Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c0d305d-86ef-36cc-9c97-1749a6e200cd.roa
File:                     9c0d305d-86ef-36cc-9c97-1749a6e200cd.roa (raw, json)
Hash identifier:          ZapV/HK7+PxYarat7HiSBJh8NIfI5eoalgaceWBWlJM=
Subject key identifier:   AB:10:1A:76:98:52:BE:D7:11:3D:90:55:8F:C8:BF:B5:AC:CB:05:BE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D362B02C340183517E09E1980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c0d305d-86ef-36cc-9c97-1749a6e200cd.roa
Signing time:             Wed 18 Mar 2026 17:41:53 +0000
ROA not before:           Wed 18 Mar 2026 17:41:53 +0000
ROA not after:            Tue 16 Jun 2026 17:41:53 +0000
asID:                     20001
IP address blocks:        67.218.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:2b:02:c3:40:18:35:17:e0:9e:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 17:41:53 2026 GMT
            Not After : Jun 16 17:41:53 2026 GMT
        Subject: CN=42afabe9-139d-4bc2-aa56-da8fc2d7122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:2d:c1:74:fc:87:6e:4c:a7:b1:08:3f:ab:
                    34:56:44:03:22:17:6c:e0:ae:49:40:55:fa:02:69:
                    14:21:c8:50:ed:c4:9c:d3:37:bf:f5:8c:74:de:d2:
                    86:3b:70:6e:1b:65:d8:31:8a:47:b4:72:a3:44:5f:
                    c0:14:85:87:c5:9e:38:6a:bd:63:51:8d:27:0d:16:
                    cc:f2:5a:80:21:55:9e:65:1f:a5:c9:67:ee:2a:9a:
                    a1:a2:63:74:3e:a4:41:2a:8c:9c:56:57:b3:0e:d8:
                    ad:ea:bf:78:1a:2c:cc:34:84:1c:3e:ec:27:58:d6:
                    c1:2f:ab:bd:65:8e:a5:06:25:87:2e:91:fb:36:30:
                    46:c4:5c:e2:49:29:b6:01:cd:13:86:3d:08:88:94:
                    ae:7b:9d:37:7e:e9:be:15:d2:8e:bb:ef:17:3b:b2:
                    bb:8b:3f:3d:17:49:59:e4:5c:34:a2:bb:b2:38:32:
                    71:31:bb:0a:5f:10:65:c8:3f:20:75:5f:f5:d1:0d:
                    c6:a3:cb:2a:3c:bf:68:f4:34:e7:b8:5b:8f:e9:d1:
                    02:e5:e3:c8:e2:d2:95:23:0b:a2:54:5e:37:15:8f:
                    7b:d2:55:7f:ad:b1:0d:01:26:a9:fe:85:32:48:34:
                    90:87:f2:74:9e:c1:35:68:f0:05:61:63:e5:23:61:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:1A:76:98:52:BE:D7:11:3D:90:55:8F:C8:BF:B5:AC:CB:05:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9c0d305d-86ef-36cc-9c97-1749a6e200cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b2:91:03:c5:1c:9c:6f:b3:05:88:0e:a3:47:9c:d7:3b:c7:
         bd:95:7f:2d:8b:38:1d:53:7e:bf:94:58:69:40:1a:8b:73:3c:
         d8:f5:7a:df:bc:14:7b:3e:73:8d:62:54:0b:02:fc:3f:40:20:
         3d:09:a0:e5:33:20:b9:18:25:8d:ef:d9:e0:eb:ab:fc:69:81:
         3c:b8:a1:0b:5b:70:0b:b8:3a:15:b1:68:54:ef:21:ee:9e:87:
         7c:6f:e4:15:26:af:e2:e7:57:d4:95:ce:95:65:7e:21:ed:58:
         2d:c8:64:7a:f0:ce:dc:99:7b:11:c6:4e:ec:98:1c:ff:cf:13:
         87:e9:8d:bd:7e:da:33:42:86:51:49:77:f1:18:9d:a4:6b:78:
         e9:ed:40:ac:c9:0d:c8:4b:05:87:02:22:f7:a5:c0:e5:b0:d5:
         ed:f9:69:92:ab:85:e3:a7:b8:0a:2e:56:e1:55:4a:e0:e5:71:
         25:f9:40:3d:7c:b2:e4:ab:9d:66:3e:b6:6a:e9:cb:a0:b9:cc:
         db:46:f3:0b:a4:8c:44:01:f4:ed:76:8e:f2:1f:10:2a:74:24:
         92:b1:e9:24:12:d6:70:ad:6f:b3:ec:01:2a:de:15:a0:78:bb:
         8f:92:18:ee:6c:57:37:a0:d9:ee:35:82:cd:60:75:cf:02:a1:
         22:1f:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:19 2026 by rpki-client