Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa
File:                     328baafe-3364-3ed0-bd36-2657ea8176d7.roa (raw, json)
Hash identifier:          7iquYSpL3UKe0g2ecnDAmfolyjhNzAMldJEx9NyFRVc=
Subject key identifier:   E9:27:DE:C4:06:77:2F:7A:DC:A9:DE:D5:0B:41:00:91:05:E0:F7:AE
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584DB4A58B3E534AC42377702E40
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     393653
IP address blocks:        104.128.156.0/24 maxlen: 24
                          104.128.157.0/24 maxlen: 24
                          104.128.158.0/24 maxlen: 24
                          104.128.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8b:3e:53:4a:c4:23:77:70:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=65ceba98-6d63-4607-983a-9bfbdb34cd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:44:bd:b5:58:d8:88:33:99:9c:8e:f9:84:
                    78:1f:0f:6c:4b:50:6f:d9:98:bc:48:de:18:50:f4:
                    05:25:b8:d4:00:9d:02:b2:53:93:5e:03:f3:b8:61:
                    45:33:02:81:72:4a:44:19:77:de:2b:bd:94:b2:16:
                    bc:23:92:be:b6:99:d6:67:9d:cb:c5:f5:cf:b0:7f:
                    30:43:73:b7:36:9c:1b:fb:b0:59:e0:eb:a0:51:f4:
                    22:78:4d:a5:cf:0d:f6:a9:34:28:b9:eb:e1:1a:c5:
                    e6:87:e7:1e:77:15:cc:34:85:b0:48:17:f6:ee:c8:
                    bb:d1:fa:eb:1b:cc:d8:50:c9:23:92:d2:1d:1a:5a:
                    49:fe:41:6e:bb:54:a2:d6:ab:95:e7:66:4b:02:6c:
                    d5:ba:3e:be:02:2d:98:d3:c0:3f:81:25:c8:92:3e:
                    7d:48:6e:73:0e:5b:e5:03:54:03:b4:ae:fe:a0:7d:
                    d0:54:22:76:e1:fb:91:ad:7d:99:b2:83:04:5d:fd:
                    e5:0d:c2:46:31:2d:b8:1e:2e:11:b7:64:7e:b6:eb:
                    9b:20:60:f4:c9:03:0a:64:b2:be:96:77:63:b2:ad:
                    6f:24:f0:6f:8c:4e:0e:80:1a:cc:e5:f5:7c:63:5c:
                    75:bf:29:d4:b4:2e:86:11:01:72:a7:9d:42:45:a5:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:DE:C4:06:77:2F:7A:DC:A9:DE:D5:0B:41:00:91:05:E0:F7:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/328baafe-3364-3ed0-bd36-2657ea8176d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:98:bd:e1:fd:f2:df:74:b6:83:40:54:79:ca:4a:48:0e:
         5d:c9:89:3e:43:a3:fc:9a:59:5b:9c:df:91:87:7c:67:3a:93:
         16:a6:67:9d:13:b6:6e:9a:76:3b:96:e8:61:0f:dc:50:7f:59:
         97:1b:d9:fb:4f:70:d6:d9:79:79:b1:b4:80:98:4a:1e:15:44:
         00:0a:1d:9b:48:8a:82:3e:19:c7:8c:32:24:72:89:0d:0a:8b:
         8e:1d:7d:c7:6d:0b:42:fa:03:12:4d:4b:ba:d6:a2:60:27:ac:
         e1:47:d4:e4:a9:c3:5c:82:e0:a9:50:bd:23:2a:3c:ff:a1:c2:
         e8:22:9d:e0:a6:55:4e:25:48:be:75:3d:9c:da:e2:9f:6e:c8:
         75:4f:bc:d9:c2:6e:e7:93:48:0c:23:f0:75:b3:a0:39:e5:15:
         92:e5:44:fc:cb:7d:aa:0e:8c:3d:17:e3:91:4b:c4:82:0c:4b:
         ab:ce:0e:19:76:16:9a:ad:1d:5c:3c:ea:bb:8f:5a:94:6b:26:
         27:9b:20:ce:4e:64:da:f0:17:0d:7f:5e:32:63:67:08:51:fa:
         64:1f:4d:a2:a6:f3:91:b2:bd:4d:af:12:6b:36:ac:54:2e:89:
         5f:11:39:90:1f:05:ef:fe:6f:ac:e8:92:95:63:c4:b3:0e:c7:
         a5:d7:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:28 2026 by rpki-client