Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa
File:                     3fa69f5f-3eab-334a-b72f-f556121b7e40.roa (raw, json)
Hash identifier:          BTLx0uYje09zqZzvxj8oClIwFt/cpRvR+5ugPHcSIaY=
Subject key identifier:   05:E3:F3:7C:EE:E6:FC:2B:50:07:42:4D:00:F1:C1:57:B9:29:2C:46
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584DC5659A19FC3F48D9B3E43AF0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     5769
IP address blocks:        137.175.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9a:19:fc:3f:48:d9:b3:e4:3a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=bdb81812-f6d2-49da-b678-9e969e0b90d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:43:7c:68:21:7c:eb:f1:e1:c8:e4:c0:f3:
                    37:eb:99:d4:9e:f0:42:58:ae:e3:d4:b8:a8:04:bb:
                    8f:3a:eb:1f:2e:56:21:9a:e4:7a:51:78:04:5c:19:
                    87:b6:03:3e:36:f2:a8:61:2c:07:4d:4c:34:d3:a8:
                    e1:c3:b3:9f:f3:51:80:64:d9:3d:d7:ba:cc:9a:3d:
                    f6:8c:4d:c2:09:c7:bf:5f:20:d0:93:a3:47:8b:48:
                    71:7d:f3:f1:4c:ac:a9:b1:1d:bd:e4:59:bd:ac:bb:
                    07:53:a9:78:82:ac:66:ca:92:7d:2b:ba:28:c4:34:
                    e2:59:f4:c4:fd:c1:d9:a4:0a:7f:f7:0f:2c:b3:b6:
                    42:53:70:5b:ae:09:09:00:9f:72:9c:ad:52:a8:f8:
                    6d:e8:d2:81:ec:3c:7f:6c:f3:05:cb:48:d1:7f:58:
                    81:28:94:70:47:59:80:d9:c1:53:3f:9f:44:2e:82:
                    67:93:49:1e:31:03:08:90:a6:0c:f8:3f:5f:c8:7a:
                    32:c5:e6:4b:24:bd:44:55:60:6f:24:af:e9:b7:0e:
                    3f:0c:33:4a:62:a1:df:f0:36:e6:e2:da:e4:79:90:
                    8b:b2:c1:bf:9c:ca:19:1b:31:f4:7d:8b:10:2f:70:
                    9f:9f:1c:5f:94:2a:25:10:99:3a:35:6f:14:30:d2:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:F3:7C:EE:E6:FC:2B:50:07:42:4D:00:F1:C1:57:B9:29:2C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:13:5e:cf:70:fb:65:1b:ad:40:85:21:c5:54:87:37:6a:45:
         c8:73:2f:ad:cd:44:1a:37:9f:f0:80:3b:04:9f:c9:4f:70:b2:
         70:76:a2:15:2b:e2:27:cd:15:5a:03:06:8b:85:b2:3e:ad:cc:
         7e:81:21:27:1f:b7:c0:65:b9:2f:0c:cd:af:f4:d7:46:f0:36:
         aa:dc:cc:ed:85:ce:99:64:84:61:20:d0:d6:ef:23:e6:98:3a:
         8e:73:fd:b1:00:50:8c:27:dc:a0:f3:54:c6:a0:c6:1b:96:87:
         45:65:ee:29:5e:f9:6c:71:45:3f:96:19:48:bc:55:03:f0:5e:
         aa:9c:4d:d7:f6:ca:8b:98:df:62:8c:41:c6:18:d5:7e:39:79:
         1a:dd:98:a1:42:ad:d9:15:84:ff:a9:0b:35:61:d3:07:c9:6f:
         69:59:90:fb:a2:7d:38:82:d2:ae:11:f0:31:9a:94:13:c5:1d:
         fa:a0:83:8c:aa:e1:c2:38:33:4f:97:99:7c:c8:16:82:8b:0c:
         9a:f7:e5:66:a9:80:2b:a6:b7:0f:1f:94:8c:01:26:75:ec:46:
         5b:d9:72:e9:a3:bb:3d:aa:8a:1b:ad:e9:ce:0c:ac:b6:7e:ba:
         da:e3:6c:bf:40:ab:32:63:d7:e0:a9:35:c6:57:de:ae:fd:24:
         56:23:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:21:29 2026 by rpki-client