Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa
File:                     3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa (raw, json)
Hash identifier:          YxKAsZ152U6ShmXFtuRltPZq1yUkfzyohE2fbyAJqKw=
Subject key identifier:   21:8B:59:4C:9E:7C:41:B4:8D:00:7E:B4:5A:56:92:75:86:15:2A:43
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584DC4006368821635D7892DD580
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     6922
IP address blocks:        204.158.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:63:68:82:16:35:d7:89:2d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=235d142b-0c21-403d-ae45-6b64b1aafd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:7f:ed:2e:29:48:21:13:4b:6f:bd:18:03:
                    1f:b4:5b:0f:10:ca:23:67:4f:b3:a4:a6:2e:af:ff:
                    32:0d:56:43:ed:9b:12:c0:46:9e:c9:28:36:01:3a:
                    66:90:20:d4:20:30:28:ea:94:b8:51:fb:7a:04:14:
                    f7:06:5f:7b:44:56:74:29:22:3b:6f:32:93:14:e5:
                    51:ac:fc:a9:58:94:35:b8:f6:31:8b:36:1b:ca:36:
                    3c:a1:3a:6e:13:dc:cf:64:de:0f:d5:85:88:ae:f2:
                    bc:56:c8:3e:8e:8f:f3:fb:ad:e0:63:3e:51:3d:a4:
                    eb:9b:51:28:89:b8:e1:65:01:48:db:c5:b5:d3:87:
                    eb:33:fd:37:01:d1:3b:a8:13:7a:7b:e6:ce:87:e9:
                    1b:6f:65:e7:db:c6:f6:f2:bb:14:cf:22:dd:5b:fd:
                    71:ed:9d:2b:5f:12:a5:95:96:0e:71:35:6b:73:51:
                    41:a0:df:a6:6b:36:c0:23:f0:f7:d2:43:fd:ee:0e:
                    37:1c:d9:85:09:eb:e4:36:51:bb:c1:72:a4:3f:c7:
                    16:52:4d:e2:f1:3f:f7:0e:85:76:ea:f6:12:e7:1e:
                    ef:32:1f:40:f2:bd:b6:1c:d1:2f:1c:e1:ef:a5:7e:
                    de:bd:8e:cb:f2:48:ec:64:dd:e6:63:96:bc:c4:36:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8B:59:4C:9E:7C:41:B4:8D:00:7E:B4:5A:56:92:75:86:15:2A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3505f39b-10af-3c66-bbcb-f5c37d18fbbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:56:16:df:d0:49:18:3d:71:09:bd:dc:63:3c:ba:fa:41:81:
         47:b5:3b:54:81:50:ee:90:5c:70:9c:92:7c:4d:32:ac:9c:7b:
         55:91:21:57:98:e2:a5:86:92:93:dc:fe:e3:8d:ed:25:93:8e:
         6e:46:b4:d0:fd:79:63:37:86:a3:57:96:df:9d:01:6f:ee:4c:
         79:8f:2c:cc:5f:a6:d5:1b:1b:a8:6f:57:83:fa:15:6d:6d:e8:
         3b:9d:ca:5f:ff:ba:dd:82:0b:35:ff:d4:9d:51:d0:4f:2d:5d:
         fd:f7:25:4c:8e:29:26:4c:b0:4e:71:8d:17:43:f2:12:e6:38:
         4d:11:94:ce:66:96:1b:bb:5f:e6:c7:48:24:34:fd:49:4e:82:
         54:c1:0e:55:53:3e:bf:87:3d:84:7b:b8:c8:1e:e7:dc:da:7e:
         6c:83:ae:58:20:4b:ce:00:d2:7d:ff:7a:31:55:6b:d9:9e:d7:
         2b:09:00:f2:48:a2:a6:22:61:08:cd:67:ab:38:c8:15:71:47:
         3a:35:df:bd:c3:b3:8e:50:12:e1:38:01:e0:6c:82:d2:06:ee:
         32:32:af:f0:50:68:63:db:61:30:d2:06:03:6e:85:24:1b:b0:
         0c:f8:f5:ae:91:5e:1e:09:ed:a0:c1:df:16:48:b7:45:40:59:
         fd:9d:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:27:46 2026 by rpki-client