Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa
File:                     c95d2b0f-c456-373f-981b-14f4a65414b4.roa (raw, json)
Hash identifier:          01aipMFTmWR+Dc6aXENoPh7/rCEonSZo/gT9ZfPH4Vg=
Subject key identifier:   FE:F5:53:AB:FD:D1:75:99:18:91:5C:4A:E9:62:1B:2F:C6:5F:1F:01
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F4328584DCDC596B303E8C9886ABA7480
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     18540
IP address blocks:        216.230.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:96:b3:03:e8:c9:88:6a:ba:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=77b47e22-c6e7-4a6f-8665-2bce60944d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:6f:bf:f9:46:cb:b5:36:0f:92:5f:6d:79:
                    61:28:17:97:d0:35:06:ad:4b:28:69:2e:bd:2e:db:
                    94:f6:25:5b:32:cc:87:67:e0:f7:38:e7:fe:d5:2f:
                    ae:ca:c5:eb:88:a5:8f:19:e6:7b:a8:d9:d8:f8:12:
                    05:de:3f:df:04:be:5d:0b:51:72:cd:27:27:1f:fc:
                    b0:12:74:13:73:f9:14:fd:4f:99:a2:b2:3f:84:3f:
                    19:f3:0b:4e:c0:d8:66:6b:b9:fb:eb:a9:fe:d7:c0:
                    4c:42:89:2c:a9:fa:4d:61:a2:10:69:e0:b9:04:d2:
                    25:1e:9f:7e:cc:19:c2:6f:75:fc:09:84:09:61:18:
                    f0:26:bb:b3:71:b0:41:3b:c5:4b:d2:fe:9a:ea:47:
                    93:84:0b:d1:89:dd:b5:46:23:9f:b4:0c:17:13:64:
                    84:02:1c:c1:bb:0f:6e:98:20:cb:47:a9:15:03:e3:
                    c0:d4:54:75:0c:bc:be:b2:13:50:d1:d2:96:8f:61:
                    25:dc:81:38:58:2e:85:02:5e:52:71:eb:1c:89:96:
                    36:ab:0b:7c:dc:fd:c4:ab:be:cf:2f:47:66:8f:1d:
                    aa:10:cd:af:da:84:d2:ad:17:c2:f1:18:a2:29:4b:
                    b8:c2:ec:4f:31:64:d4:d3:9e:0b:eb:d3:58:7e:70:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:53:AB:FD:D1:75:99:18:91:5C:4A:E9:62:1B:2F:C6:5F:1F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/c95d2b0f-c456-373f-981b-14f4a65414b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:64:1f:97:13:fd:80:78:97:85:4d:f5:f1:01:30:63:8c:82:
         ca:c9:dd:84:63:34:39:52:a9:f9:2a:ea:ab:f7:bf:8a:62:da:
         b7:2c:29:3b:97:f2:42:e4:e6:6c:79:a8:05:50:e2:8b:7d:be:
         52:51:c4:24:31:e7:e3:1b:7f:fc:95:c1:0f:3b:df:e8:bd:61:
         d2:42:42:38:0d:3e:01:40:c1:fa:ac:c8:55:0a:69:9d:88:68:
         21:be:50:be:25:55:8a:48:6d:a4:1c:cb:4d:c1:3b:c5:53:58:
         16:48:46:11:21:2a:ff:4b:17:79:d8:69:2d:ac:d6:a9:3e:72:
         f6:3d:72:a2:c9:2b:41:99:69:40:a9:57:69:bd:de:6f:94:65:
         f0:af:46:2e:50:00:11:90:50:d8:56:30:5b:a1:eb:e1:8c:b9:
         f5:bb:bf:53:ff:98:4f:e9:bb:cf:e8:f2:86:21:95:b6:d7:6e:
         0a:1e:41:ce:48:6d:2a:32:d9:6b:e0:9a:ca:f0:b3:8b:46:4c:
         1e:28:43:c9:43:6a:f6:72:33:ff:d4:0d:de:a4:2c:e7:7f:02:
         00:d4:99:dc:a3:8f:1c:8e:fc:24:62:fd:b3:03:19:99:02:96:
         05:7e:ff:3f:d1:dd:29:b5:17:c5:31:9b:0c:b0:c4:44:7a:3f:
         94:3f:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:47 2026 by rpki-client