Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa
File:                     69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa (raw, json)
Hash identifier:          5X1nv/GWVJQ+PDRWnmLbjuaSMvJRN0ejALXhkjeiwoM=
Subject key identifier:   27:16:D4:4D:80:D5:7F:AC:DC:4F:65:6F:CC:21:B8:A9:D2:3B:D5:3E
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F4328584DC135E8177DA803C305C97158
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     213954
IP address blocks:        104.245.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e8:17:7d:a8:03:c3:05:c9:71:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=9e3f799c-9068-404d-91f7-3cd4c286991e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:d3:fc:5b:53:9b:47:33:d8:0f:e4:17:79:
                    85:52:35:27:b6:4e:60:21:60:50:f0:29:39:ef:50:
                    19:17:a4:f6:d8:b4:6b:c9:bf:c0:ab:58:47:43:ff:
                    f6:64:94:1b:66:d5:a5:29:cf:2e:60:e2:ff:31:cb:
                    a7:66:e1:de:13:12:bb:91:bf:74:b4:cc:5c:c6:8d:
                    d1:d9:a9:41:2b:5e:d6:b2:4f:94:24:ba:5f:2e:06:
                    d9:7c:1e:ae:b1:0d:14:af:a5:52:a9:23:7b:f0:6c:
                    8c:cb:f2:06:a1:c9:59:99:69:72:a1:a4:6c:d2:de:
                    d1:68:0a:7e:41:90:90:6d:ca:fb:68:e7:f5:04:cf:
                    a6:b4:1f:84:03:9c:55:8e:a6:8c:ae:04:7b:d8:65:
                    f9:69:25:3c:ab:f3:c1:d5:31:42:fe:77:a1:18:58:
                    da:c7:f3:50:c6:0b:7c:f9:96:a2:44:5b:98:fb:da:
                    34:d8:d6:bf:f8:f9:3d:55:3c:d1:58:d0:d2:80:f9:
                    1e:47:a7:7e:8b:fc:f0:8d:b7:6c:2a:92:ee:67:e4:
                    cc:6d:10:44:bf:3b:25:9d:48:af:a4:c4:2c:0c:15:
                    ed:2c:99:13:55:42:81:ac:6e:90:5c:fe:28:14:24:
                    6c:4f:46:81:24:a9:33:40:03:93:8d:06:3c:00:58:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:16:D4:4D:80:D5:7F:AC:DC:4F:65:6F:CC:21:B8:A9:D2:3B:D5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/69f53f63-05d2-3f71-bfe2-09ebbd1f6d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:e4:81:2f:4f:15:5b:3d:c9:c8:01:4e:3d:f3:79:bc:16:
         ce:74:d1:86:9f:70:2a:39:79:d8:08:6a:24:f7:91:e7:67:72:
         f7:18:52:28:79:5e:76:48:df:4c:97:4f:dc:60:f2:f6:4c:98:
         8a:3c:a8:a2:3c:79:c4:9e:f2:e2:51:64:31:44:e7:db:76:3f:
         50:6b:66:34:46:fc:68:a1:7b:de:34:ff:a9:e0:ec:c8:34:a5:
         9d:3e:be:25:99:4f:bb:21:a0:6b:63:4e:58:2d:6d:a6:15:db:
         41:88:60:b8:aa:06:09:d9:42:7f:26:ef:30:7d:a5:9d:79:ac:
         1d:f3:b7:9a:69:48:23:2d:dc:ba:3a:f6:e7:66:09:e8:37:da:
         2a:c5:36:77:d4:a8:73:fc:cb:2c:ea:d8:64:e5:29:46:15:03:
         fb:dc:68:e5:ca:bc:00:f8:0f:57:47:95:c5:85:66:35:c6:02:
         c6:30:a7:ba:41:b2:18:97:88:32:32:28:94:b1:4f:ca:27:27:
         f5:01:b8:6b:ff:01:f1:b9:7f:e8:44:b4:68:5f:1f:8c:75:06:
         c7:69:3e:cf:9b:09:2b:c4:e6:89:21:84:e1:f0:66:1a:cd:10:
         9a:58:70:fc:9e:d9:f6:0d:0d:2a:38:51:58:95:17:27:c9:77:
         20:86:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:27 2026 by rpki-client