Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa
File:                     e6435659-5d7f-3300-bb29-809a4762f437.roa (raw, json)
Hash identifier:          guCIH7BKAn+Ne5mxnkUdj61noyZHj+qbDfSgK5ahpDM=
Subject key identifier:   01:5C:66:D8:90:7F:D5:5C:81:03:AA:57:08:20:A7:2D:0C:01:47:07
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584D60E513593C57B9C72B83E380
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     2129
IP address blocks:        192.53.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:13:59:3c:57:b9:c7:2b:83:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=5e84f878-f059-4f35-ab75-85db147b2f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:2c:57:88:b9:3e:33:bc:e6:e5:cf:c8:82:
                    33:52:a0:c0:cd:3d:f3:6d:74:33:6a:d6:ff:51:04:
                    32:9f:ab:e0:4e:9e:37:3b:52:91:c2:4a:2e:64:c6:
                    f8:40:a6:6c:3d:4c:52:42:cb:cb:d3:68:ad:15:d8:
                    66:a0:af:d1:c3:ff:40:1b:88:21:af:21:0e:af:22:
                    a5:25:56:62:e8:dd:39:06:07:9c:0a:25:9f:b1:7d:
                    e2:76:72:f5:de:d0:9f:51:c5:1c:61:19:fb:ce:78:
                    5e:20:c4:0d:ed:70:1d:60:54:fd:2c:01:21:d8:e7:
                    e4:13:d6:f9:fe:39:35:23:cf:82:bd:00:72:a7:89:
                    a7:12:de:9b:5b:a5:f6:bb:be:e3:5d:4a:90:5f:e9:
                    df:a3:f2:c9:10:a3:19:fb:08:ff:f8:d0:cd:69:20:
                    a3:e9:e7:ee:ea:69:7d:50:8f:ff:38:6d:f7:70:5f:
                    37:7a:fc:ed:f6:17:30:13:1f:9b:4b:75:1a:d2:a7:
                    25:51:80:fe:68:22:22:59:19:79:93:29:36:df:73:
                    37:e3:23:66:cd:f6:f1:0d:78:4e:de:82:33:aa:e6:
                    1c:b5:97:86:77:3a:34:36:11:ca:33:e0:47:31:62:
                    6d:e4:e7:0e:ab:5b:f5:a4:2f:f8:79:79:27:35:d0:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5C:66:D8:90:7F:D5:5C:81:03:AA:57:08:20:A7:2D:0C:01:47:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:89:46:f3:ed:cf:9a:14:23:9b:6e:c0:2e:27:d1:a1:aa:09:
         84:3b:53:41:3b:aa:c5:00:1a:e4:60:3a:ad:36:e6:8d:5c:c6:
         c8:ee:13:69:fb:8d:5b:27:6c:7c:a9:4a:fd:ec:a8:c5:9b:f3:
         fa:b3:1c:2e:f6:5f:fd:2c:86:9b:cf:30:42:a4:a1:87:33:06:
         e5:19:65:2a:b5:26:63:21:9f:83:7a:27:1d:07:6c:5a:52:2b:
         ac:8d:4c:7e:ef:55:21:25:08:04:bf:34:8e:11:51:4d:16:b2:
         eb:16:73:3b:ec:4f:e3:c0:c5:a2:ba:26:96:29:44:4e:ab:f2:
         1d:d1:21:71:da:55:d2:34:24:d4:fb:21:65:9f:da:c9:25:28:
         93:04:13:c2:4a:01:3c:34:0a:ce:10:84:94:f3:ba:57:dd:dd:
         96:84:27:e8:59:98:86:4c:01:21:5e:0d:be:ce:31:20:f5:3d:
         12:d8:e6:43:2a:28:f0:c6:49:93:00:29:12:29:44:c9:01:c0:
         f9:76:69:2a:c3:e6:99:39:78:98:1f:4d:e1:cc:5d:91:f5:fd:
         3b:4f:a3:bd:32:a3:12:6a:3b:ef:d1:6b:3b:c9:9c:32:08:73:
         77:53:89:9f:32:a3:90:84:59:9e:17:e4:55:f7:77:9a:e9:e6:
         10:fa:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:37 2026 by rpki-client