Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4f6c097-e1f7-3d3c-a394-8b047759f6b7.roa
File:                     c4f6c097-e1f7-3d3c-a394-8b047759f6b7.roa (raw, json)
Hash identifier:          XgGGdpXBNS7dT3+ewaUys48uQTYzEKv3RwDDawAbGGs=
Subject key identifier:   D5:87:3C:28:35:D0:DB:53:6D:AD:AC:29:2E:24:4E:6A:B0:78:1E:F3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D9B855E71B8FCBEECAAD2EF40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4f6c097-e1f7-3d3c-a394-8b047759f6b7.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     834
IP address blocks:        216.132.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:5e:71:b8:fc:be:ec:aa:d2:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=4746a957-a232-4286-8d27-df23d1e4a40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:fe:dd:c2:e3:e7:cc:26:a5:52:16:78:71:
                    62:2a:61:d1:90:97:b0:ac:27:be:dd:1a:5c:cc:37:
                    0b:f3:c7:9a:3c:04:27:31:b9:8a:7d:60:04:dc:bd:
                    e9:f2:b6:0b:8b:42:26:ac:3d:6f:86:a5:18:96:4c:
                    33:50:50:af:6e:c3:e3:dd:d5:32:72:20:f9:9a:e3:
                    e3:48:e2:ca:c6:99:b9:4f:5d:70:a8:65:61:af:98:
                    c4:b0:a7:54:3e:a8:73:a8:8b:4d:56:d0:1e:03:48:
                    f3:38:d9:85:bd:5f:1d:33:83:88:db:11:1c:5e:75:
                    a5:45:08:d2:36:07:24:9f:1e:a1:3d:98:37:94:ad:
                    81:fd:b8:d5:a6:f4:2c:40:27:11:38:79:4e:4c:c7:
                    16:cf:85:52:33:6a:d3:01:38:96:77:e8:e5:44:fc:
                    93:a5:68:f4:3f:4e:1d:5b:b7:36:0d:d9:ce:1a:9e:
                    22:91:95:1b:21:50:1b:ad:d6:bd:d0:de:c6:49:05:
                    f9:18:c9:02:5d:f2:a0:db:52:20:08:99:ff:ab:5a:
                    d1:80:dd:b1:db:1c:72:ca:6f:9b:ec:c4:c1:60:88:
                    6b:8e:5d:c9:68:d8:a7:3b:6c:12:db:6d:6d:d9:fd:
                    c1:2a:ad:a1:89:c1:2f:84:44:c5:5a:4e:9c:16:8d:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:3C:28:35:D0:DB:53:6D:AD:AC:29:2E:24:4E:6A:B0:78:1E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4f6c097-e1f7-3d3c-a394-8b047759f6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e0:3e:35:cc:44:3f:43:08:ce:9c:bc:ef:73:eb:2e:18:8e:
         9e:b6:5c:ff:fe:6d:7d:68:82:34:5d:01:82:69:37:00:73:71:
         1c:36:36:44:95:6b:93:5d:7d:5f:65:de:6f:34:dc:9c:fd:7f:
         d3:14:93:3f:96:e6:f3:b3:e9:25:f2:ab:27:d7:95:59:2b:34:
         5c:db:77:6e:9f:b6:b1:9a:9d:35:4c:a6:d8:6f:61:98:51:85:
         bc:d0:7e:4a:0f:dc:fb:d3:31:df:e4:24:b6:25:75:5d:8d:74:
         12:94:04:0e:0f:46:5d:7a:db:20:95:7e:a1:98:68:9f:eb:d8:
         20:49:9e:5b:e6:fa:c7:fd:8f:7f:56:ee:db:06:0b:1b:b5:75:
         30:e2:7b:26:73:dd:c9:1c:88:13:8d:72:3e:dd:0d:53:ae:2b:
         44:5c:ef:33:b8:15:80:a6:9e:22:f8:44:11:cb:53:f1:e4:3d:
         8c:13:04:72:01:24:0c:99:7d:7b:c1:34:f6:65:f2:bc:ef:02:
         b8:8a:07:15:ee:da:e9:99:d7:ca:78:b5:d0:a8:1e:ea:fa:dc:
         1e:d7:9e:98:b8:c4:83:5a:64:15:45:02:ec:d8:60:1e:b9:6d:
         0e:7d:aa:d8:c0:c5:c9:68:cc:8c:ee:70:ec:fd:9c:85:00:d4:
         94:a7:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:37 2026 by rpki-client