Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa
File:                     13d011ea-1014-34fe-b176-df3ab1e507b9.roa (raw, json)
Hash identifier:          rSkc98ajQK5ZA5U2RZeHQJw538KM/fCe5ehSiRHz/co=
Subject key identifier:   EF:45:79:88:28:E0:A9:0C:07:38:AC:BA:86:A5:7C:93:2D:CE:88:CD
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584D44FA3BE50688208056B4A700
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        204.110.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3b:e5:06:88:20:80:56:b4:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=baa12e38-4e78-4160-bd01-447fab58ca82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:99:0f:23:7a:58:9c:ec:eb:5e:e1:9b:53:
                    74:8d:c2:8f:12:1f:65:63:28:7f:65:eb:d2:e0:51:
                    b4:fb:7f:bc:2d:54:a6:9b:d4:c8:99:21:51:90:f1:
                    88:ff:f4:a9:8b:32:0f:f9:7f:4d:29:df:6d:19:41:
                    13:97:9f:94:5b:dc:5d:02:b7:1c:06:ed:92:1f:40:
                    db:2b:76:92:87:e5:b0:6c:40:2f:67:9e:6c:5b:4f:
                    19:a3:b6:79:3c:36:2d:b0:0d:4b:95:81:b3:11:85:
                    85:0c:34:56:85:e0:7d:f2:f7:cc:b0:11:f7:d3:90:
                    1d:81:70:b4:01:0e:b4:50:06:00:9a:cb:35:2b:38:
                    68:57:05:a5:21:c7:b5:ef:f6:0b:af:1b:95:7f:46:
                    1b:00:d5:75:d6:bf:7b:4d:b5:84:4f:d9:88:51:eb:
                    7a:e1:10:d3:be:5f:47:30:e3:48:67:43:e9:f5:7a:
                    29:03:49:ab:2c:5c:e3:0c:1b:13:9e:52:bb:b7:69:
                    65:81:5e:2e:6f:c8:f5:d1:e0:79:19:0f:ba:4e:fe:
                    27:a3:c4:b9:33:a4:70:f3:e4:80:8c:26:79:39:22:
                    75:a0:0f:24:bb:a0:e6:85:8d:71:a5:09:a5:29:47:
                    3a:d9:59:bc:dd:f7:0f:df:d2:12:f0:85:1f:81:0d:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:79:88:28:E0:A9:0C:07:38:AC:BA:86:A5:7C:93:2D:CE:88:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:50:c9:6f:b6:00:c5:d8:6d:50:a8:2a:9f:af:87:ef:ab:b2:
         cd:23:40:4d:1d:c4:94:b8:43:a2:94:f3:3e:b9:ef:19:03:7d:
         00:67:51:a9:e8:e0:d6:55:a0:6d:72:78:4d:3b:98:1e:b8:77:
         91:74:83:e8:85:8c:b6:1a:f6:95:ef:5b:cd:e5:dd:6f:bf:a7:
         dc:b6:51:ff:16:ec:69:0b:86:f6:c9:fb:f4:b7:d6:aa:02:80:
         9b:7a:8d:2e:02:cb:7e:39:8a:13:f8:62:20:1d:f9:b0:ca:47:
         61:90:1f:9a:d5:a9:d7:09:41:0e:9f:d6:6b:95:5f:99:85:3b:
         16:cc:4a:60:26:66:65:85:42:fc:be:a8:7e:41:0a:85:84:3e:
         b3:9c:84:5f:9a:63:e4:91:ec:2f:9e:14:11:86:e6:1c:bb:4e:
         26:14:4c:e1:ff:ba:7b:59:25:b6:09:b1:b5:c0:5a:11:ab:cc:
         d4:df:7f:99:cb:85:5a:e6:3d:44:2d:04:c5:55:8e:12:4f:c1:
         a7:a3:97:17:fc:ec:00:77:2b:a8:07:e6:8d:0d:1f:4c:71:05:
         01:62:12:8c:e1:4f:b1:ea:7b:71:71:d4:a7:05:03:88:08:ca:
         d0:0e:e8:99:dc:d4:88:eb:83:42:84:d2:2a:6e:15:d2:37:b7:
         19:d6:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:49 2026 by rpki-client