Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/18ff846d-9ba4-33b0-9a57-7418c8bef0e0.roa
File:                     18ff846d-9ba4-33b0-9a57-7418c8bef0e0.roa (raw, json)
Hash identifier:          N3SEvDIxwHt5hqi4Us5bakH8BWsagTXyZDcYBeCLxsY=
Subject key identifier:   9D:FC:8B:20:AB:6A:10:D4:D7:C0:69:E8:EC:B0:1E:93:2D:20:45:2C
Certificate issuer:       /CN=7294aee6-e70a-494f-aa0c-f3894c542c48
Certificate serial:       010D0C9F4328584DC40049EE7E851D569BF70580
Authority key identifier: D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/18ff846d-9ba4-33b0-9a57-7418c8bef0e0.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        64.28.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:49:ee:7e:85:1d:56:9b:f7:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7294aee6-e70a-494f-aa0c-f3894c542c48
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=6ff76159-6a5f-4f68-b8db-8e0f248851d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:69:2c:fa:df:9a:5d:68:45:73:4d:7f:8a:
                    37:73:98:5b:9f:be:68:a0:9f:65:d5:e2:c6:86:9a:
                    42:2f:fa:1a:a4:0e:37:6a:d3:34:26:e7:f6:48:3e:
                    87:1b:1d:ba:a2:7d:8c:f8:50:08:c8:36:97:97:48:
                    d7:d6:64:e1:29:0c:8c:7a:4d:2b:ec:ae:6e:ec:04:
                    bd:3f:95:c2:61:5a:e3:d1:db:a2:eb:a6:34:af:f4:
                    20:1a:ae:0f:38:c8:d4:99:fe:8b:2d:c8:18:61:88:
                    30:97:1a:42:a0:8c:a3:9e:88:32:0c:c7:d9:71:4a:
                    9f:a4:c9:32:fe:9e:11:30:50:bf:aa:a1:ff:cc:d4:
                    6d:7d:72:8a:e1:a9:a8:b4:48:08:4d:f9:25:42:9b:
                    94:9f:71:37:4d:26:24:e6:0c:c6:c1:ea:5f:c4:b9:
                    4c:cc:bf:0c:0e:59:ef:07:c2:d7:a0:d0:96:ec:f1:
                    d7:5c:26:61:d2:45:1a:a5:74:9c:7d:98:3f:45:c3:
                    af:06:7f:5c:38:28:51:fa:64:57:f2:28:4f:cc:c0:
                    49:52:a6:96:f5:f2:bb:1e:81:ea:e0:f2:30:f2:a5:
                    33:e9:db:b0:4c:15:fe:8a:ec:84:13:9e:3c:da:8f:
                    5a:5f:e9:d2:af:bf:00:10:f3:cb:60:a5:fe:37:fa:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FC:8B:20:AB:6A:10:D4:D7:C0:69:E8:EC:B0:1E:93:2D:20:45:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/18ff846d-9ba4-33b0-9a57-7418c8bef0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl

            X509v3 Authority Key Identifier:
                keyid:D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:c4:6e:0c:27:86:89:ba:3b:53:f3:a2:76:74:dd:48:e8:
         44:e4:dd:97:74:94:37:18:5b:11:2d:c2:97:1f:e2:05:99:90:
         89:d4:71:e5:af:0f:37:f3:d3:a7:78:95:b7:8d:ba:44:17:a9:
         a8:c0:7a:df:6e:78:96:98:b7:b6:47:d6:35:a1:d5:93:2f:6e:
         57:ec:8e:a0:46:a8:89:2b:f0:26:a7:4d:92:b0:66:7f:f6:82:
         65:e5:3c:a9:13:03:13:ab:a7:23:9b:5b:76:e0:75:04:c0:85:
         af:05:dc:09:5e:f5:77:ff:eb:00:07:fe:53:91:27:a9:c4:86:
         23:d3:52:96:6b:76:c0:bf:c4:b3:36:de:eb:f1:4a:47:1b:93:
         44:46:74:26:fd:17:df:96:d9:ab:a3:73:16:3b:13:50:b0:d0:
         cc:97:dc:31:12:3a:77:49:76:88:f4:bb:6a:e2:f6:b6:3a:03:
         95:0f:ae:c7:10:1b:15:74:f9:55:79:35:b1:8b:42:7d:e2:ea:
         84:f2:95:26:d9:4e:42:10:7e:51:34:7f:3c:b8:1f:8a:bc:f7:
         10:b1:01:c3:61:4f:13:ac:0c:29:43:ae:76:26:46:c8:35:3a:
         0f:ab:29:5b:71:8e:1d:ce:29:cd:18:5f:bc:29:b7:a9:05:df:
         e6:18:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:30 2026 by rpki-client