Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
File:                     55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json)
Hash identifier:          Ld1lEWITsSI7rB6muBEd+hH/6WHEFyPhSIjyFg/OS5U=
Subject key identifier:   D2:94:63:40:40:E5:DC:CF:4F:B9:7C:D2:DF:C3:C7:72:64:A5:67:0E
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584DB7702D7527E162F06120D040
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     21949
IP address blocks:        173.243.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2d:75:27:e1:62:f0:61:20:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=28925701-0604-4e5b-8568-1581f0155953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:4f:74:97:ac:bf:f4:5e:7d:46:c3:63:eb:
                    ad:94:65:b5:e3:19:6b:fb:2c:e6:dc:d2:57:3a:a0:
                    be:15:17:57:b5:85:09:52:f0:f7:97:cb:42:9c:0f:
                    9a:2f:84:da:53:5a:be:1d:d8:53:00:58:ec:37:25:
                    75:04:2a:ad:a0:e2:3e:3a:01:0e:86:d9:cc:97:42:
                    ef:81:3d:8c:5f:46:4a:ca:73:40:7a:37:ca:f6:2c:
                    6d:0c:5f:fc:06:c3:f8:e4:e7:56:fa:c4:28:8e:ad:
                    68:a3:75:e5:00:ef:da:b4:01:1d:a2:97:84:5e:b6:
                    bb:53:2c:1d:ae:bf:80:ac:a3:ec:d3:70:a8:a6:06:
                    2d:76:22:d3:86:9f:8d:f2:da:fb:c4:3e:5f:cc:54:
                    a7:af:80:56:24:fb:35:44:5e:18:41:5c:ab:91:d7:
                    80:36:f1:64:62:6b:a3:68:71:b2:fb:04:94:fb:7d:
                    9a:37:14:c4:6a:08:de:e4:3f:93:42:12:c6:0f:32:
                    95:33:a1:a2:9b:af:d3:e0:45:c0:e2:7c:0e:3d:82:
                    69:10:f6:75:09:3c:ee:cb:b2:d8:da:f2:85:53:b7:
                    3f:d5:0c:07:7a:fa:4a:ce:a2:64:db:c6:7d:fb:e1:
                    4d:27:fc:7a:02:64:48:bc:e0:37:6e:f0:e6:df:96:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:63:40:40:E5:DC:CF:4F:B9:7C:D2:DF:C3:C7:72:64:A5:67:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:2a:a1:9f:e5:89:4e:13:14:d2:9d:a1:da:70:b7:5f:c7:
         65:d3:96:1b:fb:42:f8:6f:a0:62:49:fb:71:6a:60:45:de:45:
         2b:fc:43:3b:5a:c6:5c:22:b5:82:6c:b9:a3:2b:86:73:6a:ee:
         3f:bc:9e:f7:2d:6a:1f:40:59:dc:41:93:38:aa:5e:4a:46:3a:
         f3:aa:77:dc:ac:94:ed:3d:dd:9a:8e:a1:46:c6:83:b7:24:22:
         76:8e:cb:69:b1:25:fa:bf:39:12:9a:b2:dc:4a:49:b3:e3:b0:
         8a:e0:72:34:92:f7:cf:9e:59:32:9a:ca:68:ce:71:ef:65:df:
         0b:94:77:19:6b:cd:04:c7:c4:39:1a:50:a7:f0:53:58:64:be:
         01:55:04:94:6a:99:fa:f5:85:ce:ef:0d:81:48:5e:82:f6:38:
         bc:29:c3:4b:1b:d2:b0:70:71:60:38:29:a0:15:10:d5:bc:6e:
         fa:1e:c1:4d:c4:41:1e:0b:13:94:e0:d1:9b:f4:b0:36:da:79:
         94:b6:f0:74:18:44:87:a5:cf:9a:35:3c:54:a1:17:2c:08:55:
         4a:6c:f2:c5:3e:e1:3b:b9:ec:7a:0f:c3:06:1d:18:27:db:e4:
         6c:49:61:00:6d:4d:d5:a5:f3:8e:5f:ab:8a:90:dd:15:13:aa:
         24:6c:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:27 2026 by rpki-client