Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/df58f38b-07e7-3109-bea3-5156253b8e57.roa
File:                     df58f38b-07e7-3109-bea3-5156253b8e57.roa (raw, json)
Hash identifier:          Ji/xSjJk5xsMTXnYugCCjfGPlWbeUpAt/v7l0NgH3Pc=
Subject key identifier:   BF:BE:B4:90:21:D2:50:D1:4B:97:F5:89:03:74:A8:20:2F:2C:24:90
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584D9325688942102889637AF880
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/df58f38b-07e7-3109-bea3-5156253b8e57.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     10361
IP address blocks:        69.191.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:68:89:42:10:28:89:63:7a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=735ba003-5327-4461-af07-eb8930da065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:f3:64:f1:f8:04:b0:2a:29:a1:c5:1c:17:
                    22:20:f0:c9:b1:8c:9a:9f:57:7f:a3:b4:69:d2:57:
                    42:aa:01:43:82:3e:9f:e6:1f:bd:8c:5f:cf:d6:9b:
                    c4:c7:49:f4:af:83:bc:62:c3:5f:a6:8c:19:a4:f9:
                    25:22:68:79:30:ca:2f:84:ed:2e:1b:26:22:55:40:
                    9f:d9:6c:c9:d2:fb:b4:af:aa:df:82:72:7b:b2:51:
                    c2:bb:b7:e2:d0:e7:2a:c3:8c:00:d4:f1:0c:cf:ca:
                    4f:0c:70:be:82:1e:57:38:65:c8:e4:ef:fc:0b:e1:
                    bc:40:c2:29:99:1f:92:e4:16:04:b0:5f:09:21:09:
                    00:82:27:4c:aa:ee:af:e9:19:1e:7c:d5:b3:af:13:
                    a3:05:da:35:42:35:a1:95:4c:6c:da:04:c1:64:76:
                    73:76:1b:1f:2c:13:e1:99:84:9f:30:23:ae:1b:7a:
                    8d:68:6d:a8:cc:d6:f5:60:94:7b:c7:f0:35:82:a2:
                    f3:7b:48:99:18:09:d1:fa:eb:1c:0f:50:c3:28:44:
                    95:92:f7:2a:5b:32:ec:8d:87:22:db:4f:03:a2:45:
                    51:96:2d:ff:22:26:74:81:14:ba:b9:e4:d7:6c:72:
                    2b:b1:c9:d2:44:43:c4:63:5c:2e:7c:ef:b3:13:5e:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:B4:90:21:D2:50:D1:4B:97:F5:89:03:74:A8:20:2F:2C:24:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/df58f38b-07e7-3109-bea3-5156253b8e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:f3:e9:50:77:4d:7b:c5:a9:20:21:09:27:83:af:9b:9c:
         a2:19:a7:24:3c:29:5f:68:4b:c8:b2:fb:79:f2:2a:c5:1c:ff:
         4c:ed:b8:15:43:e8:f4:d6:1a:5d:f4:b3:83:c3:de:85:13:6b:
         3c:e2:a7:b2:2d:f6:40:5e:cc:3e:5f:e5:b7:be:93:31:23:c5:
         c5:6d:87:c2:56:c2:4b:47:cf:a3:ab:8e:d1:9c:17:41:7e:3f:
         61:16:53:33:1b:03:6a:dd:c9:5b:35:0c:51:c9:ab:4e:07:9d:
         d5:a5:aa:00:c1:52:a7:58:7e:c9:53:d5:c4:b8:b3:29:8f:d4:
         d3:22:e3:4d:87:77:7f:25:f2:1e:4b:e7:4c:ca:fa:b6:c1:e8:
         2c:b0:17:fc:f8:df:05:4d:26:c8:d8:82:2c:85:15:50:0e:d8:
         14:cc:98:53:55:99:90:b8:c6:82:68:4d:af:72:94:01:bf:35:
         d0:c2:b0:25:b2:23:db:a3:72:b7:ad:c4:79:81:2c:b6:25:87:
         5b:b9:4e:2f:ea:8a:7d:a0:03:10:f0:25:38:ca:49:92:ee:75:
         b2:67:bb:72:d1:d6:50:7f:ba:a8:ab:03:59:0f:b1:df:ab:61:
         5a:d1:ec:22:9b:5d:cb:51:b9:33:d1:81:30:35:85:1a:e5:9b:
         92:28:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:55 2026 by rpki-client