Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa
File:                     3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa (raw, json)
Hash identifier:          X9Q+SMxrkbyrLZRmRvNKMiDS+rbDZ7QbIlPrIq7LF38=
Subject key identifier:   2E:B4:F0:7B:41:8F:82:9E:DE:F8:96:2F:05:98:B4:79:26:7E:1B:47
Certificate issuer:       /CN=2321434f-c7f3-488c-af62-bfe847e2e8ad
Certificate serial:       010D0C9F4328584DA11AEB45D11B9857C14BAB80
Authority key identifier: D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     395855
IP address blocks:        185.169.108.0/24 maxlen: 24
                          185.169.109.0/24 maxlen: 24
                          185.169.110.0/24 maxlen: 24
                          185.169.111.0/24 maxlen: 24
                          185.171.208.0/22 maxlen: 22
                          216.230.176.0/23 maxlen: 23
                          216.230.176.0/24 maxlen: 24
                          216.230.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:eb:45:d1:1b:98:57:c1:4b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2321434f-c7f3-488c-af62-bfe847e2e8ad
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=9eb34b5f-6f22-4d0e-9e06-94cd1695ed8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:ac:8c:64:75:28:8f:99:79:de:6b:c2:86:
                    b5:d3:e2:14:5e:32:fe:61:23:64:df:76:33:03:c7:
                    0f:d9:1e:fb:fb:ff:b0:72:a7:e9:4d:cb:c9:12:a7:
                    44:e5:f4:a8:7f:6c:fb:57:52:71:a6:1e:04:3f:af:
                    c3:a3:db:a3:dc:85:02:b5:5f:76:44:45:4b:bb:ea:
                    1f:bd:aa:a5:8c:c4:5b:00:6f:38:e3:e7:02:9e:85:
                    00:d0:45:25:da:af:41:da:a1:52:bf:29:38:b3:81:
                    27:b4:d6:05:18:51:1d:a7:30:e8:7d:35:87:f4:e0:
                    5c:39:09:97:12:28:2f:0d:45:e7:69:df:9f:25:8b:
                    7d:44:39:23:3d:3f:10:33:34:a1:d6:da:26:69:c1:
                    43:f4:b1:8f:23:d7:24:bc:bc:1a:e6:7d:b4:24:1e:
                    43:a2:84:fe:31:31:1b:3b:1d:dc:50:65:9a:d9:c4:
                    65:00:4a:e0:9f:dd:db:a2:e4:07:2f:fb:26:cf:2c:
                    e2:0b:a1:1c:87:8c:5c:9c:69:ac:08:fe:00:51:72:
                    65:c8:56:67:cb:7c:8b:62:a0:e8:90:9c:0e:77:0d:
                    77:1d:5e:92:a1:c3:3c:c7:2b:f9:fa:78:30:93:77:
                    1a:82:45:b8:2f:9d:ae:7f:d3:01:65:9a:f4:f2:8f:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:F0:7B:41:8F:82:9E:DE:F8:96:2F:05:98:B4:79:26:7E:1B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/3aff446c-ca9d-35e7-bff7-d7481de0cc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad/2321434f-c7f3-488c-af62-bfe847e2e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:D5:67:C5:39:EC:DB:2F:19:90:CB:27:A9:D7:35:5C:34:94:5A:01:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2321434f-c7f3-488c-af62-bfe847e2e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.108.0/22
                  185.171.208.0/22
                  216.230.176.0-216.230.178.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:b7:b6:83:dd:03:d8:71:65:59:01:3d:2b:d7:0b:92:2c:
         7d:c1:a9:a0:13:88:60:05:bb:5d:74:c7:f6:53:c2:55:e4:0f:
         b7:62:4c:86:3c:65:bd:46:b0:f5:57:11:2f:f7:bb:9f:63:b5:
         d8:b2:a2:fa:74:91:64:68:a6:28:18:ec:cf:c6:b0:0a:e8:d9:
         5d:bb:98:32:9a:b5:02:28:d3:40:62:4a:1a:ee:4a:3a:18:80:
         89:95:d4:2d:e3:47:19:56:e3:41:9e:3a:69:42:a6:c3:83:93:
         74:78:88:3d:18:3a:94:cc:3e:2b:6c:5e:e0:fa:a3:27:e8:ad:
         e6:d5:0d:50:e8:3e:87:75:49:d9:27:2e:7d:17:a2:24:7d:11:
         1a:a8:99:e3:94:60:c0:0c:2e:21:7d:84:a9:e3:f2:b0:6b:00:
         2f:8d:a7:88:c1:3f:fb:6c:79:bf:bf:ee:f5:6c:b5:5b:d7:56:
         8a:8c:e8:ad:3e:9b:ab:13:3f:8e:e6:e9:78:90:eb:46:a2:89:
         03:47:9a:48:f8:c9:7f:31:8c:6e:dc:b8:7e:4e:c7:6d:30:c3:
         35:3d:80:c9:c3:f2:c8:9a:fc:cd:44:75:da:ed:2d:9a:47:07:
         10:df:a8:78:9a:8b:e6:71:bb:31:5c:1c:0b:ff:af:55:66:da:
         f8:b0:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:54 2026 by rpki-client