Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
File:                     0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json)
Hash identifier:          r6VS2GSfdr5Bl2E4VQZMcxzrfuXI7g196SqG/u92NTk=
Subject key identifier:   27:76:34:27:C0:61:AC:0F:DC:B4:3E:C8:97:50:1F:EC:35:FB:ED:80
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584DC29AEFE5D04E37AC7423C280
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        198.22.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ef:e5:d0:4e:37:ac:74:23:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=d78fa83f-79bc-46ec-a023-a50b785e6564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:68:14:d6:2f:4c:15:11:2b:e1:08:82:56:
                    c2:8e:01:b8:84:f9:8a:b4:cc:a1:91:4d:63:d4:3f:
                    bc:7d:48:c4:c9:2b:2b:91:05:10:0e:80:a4:a2:4b:
                    84:7e:43:d5:b3:35:f8:15:f0:fd:be:c7:a4:e3:84:
                    2d:ff:4c:01:6d:e5:46:92:6e:b3:cc:14:23:0d:39:
                    35:f5:6e:33:0e:58:36:99:ad:55:e4:fd:29:f4:7d:
                    b5:53:75:98:27:18:b7:77:9b:90:74:43:99:a0:b3:
                    c4:d9:12:1b:f0:88:1d:9c:1e:09:fa:16:8f:1f:45:
                    a9:07:c4:bc:6d:e3:68:90:24:81:39:33:e9:12:58:
                    98:af:cf:cb:a2:fa:b2:9e:a6:71:37:33:7c:12:69:
                    c4:8a:62:94:72:c4:4e:3a:e7:45:87:6b:44:3f:42:
                    9b:e4:7f:30:d8:8d:51:fe:86:83:66:74:28:ac:c2:
                    69:4e:ca:91:bc:10:0f:72:26:10:90:6e:7c:76:5c:
                    b1:1c:69:db:1b:09:c3:2a:7f:ef:24:db:dc:c1:37:
                    05:50:e3:4c:45:d5:24:6c:4f:8c:d2:32:06:e9:97:
                    d9:1c:db:c2:f0:80:88:46:38:d1:4f:36:7d:47:2d:
                    9c:7b:d5:00:83:36:7d:20:1b:f6:0e:1d:80:98:a3:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:34:27:C0:61:AC:0F:DC:B4:3E:C8:97:50:1F:EC:35:FB:ED:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:0e:ba:69:c4:dc:12:74:54:26:43:33:46:53:99:e7:2c:
         97:53:0f:50:27:a1:6a:6d:b1:75:70:e0:53:ef:d3:41:2b:c6:
         d4:52:99:98:b1:62:69:94:c6:63:77:d1:01:cc:68:84:f6:3e:
         c7:72:e8:2b:f0:ca:21:fc:69:70:36:d4:e9:bc:c4:88:d5:ed:
         4d:8e:f9:74:34:ea:29:73:e4:7a:47:a6:d1:21:db:29:0e:4a:
         6a:3d:83:98:85:6f:1e:fd:87:13:15:a9:12:1e:f2:dc:0b:8b:
         22:d9:11:1b:05:48:07:ae:d0:9b:b1:30:3b:ca:dd:9c:13:4f:
         91:1a:51:fd:9f:cf:aa:05:70:8b:31:e3:cb:7f:54:e9:70:cc:
         84:8c:7e:3f:36:d6:d8:7b:2c:b5:7c:7b:45:a4:9d:dc:d9:bf:
         44:f7:f5:ec:59:16:d8:e2:4e:7a:f5:48:c0:f4:8f:a4:6f:f5:
         a8:62:e5:59:81:56:99:95:41:3d:67:f4:61:71:d6:11:21:81:
         42:70:40:b4:49:27:2c:c1:18:23:f7:99:34:99:ed:28:73:b0:
         8d:0d:a2:79:a1:2d:b9:16:a5:67:05:eb:36:91:be:4e:39:87:
         90:c5:a4:7c:da:eb:dc:c6:95:8a:72:29:6b:79:34:7f:55:9f:
         d6:17:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:51 2026 by rpki-client