Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa
File:                     9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa (raw, json)
Hash identifier:          JnRB6kg1jvu2g6qNQEwEPq+buMdiqlXMAalpUDFvRIY=
Subject key identifier:   9E:E0:F4:6F:6A:5B:38:73:4B:9A:A2:FF:CE:A2:AA:D7:7A:97:5C:C4
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584DE2B5E8440304700A5420CA40
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     32440
IP address blocks:        104.141.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e8:44:03:04:70:0a:54:20:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=7443b067-55fe-4fe5-a2f7-c865838fa295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:f9:75:63:bb:e0:63:3a:1c:e9:84:a9:fd:
                    10:fb:bb:f5:33:fd:02:3c:b5:fb:03:c2:4e:6c:bc:
                    f9:ea:17:41:bf:e4:24:36:b3:33:49:d8:35:14:c8:
                    f0:ab:22:97:33:25:5a:88:05:03:fe:b8:2b:8d:44:
                    40:08:5e:3c:9a:d1:b2:a4:cd:40:93:b7:eb:bc:bf:
                    7b:84:1e:b5:0d:81:06:8c:c5:7a:e9:0f:fd:36:52:
                    12:18:4a:a2:5c:e0:0c:ea:9f:eb:9b:e8:8c:d3:ce:
                    52:18:57:66:0e:a9:0c:be:e1:3c:2e:d3:48:bc:5e:
                    b9:87:df:60:6c:6e:55:72:95:e9:f9:4c:19:da:d6:
                    1f:0e:06:5c:27:61:c7:4d:7d:3e:36:89:71:21:38:
                    1d:72:eb:de:12:fe:bf:78:52:fe:90:63:a5:ba:41:
                    cc:13:c5:1e:a3:56:0b:41:0f:79:47:cc:ec:d7:b5:
                    b5:37:0c:c1:ab:20:77:79:5f:1e:d8:fb:11:82:31:
                    24:37:36:14:f0:f8:36:ea:aa:fc:ae:de:5e:5d:36:
                    bb:46:7d:cf:85:51:76:01:00:fa:3c:40:4f:29:60:
                    50:75:02:a1:7a:4c:85:f7:0f:0c:d6:1e:5c:7e:1a:
                    7f:de:2c:22:e0:ac:82:89:0d:49:9f:b2:27:e4:2b:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E0:F4:6F:6A:5B:38:73:4B:9A:A2:FF:CE:A2:AA:D7:7A:97:5C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.141.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:16:29:15:93:fd:42:81:d8:64:18:cf:0f:de:49:a8:c2:
         3c:26:e8:f9:65:d8:01:fb:27:f4:4f:82:2d:87:36:d8:a3:27:
         4b:9d:6e:62:a7:63:60:74:c0:c2:31:98:f9:d9:78:66:51:a6:
         31:5f:bb:29:9c:c5:82:1a:28:ca:e7:d3:dc:10:55:0e:4d:3c:
         37:5c:c5:1e:c9:17:26:e5:27:2e:da:54:29:88:2b:7d:3f:9f:
         82:41:47:f1:bf:3a:fe:41:5a:05:4d:6b:ae:55:3f:20:f8:7c:
         81:ea:c5:c9:90:75:cc:da:13:6d:71:27:e4:33:55:43:39:f4:
         86:4f:f0:b2:df:91:d4:55:78:04:fe:ce:66:2a:3a:35:4d:35:
         0f:0b:72:7b:2a:86:d3:79:43:f0:2a:39:46:87:b0:aa:7a:20:
         28:bf:38:69:68:da:54:53:26:3d:a8:e7:08:f6:9b:9c:67:27:
         b0:d9:64:8d:50:d5:e3:28:9a:71:81:5c:5d:62:91:e5:e7:53:
         8b:5a:dd:27:87:cd:53:a5:36:a3:eb:0d:d7:0e:48:6e:e4:b4:
         3a:77:d1:59:27:8a:30:ca:2b:60:f3:91:59:26:a5:ca:06:a7:
         53:0f:79:a2:4c:5e:68:b5:f0:14:9c:92:17:1d:9e:66:e7:20:
         c6:91:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:00 2026 by rpki-client