Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/682fe18c-d202-310a-a4ff-af0f58e42f15.roa
File:                     682fe18c-d202-310a-a4ff-af0f58e42f15.roa (raw, json)
Hash identifier:          CAC92msCdDuAIuakyn/CAl/QkyENBdcWUYGorH3vslk=
Subject key identifier:   F1:F7:4B:F7:61:A2:A1:12:8E:FA:43:2A:16:D8:E7:79:54:E4:3B:77
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584DC83056A10221384AD39CD280
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/682fe18c-d202-310a-a4ff-af0f58e42f15.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     400662
IP address blocks:        206.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:56:a1:02:21:38:4a:d3:9c:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=52e04d93-5157-48b6-94ac-a4792838023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:d4:26:d4:eb:e0:e8:eb:0e:cb:f3:ce:b9:
                    dd:1f:0a:41:95:2b:28:2f:04:d7:d4:5a:3f:cd:8d:
                    e9:fb:58:85:70:33:a9:54:3c:cd:66:e0:43:81:cb:
                    27:4e:2b:6b:b6:32:5e:78:a1:ee:20:3b:01:9e:4e:
                    61:0b:8b:39:b2:b4:3f:6e:43:20:5d:34:7f:f3:c3:
                    1a:89:24:14:a3:3f:07:17:91:de:e4:7e:89:bb:82:
                    7e:af:3d:9d:da:3e:19:4a:0c:ea:eb:b8:b0:29:d1:
                    1e:fc:7f:01:95:1f:a3:0b:f2:10:66:c8:53:ee:c7:
                    12:e0:cc:53:cd:c5:95:a7:e4:f6:c7:ff:d5:8f:54:
                    43:14:cc:a5:95:c3:b7:8d:f0:13:ed:56:43:34:21:
                    53:26:f9:2b:6e:9f:17:22:bf:4b:14:81:9c:da:32:
                    75:00:e6:1b:08:ba:d2:11:56:12:ec:be:70:3a:1a:
                    af:09:f2:37:82:74:75:22:6c:1c:87:73:31:a0:4c:
                    df:59:63:b9:ab:e1:ce:e1:af:6a:da:cf:a4:95:38:
                    66:fb:25:5d:22:b4:3a:22:98:37:9c:d3:b1:26:7b:
                    9c:8a:04:cb:7a:4c:e0:77:a7:9a:ea:62:ef:3f:0b:
                    75:88:c5:ad:55:2e:61:df:02:33:4c:ac:fa:7b:51:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F7:4B:F7:61:A2:A1:12:8E:FA:43:2A:16:D8:E7:79:54:E4:3B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/682fe18c-d202-310a-a4ff-af0f58e42f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:83:5a:de:aa:db:50:0d:5c:b5:28:a7:3b:02:40:1f:1b:
         8c:9f:c9:e5:f8:37:a3:46:77:d2:06:4a:ae:14:b7:58:98:62:
         bb:d4:76:d5:8c:2c:a3:28:8f:8f:22:b5:5d:69:58:09:6a:61:
         12:a4:32:b8:43:13:f7:65:34:f8:66:98:4c:45:c6:20:b6:39:
         80:91:6d:3d:62:58:79:47:12:40:0c:a8:45:11:dd:90:d8:ae:
         81:24:d6:b2:70:68:3f:2a:5b:18:cb:a4:43:6a:c6:64:23:33:
         f8:1b:68:7c:df:43:74:a4:30:04:35:5e:5e:51:21:08:7d:68:
         ba:54:fb:f3:28:f2:86:95:f0:ad:d8:79:66:10:32:f0:dc:6b:
         75:12:9b:6b:1b:dc:d4:7e:77:c2:ee:b4:23:4e:55:c1:a3:17:
         3e:c7:b4:34:e8:6c:80:ca:56:f3:bb:b3:ca:83:ce:78:df:81:
         43:09:d8:4f:14:c0:c9:d4:38:1a:a5:46:8b:81:60:78:48:64:
         c7:88:dd:23:e7:3f:da:ff:fc:6c:cd:3b:e2:f2:f3:9b:58:6e:
         0b:46:8a:5f:0f:20:c6:07:35:90:a4:48:1b:91:81:6f:e3:4d:
         dd:6f:ba:41:ec:fc:3c:4d:33:e1:31:13:1b:fd:ef:3a:cd:8a:
         f2:51:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:01 2026 by rpki-client