Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/bd55cea8-f578-3288-bfe7-62a6567fe032.roa
File:                     bd55cea8-f578-3288-bfe7-62a6567fe032.roa (raw, json)
Hash identifier:          8Kv2qLRmigmV3Zo/2b8RfAzTgKygJR2KCjuUVanZrm8=
Subject key identifier:   13:7A:9C:6B:D1:30:13:CB:6F:51:35:85:0E:18:9A:69:E9:96:FE:54
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D98260EBECF84DF92457D0D00
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/bd55cea8-f578-3288-bfe7-62a6567fe032.roa
Signing time:             Wed 22 Apr 2026 20:01:08 +0000
ROA not before:           Wed 22 Apr 2026 20:01:08 +0000
ROA not after:            Tue 21 Jul 2026 20:01:08 +0000
asID:                     11524
IP address blocks:        216.107.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:26:0e:be:cf:84:df:92:45:7d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 20:01:08 2026 GMT
            Not After : Jul 21 20:01:08 2026 GMT
        Subject: CN=72df273b-567a-4980-ac29-9ef18dcb1ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:59:87:04:50:5d:8e:70:53:57:00:d3:8e:
                    8e:45:2e:b6:70:ae:72:03:da:d1:40:97:0f:93:b1:
                    85:6d:90:2f:61:ce:d4:98:17:a0:4d:61:2d:b0:92:
                    d5:db:8d:87:e9:83:f0:0e:5c:68:81:b0:3b:92:35:
                    a4:05:da:6d:a9:05:11:c6:a3:80:94:da:70:58:af:
                    c6:28:5d:b3:30:27:5a:06:74:a2:3d:44:f4:55:fb:
                    f8:22:af:47:a2:b0:c6:09:4e:9a:0f:b7:67:56:5a:
                    21:f5:72:0f:e0:7c:75:93:bf:77:8e:de:10:9a:b8:
                    38:91:46:db:07:d1:3f:6f:ca:f9:a0:66:0e:42:aa:
                    7e:30:eb:0e:23:8f:d8:0c:46:2b:33:f5:7b:38:42:
                    eb:d6:eb:0c:b2:70:8d:5b:fb:0d:a5:c9:71:7e:ed:
                    21:3d:c8:be:b1:25:c9:ff:6a:92:d7:87:94:18:5d:
                    34:6c:8c:14:2c:09:b3:52:7b:51:59:49:c3:d5:c8:
                    ab:ce:aa:8b:1d:67:64:63:c6:b2:93:19:40:c4:01:
                    32:e3:43:09:1e:b7:85:aa:89:0c:11:b0:f0:96:fe:
                    a4:27:f8:ff:06:9d:ea:49:6d:7d:09:46:14:71:3e:
                    67:9a:71:43:a9:8e:bf:bf:c4:66:51:ec:bc:c0:aa:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:9C:6B:D1:30:13:CB:6F:51:35:85:0E:18:9A:69:E9:96:FE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/bd55cea8-f578-3288-bfe7-62a6567fe032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:19:e3:4c:1c:66:4e:4f:7d:77:eb:c6:17:7e:6e:2d:35:
         98:34:3b:40:eb:85:52:fa:6e:5e:98:b5:77:ff:74:95:03:7c:
         c4:96:90:df:3a:9a:ea:96:53:5b:90:4c:ba:b5:f0:77:41:18:
         e3:c5:3e:db:16:68:b6:69:40:35:8e:85:54:27:16:70:b2:69:
         59:6f:02:b6:fc:61:1c:1f:89:77:59:a3:c6:6f:14:db:df:c3:
         26:a2:d8:5d:94:76:7a:01:bc:36:05:27:b5:56:3c:db:13:b1:
         65:b2:75:5d:10:7e:33:9f:3b:af:f0:21:8c:d3:72:23:2d:53:
         79:60:33:ea:62:e2:e6:d9:8f:bd:8a:47:18:ac:77:e6:f7:bf:
         8e:63:e2:8f:df:84:5e:09:b2:11:7c:86:1a:bf:cb:cc:9e:7e:
         28:1a:cb:b1:a9:ca:3b:00:1b:56:ea:b9:ea:9d:ed:18:5d:29:
         c6:08:b4:c2:9c:76:1e:9b:ee:b8:9a:90:bc:32:09:57:ba:b4:
         a5:cf:b0:ec:08:a1:f5:ff:46:be:c1:4a:e8:7d:81:9b:a3:a6:
         03:c0:ea:c9:be:d2:03:1b:94:90:78:39:1c:6f:2c:87:21:a9:
         1e:90:3b:55:70:12:4f:52:ad:d6:f0:cc:22:76:5c:53:21:50:
         e2:81:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:28 2026 by rpki-client