Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa
File:                     39b21eff-11aa-3f46-9161-0f08c58454cb.roa (raw, json)
Hash identifier:          43ykZhXUHOKXwEjTBjXymJZP14a4n8tS8QPnYuLhPPs=
Subject key identifier:   F4:52:EB:0B:DB:53:A5:DF:2E:A4:E3:60:B2:25:EA:46:A7:32:21:6B
Certificate issuer:       /CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Certificate serial:       010D0C9F4328584DA6B02ED1F8C0ADBD4C406480
Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        107.191.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:d1:f8:c0:ad:bd:4c:40:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=0d87062b-7076-4747-be53-4448f5704b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:bc:2f:3d:1d:b8:f8:f8:bd:c8:12:dc:9f:
                    80:d4:9c:d0:87:5a:16:05:66:11:79:83:88:00:83:
                    ae:ce:69:64:e2:d7:b9:77:6d:be:dc:d0:a8:bb:cd:
                    9e:c6:1b:88:5c:17:5f:31:e0:1a:ee:37:81:0a:81:
                    f1:b1:7a:f2:cd:04:d8:1a:2c:f0:68:7b:bd:0e:00:
                    5c:d3:7f:36:32:98:15:96:fc:9e:fe:f4:ce:f1:0d:
                    fa:ff:7f:a3:3b:6e:08:11:77:85:03:bd:70:38:31:
                    0d:5b:95:89:b7:5a:c4:98:4f:6b:21:86:99:57:d3:
                    c6:8f:3d:5d:4c:db:3b:bb:18:3f:9f:79:7a:3d:d1:
                    9f:47:61:98:b5:d9:5e:57:7e:d5:ae:ef:f3:5c:6c:
                    00:bb:c8:cd:65:45:82:82:a0:be:ae:a9:bb:d2:1e:
                    2a:69:1a:25:32:68:49:e5:83:ac:f4:5b:b3:f8:f3:
                    4d:f2:e9:3c:d8:59:9d:a6:e2:3e:39:37:bc:f0:6d:
                    e8:80:f1:88:cd:d8:89:17:30:b0:4f:0d:ee:49:9c:
                    c2:0b:c6:b0:71:e7:dd:f5:e3:79:47:ba:0c:dd:03:
                    0a:ae:d4:70:c2:db:98:b0:7c:86:b0:0f:dd:65:30:
                    9f:07:87:d0:6f:89:e0:63:1b:fd:9c:45:cd:5b:1e:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:EB:0B:DB:53:A5:DF:2E:A4:E3:60:B2:25:EA:46:A7:32:21:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/39b21eff-11aa-3f46-9161-0f08c58454cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl

            X509v3 Authority Key Identifier:
                keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:14:0e:75:bf:54:e3:a7:27:6f:5f:27:0b:84:03:17:17:
         41:6c:66:97:e2:27:03:d2:80:6f:65:05:0a:c1:e4:f1:15:9f:
         ef:17:1f:b9:21:f1:ee:15:aa:3c:4c:84:da:1e:01:7f:b8:37:
         8c:6c:e9:7f:40:1d:23:f3:89:c3:60:2a:87:b8:09:95:6a:ee:
         b0:5d:e6:9b:5c:74:2a:87:5e:81:69:85:53:d3:f6:21:10:41:
         bc:43:76:c8:d6:04:2a:07:da:81:41:4e:e5:fb:6e:c6:40:2d:
         a0:c4:c5:e0:17:5f:28:32:7d:80:ac:ca:2e:46:fb:1c:cb:61:
         5d:07:bc:de:d9:40:39:de:e1:69:c8:bf:41:80:d1:e7:cc:9e:
         44:09:6c:43:aa:e8:d5:11:1e:a3:fe:41:bf:11:ac:f9:15:39:
         62:fd:62:bf:80:43:a1:ee:5c:39:cc:7a:0a:63:1c:69:d4:3a:
         cc:e2:94:e8:ff:06:73:91:6a:25:26:67:b7:43:45:8f:34:dd:
         3a:0e:e0:06:f3:60:11:eb:f6:79:e9:ad:3d:d4:da:4f:fe:14:
         20:00:6c:1f:b3:a6:d1:77:5b:9c:2d:fc:d5:4f:c1:12:2d:ef:
         02:26:66:6d:4b:07:14:af:e6:a0:4d:5a:0b:ad:78:83:13:cd:
         4c:c0:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:34 2026 by rpki-client