1d:8b:00:8b:
                    0f:4f:26:ac:4b:df:8d:fd:39:ad:1a:13:55:88:5a:
                    05:b3:e8:e1:ff:f1:8d:64:c5:a4:1f:d2:b5:d9:f8:
                    e2:81:ab:44:a3:af:e6:79:e7:8a:a5:0c:16:35:37:
                    49:b6:95:fd:1d:f3:cc:72:84:bd:44:ab:54:9e:63:
                    2f:73:80:30:08:e8:5a:3a:25:01:a5:95:a6:4a:e4:
                    47:bb:47:36:c0:9b:4b:64:03:b0:4a:df:a7:17:52:
                    96:72:35:33:97:e7:b4:89:5f:f5:d3:d8:26:ca:01:
                    84:61:11:c1:ac:7b:1d:c2:45:43:ef:6b:29:ea:0f:
                    10:7e:28:07:1c:b1:88:ac:e9:ac:b9:c2:f5:1b:65:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:02:88:18:ED:5D:31:F5:21:10:29:96:81:70:37:AC:F8:C0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.238.0/24
                  209.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:b8:c5:20:98:bf:88:d7:b9:22:d7:76:66:06:70:b5:08:
         95:e9:70:3e:5b:7a:ba:92:f2:88:84:41:25:e3:8f:d9:6a:7a:
         a1:51:6c:e3:79:73:c0:56:da:bd:88:37:0d:99:cf:74:a3:7d:
         81:46:a2:ea:f8:78:a1:83:e7:88:6c:c7:52:64:df:27:bf:ab:
         ad:03:d0:70:b4:88:0e:2f:b1:c7:01:2b:59:c1:ab:76:a3:f6:
         c7:50:e5:5f:58:86:5a:f1:a0:0a:79:c8:73:2f:cf:b1:9d:90:
         28:62:93:57:7e:90:9e:a2:c6:21:c9:c4:fd:a1:4a:e2:d2:9d:
         b6:04:aa:b8:9b:e4:2f:36:cd:1d:0d:e6:d3:68:6e:89:5b:ef:
         14:a6:6d:3a:73:c5:31:82:0f:c2:d0:0a:83:b3:d9:99:38:98:
         52:39:95:ac:ea:ca:c4:49:37:93:71:8d:cb:fc:e8:da:ae:5a:
         7f:e7:4f:cc:08:b1:8d:e6:da:95:ad:55:8a:cd:03:84:b0:93:
         39:15:1b:ba:25:a2:f1:f8:87:55:3d:4e:b1:16:52:84:16:0f:
         70:b5:e3:9a:d9:6d:ac:7b:5c:c7:16:4f:0f:f2:bd:e0:62:c7:
         61:72:ed:c3:0a:37:24:04:75:9f:9d:6a:bc:f0:d0:1d:0b:64:
         f0:6a:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:07:54 2026 by rpki-client