Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/099d3504-5965-3b84-8556-07a10a0f932e.roa
File:                     099d3504-5965-3b84-8556-07a10a0f932e.roa (raw, json)
Hash identifier:          naDAkVyykm74cp6vYGGMKmRI/Zn4j3SLy5SEvegOzBs=
Subject key identifier:   94:E4:41:1E:B4:77:2F:83:E5:E2:D3:23:FD:DA:94:0E:D3:B0:B8:A6
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584D8AC53E43210EF20D04A1E980
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/099d3504-5965-3b84-8556-07a10a0f932e.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        57.140.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3e:43:21:0e:f2:0d:04:a1:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=f2b4c11f-f5e0-4df1-98f7-4ac430c7572c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:52:30:33:4b:94:f1:ed:f5:dc:22:b1:d5:
                    58:67:ae:2d:e6:de:27:4d:d4:59:9b:ea:03:9c:b6:
                    5a:41:be:31:a5:e4:bd:63:82:bd:ee:bd:e2:74:71:
                    47:5a:ee:bf:ab:9d:d0:ed:60:57:2c:f2:49:e2:a1:
                    df:88:7f:df:fb:92:00:7b:bd:e8:f0:a9:ac:e3:6d:
                    61:4d:8e:fa:ec:43:53:b0:7f:19:b2:86:ac:9c:81:
                    9c:80:9f:e1:4e:70:24:da:dc:38:fd:3f:c3:a6:39:
                    44:86:00:7e:81:4e:a9:b2:bb:00:5d:45:dd:17:a5:
                    6c:41:b5:d9:8d:50:14:87:04:85:57:98:eb:0f:aa:
                    15:72:11:dd:fb:13:d7:af:20:68:45:16:df:ef:ea:
                    17:e1:9c:28:de:41:63:0f:36:8b:55:ea:a9:30:84:
                    7b:96:eb:3d:e6:e0:14:4b:02:49:22:84:4a:84:58:
                    0d:d1:7e:38:fa:c8:9e:a3:54:40:c6:cf:02:ba:da:
                    2e:6e:ae:2f:08:02:8d:13:7d:8c:40:f5:04:59:b3:
                    9d:42:96:20:d2:35:5c:35:ba:e7:74:16:70:59:06:
                    87:7a:20:31:a2:f2:04:ad:dc:62:fd:5f:54:bc:d1:
                    a8:c9:aa:16:f1:d8:6f:f8:c8:0d:e2:4c:25:ac:dc:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:41:1E:B4:77:2F:83:E5:E2:D3:23:FD:DA:94:0E:D3:B0:B8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/099d3504-5965-3b84-8556-07a10a0f932e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f6:f6:5b:2c:8f:23:8b:c2:b5:3c:5d:f2:1e:2e:ea:dd:e8:
         ba:d6:6f:33:0f:2f:03:47:c3:50:ae:f5:65:e6:69:86:b9:51:
         ce:22:87:10:a3:b4:75:ac:f3:0f:ed:91:ff:46:86:84:f7:f2:
         ac:e2:55:5d:85:8d:cd:14:b8:04:17:75:b4:d9:fc:3f:0d:c0:
         72:64:02:07:7a:73:c9:48:27:ef:83:11:37:84:ab:2d:fc:75:
         ea:ed:1e:2c:f7:bf:8a:1b:06:84:b6:a1:dc:4e:ac:e7:32:e1:
         0e:98:5e:87:d6:eb:1a:ef:54:03:30:78:d6:cf:6c:b2:df:bc:
         0b:c6:af:63:d3:07:3f:f0:83:57:af:e7:23:ad:b8:5a:69:7a:
         63:b4:6d:a1:b0:6d:49:c1:28:06:d6:44:46:71:01:6c:0f:1e:
         5f:f5:ec:b2:92:c7:e2:0f:90:15:8c:87:42:af:72:73:a1:2e:
         a1:87:81:74:b5:84:c9:da:02:dc:21:1f:79:0b:50:02:5a:73:
         21:d1:ca:b7:83:97:31:68:df:fe:fb:f6:93:eb:b6:4b:b9:4a:
         a8:c6:45:31:17:2e:e4:e8:7e:16:5b:3a:c7:9d:3f:3c:ce:f9:
         74:c5:2b:a3:cd:68:16:86:ce:29:08:ac:28:a0:11:28:6f:03:
         fd:09:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:21 2026 by rpki-client