Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa
File:                     43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json)
Hash identifier:          yS/S4Qg3CyAtZOObCENZKBViLh8BbQiUnWWu1y5JrEY=
Subject key identifier:   9E:6E:59:00:04:D8:AC:CE:6C:75:82:67:C0:5B:5D:98:C3:01:A5:43
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DB4A586A22F8A735DA1C38B00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     11290
IP address blocks:        104.200.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:86:a2:2f:8a:73:5d:a1:c3:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=7f6ddc7a-a451-43d8-a821-55f7573ae478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:de:71:23:2e:d0:bc:c2:32:07:0c:4e:dd:
                    97:d3:f9:13:dd:cc:83:dd:2a:56:9a:2a:c4:01:99:
                    d9:22:7a:52:a8:46:c3:07:7d:cf:d0:f1:0b:e3:07:
                    e7:30:d1:61:14:2e:f1:f3:84:7e:df:49:a8:8e:8b:
                    f6:31:63:00:52:5d:40:2e:d0:a6:78:f3:9e:85:03:
                    38:84:9c:9c:c5:38:a2:2a:97:3b:a9:4c:18:fa:e2:
                    a3:7f:3d:3b:40:64:b1:4f:ec:e9:59:16:ca:08:41:
                    2d:fc:8c:66:91:6b:2c:40:7f:77:70:1f:8c:45:c9:
                    16:7e:79:d0:f6:73:45:93:59:2b:a4:9f:7c:ea:4b:
                    7a:36:56:58:65:b4:76:48:25:32:40:a8:79:c4:ab:
                    1b:b1:3f:48:f8:2a:ba:b3:37:8e:2d:6e:72:e3:e9:
                    87:bf:dc:e6:17:bc:29:ed:4c:69:8e:db:b6:42:d9:
                    32:83:53:25:8b:c6:c2:55:f3:4b:40:4e:c0:f5:c5:
                    5e:7c:14:1e:03:19:ba:70:eb:29:51:cd:3e:e7:ae:
                    70:14:48:6d:3e:b4:4b:b9:93:c5:ee:93:92:2c:17:
                    70:7c:10:a3:3f:6d:1c:c1:c5:ad:04:10:fd:0f:9f:
                    6f:6f:eb:17:95:80:db:9c:ca:8c:bc:58:c1:1c:a8:
                    55:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:59:00:04:D8:AC:CE:6C:75:82:67:C0:5B:5D:98:C3:01:A5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:61:4e:ce:5f:9c:b4:53:1a:62:25:b3:45:c1:13:4e:64:b7:
         80:81:f9:55:1b:f9:b7:88:4d:d8:81:90:4c:c6:7c:21:37:c3:
         9c:04:b4:79:fd:82:60:2d:f7:6e:6e:6e:ee:2c:ed:dc:03:6e:
         19:3f:fa:99:3a:2f:e0:b5:fd:4d:93:cb:63:42:54:5e:95:a2:
         17:7e:82:44:05:b1:b7:14:3f:2f:5c:93:52:7b:08:a4:17:9f:
         9c:7a:ce:ee:16:d1:8d:bf:34:5c:4e:e4:5e:f0:30:7f:08:a2:
         6b:57:c9:c0:18:fa:41:89:ba:50:84:a7:76:bf:02:c0:68:16:
         d9:71:33:04:a5:58:b1:95:08:89:b4:10:e1:b8:63:ea:4b:68:
         f7:4c:09:37:8e:98:34:1a:50:e9:ab:f4:3c:d4:c9:1a:b4:64:
         da:0c:cc:d0:1b:a6:20:60:dd:99:92:a5:fb:24:c0:1e:6e:bd:
         f6:d9:0e:c0:8b:0f:21:e5:7e:e7:39:3a:a2:95:7a:a1:81:81:
         6d:c7:b7:3e:af:bd:6b:b7:d5:db:e5:13:b5:45:83:27:9f:f7:
         33:79:98:2f:1c:7c:de:b6:be:07:31:f2:6a:60:77:51:9e:79:
         71:88:ed:05:f6:77:15:16:89:42:a3:c7:6c:b5:7b:71:f8:f0:
         61:06:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:56 2026 by rpki-client