Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d90418ff-75aa-3410-925d-a892d994ca51.roa
File:                     d90418ff-75aa-3410-925d-a892d994ca51.roa (raw, json)
Hash identifier:          mCro3D0uSyD7f7bugDkOoMu+aoMXMsUX265Z2EZBc60=
Subject key identifier:   0C:F2:6F:46:17:C5:35:02:42:5B:F0:82:C9:86:F1:0C:45:DF:BE:E6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DC9A47C96680F526E348CA240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d90418ff-75aa-3410-925d-a892d994ca51.roa
Signing time:             Sun 10 May 2026 13:30:28 +0000
ROA not before:           Sun 10 May 2026 13:30:28 +0000
ROA not after:            Sat 08 Aug 2026 13:30:28 +0000
asID:                     21527
IP address blocks:        184.104.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:a4:7c:96:68:0f:52:6e:34:8c:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 10 13:30:28 2026 GMT
            Not After : Aug  8 13:30:28 2026 GMT
        Subject: CN=6cadd075-b3ad-42e0-9936-5000b19ecb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:3a:fd:ba:4c:61:06:cc:4f:a3:93:45:c5:
                    32:4e:b4:1d:79:dd:34:69:d0:be:3c:9f:17:2a:c8:
                    0e:de:78:d5:de:e9:3b:03:03:2b:fb:5d:11:fc:fb:
                    28:04:e9:cc:0a:c2:54:07:c4:05:04:71:3b:31:87:
                    ea:de:c5:ad:ee:18:f5:51:24:5a:e5:1d:3b:8d:02:
                    5a:79:70:ad:6f:b8:15:45:47:b3:ae:d9:36:19:44:
                    4f:a3:76:c3:b0:26:de:4a:91:67:6f:af:d8:7c:d5:
                    8f:70:45:f5:db:2b:f3:4f:34:5d:5b:13:bd:e8:a8:
                    ae:f1:bb:4d:d4:36:bf:19:fd:b1:fc:74:d7:05:d5:
                    59:4e:9d:de:0f:fc:26:8a:2f:09:ff:e8:0e:ee:8b:
                    36:ba:5b:8a:38:52:43:23:a2:04:1f:30:9b:62:c3:
                    09:e4:06:20:d1:66:c3:89:4f:29:e7:c0:b3:82:17:
                    f1:a9:c9:6f:12:5c:96:ce:5c:57:89:7e:99:da:f8:
                    39:66:f4:74:0f:7c:df:34:15:4b:8d:e7:a5:95:a7:
                    64:e8:02:9d:0f:ce:42:3d:21:03:4d:6e:20:a8:f0:
                    53:70:95:95:2e:e0:92:4e:39:fb:c5:88:19:f9:84:
                    fa:b6:d8:24:e4:6d:96:9a:f9:d4:8c:05:15:e4:bf:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:6F:46:17:C5:35:02:42:5B:F0:82:C9:86:F1:0C:45:DF:BE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d90418ff-75aa-3410-925d-a892d994ca51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:99:7f:6e:9e:ab:b4:b2:fc:d1:ee:86:6e:43:60:03:ae:5b:
         aa:0a:95:d9:bd:85:0b:98:67:c6:9f:87:8e:2a:80:b8:ed:99:
         4c:09:41:f4:86:a3:53:44:17:87:da:89:1f:a0:48:54:08:d6:
         4a:1c:de:a1:00:04:2c:7d:d8:81:e5:57:0a:5e:14:d2:7c:cc:
         79:d8:68:c9:64:7b:f4:db:74:18:16:24:de:47:98:c7:5f:9f:
         36:9d:06:d5:49:02:ad:42:14:70:b9:af:67:86:6b:7a:d4:68:
         56:97:31:60:ec:4d:9b:3c:59:bb:52:11:9f:84:be:49:f1:f6:
         41:3e:f9:7a:ed:9f:47:d0:d4:e4:49:af:71:c9:82:bd:fb:71:
         af:e4:1f:54:d0:50:50:95:a2:00:7f:b3:ec:13:e7:be:3a:18:
         bd:17:b9:4c:e4:aa:03:69:1e:2c:fb:16:90:34:f4:a7:d2:bd:
         59:c8:f1:27:1e:1a:ef:82:47:4d:00:fd:db:8d:11:fb:5c:49:
         b6:84:af:2a:f4:43:74:0f:29:48:ff:c9:f0:d5:16:b2:72:30:
         32:76:9f:a4:40:c7:72:b7:d2:51:ef:ca:59:9f:8b:28:64:f8:
         37:e7:2c:19:f8:af:72:6a:17:5b:bb:d2:0b:65:9b:30:d9:63:
         b5:8f:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:29 2026 by rpki-client