Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa
File:                     df9fbe6f-515f-3477-80a6-5583acda8eff.roa (raw, json)
Hash identifier:          mceY1+yhYuBR5riQ+l3HvkjB5++cgEdgNZmDxoSkbZs=
Subject key identifier:   77:89:18:D5:D6:2E:59:A6:91:92:DD:21:A9:BE:62:03:F0:EF:3D:EC
Certificate issuer:       /CN=85ff82e4-cd37-45c6-b714-ab0a04927964
Certificate serial:       010D0C9F4328584D905A9F6EBF869495A4E12300
Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     397942
IP address blocks:        192.103.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9f:6e:bf:86:94:95:a4:e1:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=43f29fd8-efa5-46a9-beaf-5002a5d6afed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:98:e9:64:9e:59:62:66:20:1b:78:6a:92:
                    9e:99:52:18:8f:08:36:f8:ca:4e:6d:53:1e:15:79:
                    32:de:78:4c:36:89:42:b9:27:b7:0f:e2:6a:7c:45:
                    e0:90:49:fb:b3:51:54:ca:d2:59:ac:a3:c1:74:30:
                    90:85:fe:9d:9c:43:c2:54:84:f0:cf:6e:5f:36:16:
                    44:d6:df:8e:fd:a0:4e:a9:72:bc:4a:d5:7c:0c:c3:
                    a8:db:f6:d4:a1:aa:8a:24:4d:66:8a:77:81:6b:44:
                    49:4d:b1:15:c3:89:b1:eb:ca:c8:08:77:2f:79:58:
                    14:ef:04:e1:00:ea:d8:30:05:1a:20:3d:c7:77:7d:
                    e4:1c:f5:35:0f:d3:2f:1c:f5:dc:63:64:87:61:7c:
                    75:3a:d1:ac:bf:15:36:d7:50:a8:73:5b:83:4c:de:
                    80:0d:ad:58:4f:7c:01:a1:de:0d:0f:9f:04:b0:95:
                    18:c7:04:00:47:6d:b5:93:80:61:c0:ca:3a:0b:a4:
                    66:ae:a0:7f:5d:a8:4f:87:80:e3:36:74:56:7c:c3:
                    26:2b:cb:19:89:9a:5f:1d:50:25:90:1c:c8:46:de:
                    9d:fd:f4:e5:9c:40:82:18:00:53:0d:ae:cf:b3:89:
                    f5:89:81:aa:a3:8e:52:4d:60:9e:59:ea:7a:43:f5:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:89:18:D5:D6:2E:59:A6:91:92:DD:21:A9:BE:62:03:F0:EF:3D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/df9fbe6f-515f-3477-80a6-5583acda8eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl

            X509v3 Authority Key Identifier:
                keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:91:33:f4:78:02:df:c5:e1:94:75:43:03:17:db:9f:35:
         44:f7:ef:1e:fa:47:2a:52:4f:01:05:5a:ce:b1:97:a2:64:72:
         32:e0:4d:e1:fa:b3:8c:5e:48:d7:88:19:4b:20:7b:b7:be:43:
         e3:19:e8:94:5b:fb:b1:4b:22:7c:26:b7:d4:f1:18:05:05:66:
         52:d7:ca:c0:64:85:ee:0f:59:ad:ad:41:2c:22:cc:74:ef:3d:
         7b:92:6a:91:b7:e9:cd:d7:fa:4e:e2:a0:74:f4:a9:34:76:56:
         6a:99:40:98:b9:0b:c4:1f:84:48:fd:2e:2e:6d:40:d4:7c:96:
         a3:92:70:fb:47:5e:28:e0:39:4d:4e:72:8b:6b:d6:c6:44:0f:
         b6:36:84:b5:93:d6:c8:aa:e1:2e:cb:9b:56:c5:c9:90:b0:b6:
         a2:a7:81:b5:c9:e6:81:ad:f3:ff:02:83:76:f9:bf:5a:b6:6d:
         3f:a5:50:d5:1b:37:db:ec:20:0a:7a:55:59:53:7b:58:21:fc:
         46:de:7b:48:ac:7a:13:8d:04:25:06:e1:90:42:27:70:11:c5:
         6b:0c:fd:27:58:20:26:a1:c6:50:d1:b6:ba:cd:09:99:e1:e5:
         cf:44:1d:db:70:a2:5f:c1:86:79:71:bf:d8:2d:9c:cb:73:00:
         60:87:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:45 2026 by rpki-client