Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa
File:                     5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa (raw, json)
Hash identifier:          0xcAWEDmIMYRrZ5iEpxoCCPx5NPDk0aytLCUf3dgZ+0=
Subject key identifier:   DF:26:64:D8:D4:F6:41:C6:E5:14:96:43:24:E2:6D:7B:55:C8:A5:F1
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584DB77031CE9D4F545C58086400
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     54004
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:31:ce:9d:4f:54:5c:58:08:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=fbdf1100-9a79-48a7-9386-cf024e9b92d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:73:1f:f3:5a:9f:c6:90:11:68:13:99:ed:
                    15:2c:1a:b7:06:ee:4c:a2:e5:b8:4d:3e:92:cd:20:
                    b5:4f:1e:f0:9e:25:db:12:df:1b:94:41:08:84:e1:
                    2a:b2:65:06:e1:27:ea:4b:68:8d:d6:ee:c7:71:8e:
                    59:00:49:2b:cd:77:33:ae:bb:4a:cc:80:4f:bb:3b:
                    49:c4:d6:3e:ca:fa:a5:cf:57:d0:58:30:8c:b5:05:
                    8b:35:64:d1:0f:32:c9:9d:af:38:95:22:f3:8c:06:
                    45:e4:11:a8:00:56:63:67:8d:ed:83:e4:86:b6:fc:
                    5c:01:24:e0:df:94:18:f5:c3:63:4c:4b:ec:47:2d:
                    03:ad:7c:9e:34:c3:1a:fb:59:9b:97:40:47:b8:78:
                    33:dd:86:45:35:45:2b:cb:f2:12:a5:b1:ea:cd:1b:
                    64:b2:f7:e6:07:62:40:26:2a:8c:05:c8:76:c9:d5:
                    cd:c6:29:2a:2c:64:93:76:cc:66:c7:73:88:b0:a6:
                    8c:0f:9f:0d:ce:59:ff:98:69:b1:02:2f:e2:ed:aa:
                    f0:7d:6a:a0:38:15:ea:81:9a:04:e0:d7:19:dc:fa:
                    ec:e5:38:4a:00:89:5c:30:64:5a:1f:d6:93:e6:8d:
                    57:5e:bb:17:7f:1f:68:4b:20:70:82:96:0d:b0:5a:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:64:D8:D4:F6:41:C6:E5:14:96:43:24:E2:6D:7B:55:C8:A5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:1d:87:d0:f6:19:5d:41:9d:01:c6:a9:25:6b:3e:63:05:
         8d:28:0f:7f:98:db:16:a6:30:36:34:ff:46:b8:05:08:ec:9d:
         15:36:0e:b8:7a:59:d7:80:1b:d0:50:47:7d:d1:ac:d9:68:0d:
         6e:76:0c:5e:36:17:1b:19:43:26:2c:00:64:56:29:0e:ed:9b:
         80:af:c5:43:84:ba:be:4a:ce:0d:69:35:2e:03:8c:f6:e7:b2:
         fd:0a:e6:27:b4:b9:fa:2f:bb:dc:70:b8:d3:03:4d:62:83:94:
         67:12:e1:d5:e3:4d:dd:f4:aa:3b:ec:d9:5d:46:34:41:47:18:
         ae:42:9a:9c:f2:b2:e1:37:b0:d8:7b:40:b7:6f:ab:be:19:e0:
         65:21:9a:19:31:ad:35:f4:25:b9:b1:5d:13:f3:e0:ff:18:86:
         d4:09:62:3b:be:6e:c1:71:41:b9:c4:c3:f5:a4:38:31:fb:6f:
         c4:2e:0a:22:cf:58:bb:1b:ba:1f:1a:f3:0f:6d:bf:42:a3:83:
         49:75:e7:0b:1b:d3:e9:6f:11:dc:5e:ff:52:a0:90:13:4c:45:
         9c:34:e2:fa:dc:d5:fb:14:2a:be:94:9b:0d:e4:98:28:31:20:
         a0:b3:06:71:b6:39:cb:03:58:21:a7:33:22:ed:4d:1f:30:45:
         63:28:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:39 2026 by rpki-client