Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
File:                     1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa (raw, json)
Hash identifier:          xvMNMRF87u4CKvJu7N4mdAnARRM8Rv4Y/Yau0txSkPk=
Subject key identifier:   CA:17:41:5B:77:20:0B:AA:67:DF:A2:52:53:EA:CB:FA:71:F9:4D:7A
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584DBBA04F871BA5873E7033EA00
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     40788
IP address blocks:        108.170.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4f:87:1b:a5:87:3e:70:33:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=ecfcca0d-be94-4f5c-89f5-192e3d3bb44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:34:64:ce:59:89:32:2c:bd:03:e5:ae:27:
                    2b:d6:80:16:e2:25:d7:af:c1:4e:5d:d7:f5:25:71:
                    7c:4a:ba:00:e6:c3:d4:70:40:57:4a:85:93:70:4d:
                    20:72:1d:1a:41:f3:2a:9f:b6:64:d2:ec:cd:3b:49:
                    7d:1b:75:75:58:6d:df:f6:2f:12:7c:df:28:2f:75:
                    1f:11:9c:dd:f8:2f:8d:7c:a9:1c:3c:2c:f4:68:58:
                    b0:d7:44:e5:51:29:43:83:cd:b2:ec:6f:80:cb:f7:
                    21:ef:c9:c5:58:6c:52:3e:ad:5a:58:59:b8:a7:1a:
                    9e:8d:9e:ee:64:d0:ca:c0:da:1a:7a:05:90:5b:e3:
                    56:83:d0:d8:e6:00:75:67:23:b8:39:7c:b7:7c:cd:
                    68:e0:52:3d:c1:01:60:5e:f4:28:ca:e8:26:aa:ca:
                    ba:36:8f:62:2c:a5:f1:23:de:99:25:e8:57:ff:ff:
                    44:e0:45:26:f7:d4:75:7b:bc:11:1d:39:99:15:32:
                    d6:02:de:73:58:e3:56:c1:65:12:06:f0:b8:74:f6:
                    ce:38:ff:95:a9:82:7b:6e:95:26:65:f1:b1:c3:47:
                    71:dd:db:b1:f6:91:83:7c:98:1a:2b:78:7d:33:7b:
                    07:72:1e:0e:63:62:69:3e:f3:bd:52:a1:6f:fc:31:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:17:41:5B:77:20:0B:AA:67:DF:A2:52:53:EA:CB:FA:71:F9:4D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:96:9f:8e:4d:04:c2:2c:de:7d:2b:43:82:c3:63:28:b3:
         95:e2:ea:76:61:a1:bf:d6:7c:28:61:14:c4:65:44:96:2e:d1:
         af:d0:0a:4a:0f:a2:61:6e:22:4e:9e:71:dc:d6:05:0f:07:a7:
         cf:63:e1:da:30:c1:fe:44:80:d8:49:4c:d6:42:a8:14:db:fe:
         87:82:aa:3a:20:38:03:ef:c0:3a:62:c5:9b:80:b2:e5:fe:7a:
         b6:c7:c2:af:df:c0:c4:de:81:34:cb:4c:54:5a:04:5b:39:7f:
         0b:a4:0a:6d:52:b8:4b:3e:25:45:f8:25:c3:a8:49:35:e8:a3:
         4b:c8:bb:71:96:ba:a8:8e:10:41:e4:17:48:e9:e9:43:10:59:
         87:a2:5e:24:86:e0:95:e6:73:d2:02:d6:b2:e0:09:4f:0e:2d:
         7d:4e:b5:c8:68:37:af:4f:fa:e6:6c:54:70:d1:0f:04:ab:0d:
         16:90:bf:a5:64:78:10:bb:06:b9:bd:c4:f8:44:92:96:6e:df:
         1e:53:1b:18:98:2a:fb:5c:24:a0:e3:ed:d7:b5:db:8e:9e:62:
         37:b7:6b:a8:90:b7:e4:b5:5d:30:cd:00:a7:8c:f3:b1:89:49:
         e5:5d:ae:48:63:f2:13:76:48:9b:85:b4:2d:b5:c2:2b:d8:1a:
         d7:56:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:50 2026 by rpki-client