Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa
File:                     ad70148b-73be-3a2f-b582-410330333317.roa (raw, json)
Hash identifier:          6idjPrLaisvkXK4xRyka+AEDsZG6+pM1oVxYSdcFYpI=
Subject key identifier:   E5:22:E3:B1:4B:0A:46:59:F3:72:63:41:77:CE:10:88:C9:61:FF:53
Certificate issuer:       /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2
Certificate serial:       010D0C9F4328584DD09072D566190D981BDDA380
Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     10823
IP address blocks:        209.204.64.0/21 maxlen: 21
                          209.204.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:72:d5:66:19:0d:98:1b:dd:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=713e3485-80c0-4183-9ce8-bcaf25f1f872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:dc:1c:1d:54:2c:57:6c:3b:52:1d:28:5f:
                    54:8f:17:8c:5a:f0:fd:b7:61:2c:24:3a:95:25:3d:
                    0d:b0:fa:1d:d7:bb:b7:cd:22:50:0c:87:ee:46:9c:
                    1d:cc:b8:93:42:da:8a:c8:ef:de:68:2b:65:e5:c3:
                    f6:a6:00:b4:68:36:04:23:3b:b5:b2:3d:48:e0:c1:
                    f5:af:46:60:21:3c:91:a2:03:6d:f1:9b:b2:d9:3f:
                    e8:85:38:74:5e:4b:e7:a7:c4:ff:64:df:04:9f:26:
                    96:68:93:52:74:0a:0d:54:dd:a8:3c:88:63:99:41:
                    d8:1f:db:54:6a:f3:02:03:2b:32:c7:cb:18:bb:8a:
                    f4:b8:82:39:27:87:c4:97:53:bd:8d:c5:c0:4c:49:
                    11:04:be:11:a8:28:68:8c:df:d5:3f:1a:50:9a:4d:
                    2f:96:36:b8:8a:fb:20:80:68:1b:8e:25:9a:9a:77:
                    1b:a7:78:7a:81:2f:79:f7:49:ce:28:30:87:9f:55:
                    e9:10:08:43:fc:d7:9e:88:28:c3:63:05:f5:43:eb:
                    67:1a:54:9a:eb:54:94:69:13:fc:81:a0:ad:59:ba:
                    ad:cc:b4:48:44:6b:df:9e:22:04:26:00:22:93:ea:
                    e5:f7:42:01:7a:7b:63:bf:df:60:b2:64:2a:00:b1:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:E3:B1:4B:0A:46:59:F3:72:63:41:77:CE:10:88:C9:61:FF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.64.0/21
                  209.204.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:82:ff:d5:f6:41:b7:3f:6d:31:4b:75:9a:37:9c:49:55:f0:
         66:bb:8c:3c:d4:0b:6a:05:dd:2a:3e:43:21:e5:c2:d3:56:53:
         57:d7:b8:7c:a9:0c:4a:9c:16:39:68:c7:35:c7:e3:5c:54:1a:
         82:fe:e0:18:a2:e0:7d:af:b7:be:c9:e8:81:4b:eb:b1:b6:2d:
         9b:3c:88:0c:30:63:66:59:56:85:db:6c:86:77:73:10:81:a2:
         cb:2d:e8:f7:bc:e7:d4:27:81:9c:25:18:53:e9:7e:2d:67:40:
         02:79:64:64:26:21:69:ad:80:ec:63:b2:39:9e:66:ad:83:e2:
         ad:c5:d0:7f:bd:96:ac:aa:5d:72:dc:92:98:57:48:0d:a9:3f:
         7f:61:61:02:41:f1:65:2e:53:1e:f8:ea:e5:9e:8e:ff:7f:18:
         ac:63:b4:ee:e4:44:ee:fc:a7:2c:3b:6c:f1:fd:e5:c6:8a:24:
         02:08:eb:8c:e5:92:60:d4:15:f6:ef:be:00:8c:94:8d:c6:9d:
         53:52:66:34:e2:c7:c0:85:a9:bf:ca:76:15:ba:b6:6c:87:75:
         9d:17:00:3f:64:8e:ea:a8:0e:64:81:64:b8:2b:76:e0:d5:2b:
         13:92:f1:b2:6c:fc:b0:be:4f:71:36:9a:1f:8f:29:c6:3a:13:
         d5:f9:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:41 2026 by rpki-client