Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
File:                     05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa (raw, json)
Hash identifier:          9TUy4XhnYwebNj6sAkC+r77Qd2Av+uzVEQAq9ujqxgs=
Subject key identifier:   F6:63:81:2D:21:97:7D:C5:98:E9:EA:9C:32:C3:E4:3E:F4:98:50:1D
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584D59EA638CC375551AC91EB7C0
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        104.192.137.0/24 maxlen: 24
                          104.192.139.0/24 maxlen: 24
                          104.192.140.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:63:8c:c3:75:55:1a:c9:1e:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=3dc9af1e-002b-4647-a016-44fd8279b8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:24:4c:07:43:f2:16:b7:9d:2a:6b:ba:f2:
                    4d:56:57:84:41:75:0f:b6:a2:ac:b7:f2:52:a6:ba:
                    2a:cc:9d:5b:6f:df:3b:6c:0e:f7:7b:d4:37:f7:0c:
                    7b:15:86:9c:a6:c4:8d:14:c0:1f:d1:04:3a:20:f3:
                    1e:c2:67:d9:b1:d5:2a:03:bf:07:2c:bc:73:e8:18:
                    ed:85:f2:04:9f:67:00:ff:8e:31:3d:fd:46:28:41:
                    6d:11:07:f6:52:0f:21:e3:8a:63:56:4f:e4:d9:18:
                    61:f1:0e:de:59:dc:f6:6c:50:44:9d:30:54:29:8a:
                    16:ed:b3:04:3a:32:34:ae:3a:91:f2:20:a7:07:b3:
                    ea:78:e0:ef:75:e4:e5:08:7b:bb:7f:ae:0e:b7:c3:
                    8d:e8:13:40:b8:3a:0a:95:4f:80:c0:21:a1:46:b9:
                    5f:a1:59:cd:b9:8c:dd:04:a5:8c:1d:fb:00:3e:26:
                    02:f6:8f:4a:8f:8d:83:13:ab:a8:05:85:de:1b:39:
                    3d:66:1b:5e:9d:66:58:0b:74:eb:3e:41:9a:aa:c0:
                    77:52:e4:aa:ba:6f:a9:0f:71:45:9a:91:ec:af:a3:
                    1e:04:af:33:b1:e6:36:75:e3:67:16:35:d6:ab:28:
                    8b:1b:86:3f:9e:41:73:a6:38:b1:3f:66:62:5b:97:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:81:2D:21:97:7D:C5:98:E9:EA:9C:32:C3:E4:3E:F4:98:50:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.139.0-104.192.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:03:e6:f1:a2:23:07:38:a1:6b:ac:bf:67:c2:18:4e:a0:fe:
         e3:64:39:c9:75:66:ee:bd:da:3f:76:91:a4:63:7f:7a:bd:a6:
         77:e0:5d:d5:79:2e:99:a9:38:35:bc:a9:5d:12:e5:37:0d:81:
         bd:20:35:d3:85:c5:20:a2:59:a4:72:9a:3e:ea:b6:87:72:83:
         9d:40:7f:dc:f8:ed:4b:51:4d:1a:7b:d2:9b:20:a7:e2:23:1b:
         b1:aa:71:e5:b5:e1:35:6f:8a:45:1d:5b:f6:c9:a2:16:72:85:
         22:9f:da:60:b9:e7:57:bd:cd:cb:f1:20:f2:91:1f:ae:86:8a:
         4f:6e:7b:ff:87:60:30:a2:56:ee:3e:4e:3a:0e:d5:c8:f1:a8:
         6b:79:c7:7b:6b:e8:99:b1:4f:91:29:7e:f3:6f:97:0b:02:82:
         b2:10:27:be:97:51:ea:d7:83:b3:47:2d:19:fd:ad:53:07:f3:
         84:b0:98:7f:dc:f5:e8:40:f2:81:43:42:53:42:71:1d:9c:64:
         31:4b:9b:81:ec:14:fb:19:f4:fd:78:90:e7:72:6d:70:f3:79:
         7a:33:74:11:1b:90:79:7a:f1:26:68:a7:46:64:8e:d8:d5:84:
         f1:ff:2d:ad:ca:51:27:3f:0e:aa:92:21:72:07:08:2f:16:64:
         71:3f:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:58 2026 by rpki-client