Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/9f62cdd9-9e81-3d1d-baef-b8d357fb6011.roa
File:                     9f62cdd9-9e81-3d1d-baef-b8d357fb6011.roa (raw, json)
Hash identifier:          q4PU1Ehk1p1lypQvfIO/gbg96R3B/ir4x4kIUYgn0Wo=
Subject key identifier:   03:9E:E7:16:5B:C3:2F:55:D4:58:62:65:3B:E0:B6:71:A2:11:0E:BD
Certificate issuer:       /CN=db34d8ad-c64f-4fe0-a095-112a8e656514
Certificate serial:       010D0C9F4328584DB7702A36A2FF52F96EED21E0
Authority key identifier: 2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/9f62cdd9-9e81-3d1d-baef-b8d357fb6011.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     400714
IP address blocks:        204.225.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2a:36:a2:ff:52:f9:6e:ed:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db34d8ad-c64f-4fe0-a095-112a8e656514
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=a8002863-2582-4911-95ca-912eb13173ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:7a:7a:7b:59:b9:ae:90:44:7c:bb:88:8d:
                    a9:41:42:ae:13:54:19:99:b8:9e:b1:ab:ba:cf:45:
                    2b:6e:3f:8b:47:95:aa:bf:66:32:91:e4:d0:df:ad:
                    7e:59:1c:90:e1:2d:7d:68:f3:77:36:9b:58:df:22:
                    16:02:96:03:fa:4c:78:eb:4a:1f:e6:50:8a:6d:c5:
                    4a:57:30:4b:61:01:84:c0:3f:f4:d4:14:25:53:cb:
                    17:60:0b:c7:18:43:a8:d8:85:e9:78:a7:61:88:4d:
                    ea:58:b9:ff:95:76:4e:51:25:06:8a:6a:e8:da:d2:
                    4f:77:b8:d4:cf:f9:27:db:31:50:0c:bc:4f:93:3d:
                    e3:d3:66:1e:ad:2d:97:1e:b3:d4:52:58:33:81:72:
                    e2:e6:8f:94:b0:47:a3:e1:70:b1:6e:b4:c0:80:08:
                    e0:2f:b5:5d:8a:9f:34:fc:76:49:4b:c7:ad:ca:e1:
                    b7:70:bc:79:35:14:0f:84:8a:c3:34:21:f9:28:48:
                    13:36:55:bc:5b:e6:b3:1a:6f:28:eb:17:1e:04:87:
                    ec:9c:1d:4b:85:59:98:eb:a0:92:ff:18:ac:ae:4e:
                    fa:40:93:52:95:38:92:1a:60:ae:ed:6e:43:40:96:
                    e3:ce:61:b8:d7:a0:f1:fb:bd:79:ff:5b:8d:cd:06:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:E7:16:5B:C3:2F:55:D4:58:62:65:3B:E0:B6:71:A2:11:0E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/9f62cdd9-9e81-3d1d-baef-b8d357fb6011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl

            X509v3 Authority Key Identifier:
                keyid:2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:ac:dd:f4:a2:c7:cf:6c:db:6f:28:67:85:00:40:84:ff:
         c4:95:8c:6e:dd:5b:2d:c6:f1:96:3b:00:db:fe:83:b5:b0:fa:
         ed:6e:bf:bb:6a:af:69:86:02:fc:9d:d1:d8:56:15:36:5b:6d:
         ab:f6:7f:19:5e:b8:8d:f1:9a:00:4d:9f:b7:c4:3a:84:71:24:
         51:1e:79:59:4f:1d:54:0d:a9:84:82:0f:9b:dc:a1:bc:31:46:
         7f:f6:74:05:bb:0b:3a:44:48:93:c6:44:56:62:b5:9f:13:8c:
         f6:42:bf:ff:19:82:3b:a5:19:4f:4a:9d:f4:8e:f2:fe:fa:73:
         d4:b3:e0:ac:f9:ed:5c:5c:d9:f7:b5:f5:8e:a9:8a:d6:3a:90:
         b1:cb:42:b7:88:4d:a2:e2:3c:b1:e3:34:7d:15:59:0f:15:fb:
         cb:24:f6:d8:c5:79:a9:58:7a:0c:fc:c7:23:c4:54:a9:3c:90:
         58:70:7d:24:3c:72:0a:70:e8:66:20:6a:56:0e:8f:89:ae:a3:
         f4:fa:d4:17:4f:28:f0:43:d5:60:da:fa:0f:58:36:89:37:26:
         4a:b8:b2:d2:9b:a9:bc:34:9a:9f:a2:9f:de:0b:15:46:6b:7f:
         62:b8:96:fd:e6:32:99:98:66:be:65:93:47:7a:10:a4:95:68:
         4a:5c:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:26 2026 by rpki-client