Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
File:                     73e070ad-ae12-346b-bf5e-06f581d4e225.roa (raw, json)
Hash identifier:          dxcpP7D5K2PD593jzNB4lansO+r7/18OL961B6vk2A0=
Subject key identifier:   75:99:3E:BB:F6:C6:6B:A1:F6:8B:2A:6C:8D:9A:56:7E:CC:58:AE:A2
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584DCC605EF8EC830F1A3A3768A0
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     23471
IP address blocks:        67.219.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5e:f8:ec:83:0f:1a:3a:37:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=77e63476-9b2d-472f-8d73-0a6d61dd969a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:ad:e7:22:ff:ec:02:25:07:1d:fa:cf:12:
                    bf:a9:f4:70:a8:ca:8c:6d:a8:60:1a:05:26:bd:bf:
                    57:5a:68:e4:93:1e:91:df:6d:50:42:3a:82:c7:58:
                    20:36:f7:2f:f5:9f:e6:17:64:71:f8:1e:30:a9:73:
                    2a:fb:56:8e:ae:88:4e:79:41:8a:15:09:cb:23:d4:
                    b8:f5:18:28:d2:99:f0:b1:f6:41:69:27:a3:db:f9:
                    93:30:31:db:1c:d2:00:e5:9f:44:ba:98:57:81:26:
                    96:c2:0d:fc:de:7d:44:92:15:62:81:78:5b:19:cc:
                    62:2d:d8:c5:12:28:b0:d3:ca:8b:50:68:bd:ab:05:
                    26:45:39:ad:92:d2:4d:95:8f:cb:c0:3b:4c:11:e3:
                    06:e2:53:aa:8d:97:bd:64:6e:ad:4a:b3:50:65:6a:
                    cc:f1:2b:1b:e8:bf:1d:b9:94:b4:ae:f8:89:2b:09:
                    b2:57:b0:b8:16:51:ab:4e:e6:f2:7e:db:0a:f3:1e:
                    d6:f4:05:3e:38:46:c3:6c:aa:b3:26:db:4f:02:80:
                    fe:b8:26:63:02:29:41:24:ce:b9:6b:9b:c6:8a:5d:
                    2d:7f:72:5b:80:fb:6a:48:27:3b:49:f9:1b:81:35:
                    25:bb:dc:c3:e6:1f:e6:72:4c:65:42:da:ed:85:9b:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:3E:BB:F6:C6:6B:A1:F6:8B:2A:6C:8D:9A:56:7E:CC:58:AE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:da:71:61:5e:69:04:6d:ca:cd:fc:e6:e0:17:65:34:c5:a8:
         f4:f5:62:4c:a9:72:5b:10:93:59:c3:f2:da:46:de:26:0a:55:
         93:79:60:3c:17:aa:19:92:5e:f9:84:3b:6b:25:aa:36:03:e4:
         ef:e1:93:08:9a:43:f7:7e:ab:da:68:04:02:ce:58:db:47:b9:
         c0:04:21:dc:f2:5d:ac:ba:5a:79:79:c4:0c:5a:ed:53:70:66:
         8f:f9:2c:06:13:ab:14:3e:fb:02:b8:50:40:0c:10:2c:6c:23:
         5a:5c:bf:cd:83:3d:d9:f7:0d:da:c0:52:e1:03:86:68:2f:08:
         c5:34:d5:84:c7:40:59:6c:98:84:bc:f2:56:09:09:2d:e6:35:
         8f:34:63:ec:ba:54:4e:ec:6f:6c:44:1c:5e:44:1e:05:f5:21:
         6b:3c:70:1c:44:77:00:8f:cf:d6:ab:df:8e:8b:76:e6:3d:30:
         81:96:aa:95:30:31:89:05:e6:fe:f7:96:7e:95:d8:0a:d5:35:
         48:39:39:94:0e:1b:60:95:24:45:5e:10:ed:2c:02:f6:05:a9:
         a4:8e:79:d8:25:63:7d:7d:f7:0a:c8:8c:8b:d3:67:aa:15:80:
         dd:75:99:98:91:63:da:fd:c9:33:ba:69:75:52:fd:ad:c2:a0:
         ac:f8:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:31 2026 by rpki-client