Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
File:                     2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json)
Hash identifier:          i1NYEhOWd3fqpH1iuAEWV2bsloLLCdcDdbUs3f2S9pc=
Subject key identifier:   E9:EB:12:2A:1F:39:81:13:93:86:8C:E0:1E:A4:3B:13:C7:C4:DB:E6
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584D98BAA45BC8A08EE3097AC680
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a4:5b:c8:a0:8e:e3:09:7a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=a736d2cf-8413-4c92-97bf-7207508d22c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:f4:d6:89:63:4e:f7:b6:1f:53:5a:f2:ed:
                    01:72:4e:78:75:51:1c:45:46:0d:db:c5:88:b6:59:
                    81:ca:68:32:3c:93:67:1d:03:0b:1a:b4:22:75:ac:
                    7b:85:a7:5b:97:82:7e:06:af:eb:10:90:3c:04:d0:
                    2e:9a:46:45:35:de:db:3c:93:98:1e:1d:9d:d6:07:
                    57:50:69:01:9b:08:55:42:99:e6:1e:bd:6f:07:48:
                    16:4e:99:a2:5f:42:f9:2e:7c:6e:3e:ef:8d:b8:3f:
                    74:dc:e4:18:85:6e:08:f4:35:fe:01:2f:92:ad:46:
                    4a:73:af:f8:9d:54:c3:f8:05:d8:95:01:34:1f:9d:
                    92:3d:ce:c6:7b:96:1a:11:28:db:b2:0d:15:fb:e8:
                    0a:cd:d7:38:f6:05:5f:e4:43:e0:ee:a3:60:df:f2:
                    29:6b:d2:dc:1a:68:54:1f:eb:9c:51:47:39:42:04:
                    43:1c:d0:46:69:eb:11:e2:de:74:b8:9e:da:4c:2b:
                    dd:ba:84:20:97:50:22:6e:fb:f1:7f:19:c5:7c:bd:
                    15:6a:e7:6d:f2:eb:20:9b:a6:db:bf:5e:7c:5b:40:
                    d3:fa:5e:ff:04:08:1a:d0:74:a4:61:d4:1c:29:fc:
                    c2:18:7f:4a:dd:94:23:7e:bf:71:72:d8:26:25:84:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EB:12:2A:1F:39:81:13:93:86:8C:E0:1E:A4:3B:13:C7:C4:DB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:22:b9:6d:30:0a:11:4e:35:5f:c9:81:9f:5d:f4:ec:d9:1a:
         6b:94:07:88:d0:3b:5e:71:1c:73:43:08:6a:eb:7b:ee:e4:8a:
         97:b8:d7:37:94:40:d6:d8:34:e2:e3:cc:06:8f:69:9a:98:31:
         84:4a:84:86:af:e2:9b:59:08:33:f2:43:71:a4:27:c2:3c:af:
         35:22:2d:0c:9b:b7:10:b5:a5:04:75:b4:b3:8c:09:05:a1:ac:
         42:cb:c3:a6:d0:b3:68:86:a6:2c:e8:35:9a:02:a1:7b:7d:e9:
         f8:ba:e4:92:3e:6b:86:fc:f7:ba:72:fe:57:0e:0e:c5:c6:77:
         f5:59:62:60:8d:c1:50:f0:61:8e:eb:28:ec:6f:b6:2f:5c:0b:
         97:b1:31:30:de:2f:28:06:bd:e9:cc:70:6f:1f:e5:a3:74:bf:
         76:21:d4:53:cf:79:25:92:2a:ff:d4:c2:6d:d4:47:dd:f7:1b:
         71:16:61:b0:0e:ff:93:73:25:80:e6:97:07:f0:85:fd:62:96:
         54:2b:13:d6:0a:d5:35:58:41:43:90:07:69:9e:da:92:12:e6:
         01:ba:22:6d:3d:a1:04:48:67:df:50:1b:e9:9d:b0:c1:28:10:
         65:30:da:32:22:87:6a:2d:1c:d9:df:7e:2b:3b:f5:65:4b:db:
         06:60:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:15:48 2026 by rpki-client