Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
File:                     0f0d1703-db6a-3fa5-8591-22716446fe2b.roa (raw, json)
Hash identifier:          Q51YoW+bAkbYN4gFtu4T4zWaXSgi5d/LrOXPAkiaezs=
Subject key identifier:   B7:87:B5:21:7A:6D:BA:9D:AE:13:AD:A9:BE:15:17:F2:17:E6:7B:9F
Certificate issuer:       /CN=05ceb199-4ec7-4d16-9739-22face258c65
Certificate serial:       010D0C9F4328584DBA3AF965077E578A61BA7900
Authority key identifier: 25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     32073
IP address blocks:        205.222.9.0/24 maxlen: 24
                          205.222.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f9:65:07:7e:57:8a:61:ba:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ceb199-4ec7-4d16-9739-22face258c65
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=4425aa25-6455-4a2b-b3d0-7aaecc7e19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:1b:a1:03:2c:99:21:12:84:1c:7e:13:c1:
                    ca:5b:a5:23:92:a6:d9:3d:8d:34:b3:13:a9:80:92:
                    f4:90:6b:57:7e:57:23:78:50:b4:1d:ef:c9:9d:18:
                    bf:d3:84:f7:ff:9d:90:c5:17:28:d4:80:eb:80:ad:
                    70:34:ef:10:c9:3b:59:45:ce:99:f8:a8:c1:74:94:
                    fd:6d:82:98:e2:83:7c:04:e7:dc:26:23:81:cd:95:
                    bf:b1:4a:e3:3c:ed:1b:8e:b5:4d:13:37:ac:b8:e8:
                    00:3f:dd:d6:ae:b0:82:dd:55:2b:80:10:bb:41:ee:
                    84:0e:59:9c:40:0d:34:30:16:44:be:5e:09:0f:34:
                    44:0f:06:34:bb:5e:8a:4e:cb:2d:03:6f:2d:53:34:
                    cb:c5:7a:15:15:2a:92:68:cc:fe:0f:e8:27:dc:a8:
                    88:c9:ec:4f:1f:d7:d7:de:9e:41:1f:db:6b:f5:c4:
                    01:b0:a8:1d:94:2b:28:1a:d9:bb:3c:a9:62:cf:a2:
                    bd:a3:18:90:d5:4f:1f:0f:6b:65:28:36:e2:9a:f6:
                    30:0e:05:be:02:e4:34:08:52:fa:96:f4:70:b3:af:
                    44:69:f2:ec:8f:b8:20:cd:44:b5:8b:69:f9:c9:28:
                    ec:03:8a:fd:c8:06:70:38:e2:a1:7a:58:d0:48:32:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:B5:21:7A:6D:BA:9D:AE:13:AD:A9:BE:15:17:F2:17:E6:7B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl

            X509v3 Authority Key Identifier:
                keyid:25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.222.9.0/24
                  205.222.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:00:97:66:27:58:c8:39:bf:d0:a4:bb:b6:19:03:34:ea:67:
         f4:4a:2d:77:4d:b7:00:8f:6f:13:a8:e4:b6:aa:1c:6c:01:8e:
         fe:c2:18:17:ab:88:2e:6c:85:6a:dc:30:bb:13:84:98:0f:0a:
         78:d2:b3:90:d9:1a:65:38:f5:20:33:77:9b:1b:b7:22:1f:d4:
         83:e6:ba:86:8e:43:cc:c0:bc:59:03:45:d5:4f:6d:25:8d:f6:
         1e:03:14:f4:54:82:ba:cd:bc:d1:28:41:8c:b6:92:10:9d:b9:
         45:28:a0:2f:76:ec:19:c7:a6:68:dd:77:f7:2f:62:f1:15:bc:
         a2:08:09:37:c8:d3:50:49:74:d8:f8:31:e8:5d:9d:e2:32:aa:
         95:1e:19:da:a5:6c:ba:c4:eb:33:24:9b:d5:e5:a1:19:64:e8:
         f0:21:c7:0f:d1:19:70:ff:7d:16:b2:bd:01:7e:f0:b8:43:81:
         80:71:53:79:26:44:9a:d7:d1:c8:9e:16:16:87:dd:14:ec:52:
         bf:27:32:1b:30:3e:ae:bc:e9:5d:cc:71:71:ca:9f:4f:59:a2:
         62:83:9a:ae:f7:14:e6:95:a6:58:7c:0d:21:3c:8f:d6:b3:7a:
         31:81:d2:f4:65:a8:f4:13:96:de:c7:cc:77:61:b0:55:be:78:
         d4:2d:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:30 2026 by rpki-client