Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/010edb08-9bbc-3b0b-8098-258f5f7f8010.roa
File:                     010edb08-9bbc-3b0b-8098-258f5f7f8010.roa (raw, json)
Hash identifier:          h8BFh+4OHrv4eBAxhnhd/bUUsYUgZM87/v48ov32B1I=
Subject key identifier:   F4:90:0C:DF:B1:D2:17:CB:41:6F:D4:35:C3:4F:EE:9E:4D:EF:12:A9
Certificate issuer:       /CN=db0c6eca-2399-410f-9a3e-c3cede4c4362
Certificate serial:       010D0C9F4328584D95EFF6046014D8780AE59F80
Authority key identifier: 3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/010edb08-9bbc-3b0b-8098-258f5f7f8010.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     13927
IP address blocks:        205.237.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f6:04:60:14:d8:78:0a:e5:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0c6eca-2399-410f-9a3e-c3cede4c4362
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=b57b9aad-58d9-4945-9a3f-f73e8fd9be17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:a7:88:f9:d1:d0:ee:0c:13:04:42:d0:c0:
                    57:2a:c7:59:35:c1:d8:1d:a9:30:e5:1c:2e:a2:77:
                    0d:b8:17:ac:93:83:56:a1:f6:1b:45:ba:d4:e4:d9:
                    7f:94:2b:ab:19:dc:6e:be:a7:14:67:6b:9b:d1:30:
                    33:57:fd:0c:35:5d:b3:29:af:91:28:85:ff:d9:11:
                    5c:d2:b9:10:9d:81:d0:29:db:04:03:25:5f:bf:61:
                    6e:be:57:4c:68:26:eb:c0:1e:34:ce:d6:a9:12:60:
                    99:44:68:6c:c9:ca:ac:d3:5f:50:ac:91:05:04:72:
                    3a:83:47:37:d2:4a:02:37:40:26:93:4a:05:31:7c:
                    dc:70:3b:aa:34:e0:5d:e2:f0:20:1c:8a:4e:f9:9f:
                    50:bb:4d:9e:31:c1:c4:4d:de:8b:48:d7:d3:ce:07:
                    bc:2c:ba:d7:fc:a1:70:69:7c:60:10:03:65:28:d8:
                    04:bc:e3:61:e3:3b:c1:14:18:87:34:4b:0a:01:ed:
                    c3:18:d4:32:af:fb:c9:30:7b:4a:2e:12:3f:c8:fc:
                    26:7a:2e:a8:8b:22:00:46:7b:0f:53:0d:55:48:29:
                    32:74:a5:35:f9:4d:ae:39:5f:aa:10:5c:f9:dc:09:
                    a9:7e:45:bb:09:88:ed:de:4c:64:95:e9:ac:8e:93:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:0C:DF:B1:D2:17:CB:41:6F:D4:35:C3:4F:EE:9E:4D:EF:12:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/010edb08-9bbc-3b0b-8098-258f5f7f8010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl

            X509v3 Authority Key Identifier:
                keyid:3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:b7:68:b4:4c:00:6c:80:19:de:18:85:25:47:2c:45:92:
         99:19:7e:a3:f8:20:1f:42:39:0a:c4:f6:a7:f8:32:8c:2d:23:
         0b:34:75:e3:84:1c:2d:d9:3a:3f:c6:87:0b:99:18:82:9b:88:
         3a:d6:b8:14:48:a1:e7:e6:3f:ed:ea:57:63:ce:4b:af:5d:35:
         ec:be:dd:66:de:9d:fd:b5:82:9a:9f:9c:ee:2b:70:6e:9c:0d:
         11:84:cf:b1:d2:49:3d:9f:3f:38:c0:51:70:e3:db:03:a6:9d:
         ae:41:91:17:4a:11:d6:c1:5e:1d:b3:48:fa:ac:36:f0:cd:62:
         7c:59:54:80:df:c8:f3:a3:cc:66:fb:dd:27:aa:7d:38:e8:97:
         1b:f1:e9:f4:4c:16:98:2c:5e:ab:ba:81:e6:b5:45:d7:fe:d4:
         30:31:5e:a4:eb:ef:fb:ca:cf:62:fe:16:aa:3d:e2:87:a8:8b:
         5a:bc:ba:02:de:ae:f3:32:44:c7:46:e4:e5:66:47:51:32:b4:
         d8:ad:9f:3a:3e:26:66:a5:03:2f:3f:de:5a:d6:a1:e9:d0:61:
         29:42:e8:51:32:92:3a:b6:61:ee:af:f5:b3:3b:1e:b4:2e:bb:
         0c:5e:aa:a3:e5:a7:09:1d:e9:ab:d7:70:7f:06:da:b3:c9:8d:
         61:8b:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:27 2026 by rpki-client