Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa
File:                     890573c2-5d76-3e60-aba8-8cb1b23922de.roa (raw, json)
Hash identifier:          JVyt7xMyPQK4p8xpHYOFeiFm5cgTc6n9K8s7MDpdHG4=
Subject key identifier:   81:86:45:E2:BE:F2:18:D1:A8:C7:2D:40:6B:3D:B0:2C:84:E6:76:44
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584D8EF581EA40596ACAC0357600
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        67.159.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:81:ea:40:59:6a:ca:c0:35:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1e6e8fd3-b264-4f3c-80a5-053253ab24da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:90:c3:8a:1c:5a:ed:b9:da:0d:97:2e:4a:
                    52:87:10:10:f9:43:47:0a:e6:7f:77:7a:89:41:36:
                    e2:33:cc:73:37:cd:5d:64:68:ab:5b:c9:5e:4a:35:
                    24:9d:2a:c0:f6:46:a4:b3:ad:09:bc:ff:73:fe:da:
                    62:8a:84:6d:81:32:50:c9:60:14:63:e0:5a:52:18:
                    15:05:7b:e5:67:9a:a5:db:e6:7b:55:73:1d:7c:5d:
                    df:e1:e0:ee:f1:92:53:bb:78:2d:11:14:12:d3:fe:
                    b5:85:4a:a9:a7:59:77:67:48:51:f1:8b:66:78:94:
                    ec:84:5c:b0:51:c6:3b:09:bf:f9:43:19:a9:48:47:
                    e3:df:a1:55:c4:8e:6d:43:94:99:f1:1c:10:90:1f:
                    1c:1b:82:dc:9c:a6:f3:fe:f1:fb:da:60:b9:11:74:
                    36:c0:2d:9d:2c:99:50:dd:e1:21:cc:ee:c9:a9:90:
                    6b:0c:68:f0:cf:35:7d:27:cd:96:6f:ec:6b:e1:34:
                    16:9a:62:f9:ed:16:27:21:80:c1:ee:d4:d8:eb:fd:
                    41:0d:cd:5e:f0:f0:ab:c4:92:4b:98:30:76:21:44:
                    a3:5b:12:e7:46:49:9b:9d:29:9f:82:74:85:94:f7:
                    47:d9:a2:3a:ed:93:b4:a2:50:ad:1a:d9:8d:a8:b4:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:45:E2:BE:F2:18:D1:A8:C7:2D:40:6B:3D:B0:2C:84:E6:76:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:82:52:23:11:62:dc:e5:b0:fa:75:f6:ff:00:1e:a8:b1:0e:
         36:aa:84:98:d8:3c:1d:fa:55:a7:95:88:05:bc:d3:84:4d:e6:
         0e:3e:44:07:0f:8f:e6:b7:53:95:1a:aa:55:0f:56:90:af:8c:
         77:89:31:f6:7b:bf:52:c8:77:f4:9d:62:24:af:2a:15:62:49:
         59:0b:8b:c0:af:0a:17:9d:96:11:88:86:9b:d6:c0:58:2a:7b:
         cf:67:13:40:08:e7:6e:b1:61:4c:91:54:aa:cd:0f:06:66:a7:
         f3:54:a5:2d:73:b9:c3:1b:6e:1b:85:96:5e:40:fe:81:1a:2d:
         00:3c:4f:3f:16:15:38:bd:d5:46:0d:51:4d:e3:25:ca:4b:75:
         17:7d:a4:7f:c0:9c:9c:fb:f4:52:ad:f7:57:f5:a6:9a:00:65:
         fb:d0:e2:8a:90:d5:57:75:b8:9c:46:d5:df:ef:b9:dd:a1:ba:
         b0:98:dc:c5:dc:c7:11:d1:ac:9b:02:53:c9:8d:55:8c:c2:d3:
         c3:ff:b7:0b:04:fa:a3:f7:85:6a:4a:ea:3f:f4:4f:c0:64:2f:
         d9:0c:d7:de:25:26:8a:b7:a9:f5:12:cd:1e:ba:b9:d6:66:d7:
         df:74:5e:6b:e0:85:35:f3:0f:f7:1d:f8:34:a0:5d:53:5f:ce:
         e4:51:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:48 2026 by rpki-client