Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File:                     e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier:          teZrhySDq5vo/NirgnucRRuYCMjZUK/tyc/rV5CGRpM=
Subject key identifier:   4E:01:72:D1:EA:BC:3C:71:36:AA:9F:D7:EB:61:E2:1F:4F:6D:5C:9F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584D04E241BEC1B925D4492F8980
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     40934
IP address blocks:        23.249.55.0/24 maxlen: 24
                          96.45.39.0/24 maxlen: 24
                          96.45.40.0/24 maxlen: 24
                          96.45.41.0/24 maxlen: 24
                          209.40.103.0/24 maxlen: 24
                          209.40.110.0/24 maxlen: 24
                          209.40.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:41:be:c1:b9:25:d4:49:2f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=73fe49a5-2003-450f-a8b0-d953c4d2a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:d1:5c:ea:9d:e3:6c:9e:91:e4:77:e0:e9:
                    be:1a:27:5c:5f:7e:25:cb:67:b0:99:e4:59:c0:b3:
                    18:2f:d9:21:f2:64:b1:c6:51:13:a1:1b:96:7e:02:
                    fb:24:74:a1:93:56:0c:3b:7e:03:dc:dd:7d:45:a6:
                    8a:c9:1b:b4:ba:d7:07:58:4f:a6:7f:cb:08:1d:42:
                    83:63:a4:fd:92:99:59:17:93:19:fa:bf:cf:6d:ce:
                    11:f0:5a:ff:ca:41:1c:c7:cd:ff:f5:a5:32:7d:98:
                    d7:97:3e:f6:76:63:85:8b:3b:0c:5a:4d:0e:61:cb:
                    4b:03:44:29:e0:ad:17:f1:1e:e7:32:e2:07:01:c2:
                    0e:72:6c:de:cc:f1:2d:2f:bc:a9:6e:e2:f1:74:96:
                    fc:5d:5b:8b:5b:26:9e:84:de:a3:73:ca:3a:fa:3d:
                    10:a7:df:62:ec:4e:72:ca:45:7a:6e:3a:9b:65:8e:
                    c2:ae:b6:7d:71:65:c9:25:30:c2:d9:04:a1:bd:23:
                    f4:28:da:a7:9b:6f:97:14:8b:55:ba:26:14:e2:4c:
                    56:5c:6e:9a:bf:2a:6b:2a:42:dc:56:8a:cf:1b:95:
                    e2:24:e3:79:a5:f4:5a:9b:d3:29:96:d0:91:e8:37:
                    54:39:3c:ef:31:9b:d6:61:dd:c4:16:fc:25:30:1d:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:72:D1:EA:BC:3C:71:36:AA:9F:D7:EB:61:E2:1F:4F:6D:5C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.55.0/24
                  96.45.39.0-96.45.41.255
                  209.40.103.0/24
                  209.40.110.0/24
                  209.40.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:05:7b:f0:4d:99:bb:55:af:84:03:56:68:b8:18:ba:97:
         50:5e:29:36:17:3a:d2:31:1c:8e:32:0a:4a:1b:fb:74:31:4b:
         78:1f:ef:93:66:69:38:89:89:fb:1a:44:94:ee:36:fb:23:87:
         f2:2e:b4:be:ed:4a:cf:b2:89:3a:e8:1f:86:2e:7b:36:86:9e:
         95:a3:cc:73:d5:5c:61:c8:56:f8:51:69:ed:ae:63:08:39:ed:
         ab:4f:93:51:c9:27:0a:1e:82:c5:bd:77:83:dd:02:18:25:c9:
         37:3e:e7:67:89:65:27:0b:ed:fb:df:05:21:10:bf:d4:b8:6c:
         a9:8d:2b:27:6f:72:f1:dc:af:d8:a6:0a:c0:20:89:ab:3e:73:
         f8:70:87:76:ff:29:64:fa:94:38:4b:87:8f:e7:e8:85:e2:2a:
         ba:9a:c4:e9:7d:33:4a:5c:29:22:b3:b5:37:ec:b4:9b:ca:e5:
         4a:80:08:b3:34:69:45:fd:03:52:07:a8:24:b0:4e:d9:2e:d1:
         01:bd:ad:23:cf:a9:16:02:96:fe:fd:6d:17:08:d3:34:97:28:
         ee:aa:77:24:e5:28:59:6e:4a:0c:f2:a6:90:57:df:ac:f3:1f:
         5b:41:65:76:84:a6:4c:c5:5d:be:d9:39:52:34:ce:68:05:8f:
         5c:18:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:00 2026 by rpki-client