Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/929aa2f9-415b-3e31-9f42-01b6341575ee.roa
File:                     929aa2f9-415b-3e31-9f42-01b6341575ee.roa (raw, json)
Hash identifier:          J8uf+H8NSd8F/7GFrCi7sEuToFmdCuAxmRNJ+oDfLts=
Subject key identifier:   93:7A:50:24:7A:3B:0A:A3:4A:63:C7:5C:1A:B0:14:51:A1:30:91:31
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F4328584D7CCFD8F64DAA3A6F972D2700
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/929aa2f9-415b-3e31-9f42-01b6341575ee.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     25625
IP address blocks:        69.71.128.0/19 maxlen: 24
                          192.33.172.0/22 maxlen: 24
                          216.25.224.0/20 maxlen: 24
                          216.236.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d8:f6:4d:aa:3a:6f:97:2d:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=5b404ce9-f6a5-46cc-b271-37566db1220f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:95:e1:cf:4e:86:70:7b:f2:34:23:b6:43:
                    9f:46:cc:19:a5:f3:52:c5:0c:96:cc:cd:e0:f9:bc:
                    e3:eb:7f:c5:59:e8:93:15:6e:27:d0:b4:ca:08:35:
                    45:d1:47:73:99:c4:f7:34:77:ab:67:d4:b5:11:07:
                    0e:f6:b2:d7:61:50:52:65:42:c3:f7:97:70:5c:8e:
                    6d:9e:79:0c:95:d9:90:01:0f:f5:82:e4:ef:74:41:
                    60:fe:5a:dc:41:13:3c:9f:cd:9f:b1:0b:09:e7:80:
                    1c:1b:00:e4:14:9d:3f:ac:cc:c0:98:54:90:a0:47:
                    7f:b9:65:cf:53:cd:06:79:0a:a1:a6:ac:d1:aa:2c:
                    38:5b:51:b2:8a:a1:06:b0:18:36:98:67:a1:d0:b6:
                    06:4e:ee:0b:68:e5:49:35:50:2c:8c:32:b3:f0:ac:
                    29:a9:5c:f4:65:55:79:98:cd:61:2d:f4:43:b5:69:
                    dc:35:bf:a6:a5:da:ae:1b:b4:b6:d5:bb:8a:4f:b4:
                    d1:55:0d:8e:bf:04:37:43:58:9d:c6:28:3c:9f:20:
                    02:7e:a4:ed:b7:1d:f8:5a:72:e6:02:e2:59:ec:fa:
                    21:06:ff:91:85:b5:4b:d3:97:5c:c5:6f:4c:4e:27:
                    dc:37:73:b2:49:c7:32:97:99:89:d2:82:04:2e:20:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:50:24:7A:3B:0A:A3:4A:63:C7:5C:1A:B0:14:51:A1:30:91:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/929aa2f9-415b-3e31-9f42-01b6341575ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.128.0/19
                  192.33.172.0/22
                  216.25.224.0/20
                  216.236.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:21:a5:43:ae:41:e9:49:d7:79:57:36:4e:05:6e:cc:c4:1c:
         33:7f:af:15:7d:75:a6:b5:3a:2e:8e:2c:6d:99:99:33:41:ff:
         7a:b8:f9:41:ab:96:77:03:70:df:8d:0a:ca:d3:e3:e4:fc:18:
         d0:6c:aa:d0:b6:e5:59:d4:76:2c:f7:bd:68:fd:d3:62:5a:06:
         b8:a1:34:bd:9c:c6:c5:40:5a:90:a6:ef:89:73:da:49:97:83:
         dd:13:9b:a3:5c:78:9b:f7:19:24:99:9a:91:70:46:11:18:74:
         52:61:79:81:d3:a1:90:77:a4:5c:8f:5f:16:0a:c0:52:e7:05:
         77:31:11:4c:b0:cb:3e:f8:a0:d8:36:ad:9d:d1:e3:db:77:53:
         e1:08:6b:71:da:4f:6c:88:24:02:ef:f4:fd:5b:ad:c8:d2:4f:
         3f:3a:fa:36:51:7b:6c:bc:a0:a2:1c:28:9f:d6:a0:77:1f:d4:
         9c:c4:cb:4f:10:e0:a1:bd:1e:29:16:2a:8f:fa:58:09:3a:b7:
         55:11:07:69:a4:75:c4:fa:1b:bc:55:07:10:5b:65:da:b3:b1:
         95:40:ae:7f:bf:5c:e0:ea:7c:e7:fc:67:97:bc:62:76:c2:f3:
         fb:bd:dd:fb:ef:93:98:7b:e6:01:37:54:76:6c:99:ce:7f:21:
         aa:96:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:25 2026 by rpki-client