Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d920dd31-94ef-3e1d-b467-6419f75383f1.roa
File:                     d920dd31-94ef-3e1d-b467-6419f75383f1.roa (raw, json)
Hash identifier:          7HRXLSY+bAhiAH/9SBoT0gg16NtbRbgfJ16KCqNel5U=
Subject key identifier:   B3:C7:F3:37:86:F6:60:E6:C9:C6:CC:EA:66:9B:5E:CF:FA:53:C5:C2
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584DE84B5B6CC4373FB2F4A6E1C0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d920dd31-94ef-3e1d-b467-6419f75383f1.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     19901
IP address blocks:        208.160.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5b:6c:c4:37:3f:b2:f4:a6:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=9a69cd7c-6196-4221-9301-b3b4b19390b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:c8:06:7a:3b:3b:cb:75:49:60:f6:52:65:
                    9e:b9:1a:c6:16:73:ae:f9:16:2f:cd:17:4d:4e:84:
                    28:95:b9:ee:95:2d:70:f4:fb:39:60:3f:25:f7:0e:
                    6b:e9:cf:fc:05:49:38:a9:50:0e:f6:e8:36:01:a9:
                    47:51:bf:d9:5c:ba:44:5c:1b:9e:07:03:3c:d9:1e:
                    02:da:f8:1e:37:94:05:55:9e:3f:dd:2b:15:66:23:
                    c6:28:62:cb:00:6a:ab:6f:77:2d:7c:d6:2b:ca:b8:
                    0d:68:4e:8e:1f:38:7a:c0:1a:4d:12:31:56:c1:7e:
                    bf:6e:8c:12:49:c2:cf:21:38:77:49:ad:80:ac:af:
                    a5:75:fa:dc:1a:0e:3c:46:dc:53:62:88:9f:8e:68:
                    6f:dd:c4:cf:3a:37:a7:10:c4:1e:51:54:16:8b:ae:
                    51:98:96:35:78:dc:b2:09:c6:da:62:bf:75:e3:2f:
                    cc:4f:83:1c:e1:0c:9a:37:5c:b3:84:69:04:e7:1f:
                    0d:52:3e:3c:d6:a2:95:de:0e:86:05:9a:f6:82:5e:
                    f4:a8:05:b3:c9:3c:8e:75:88:dd:29:61:64:a6:c6:
                    e0:6a:6b:58:58:76:db:95:85:1b:81:18:ce:e0:53:
                    f6:09:63:1a:cf:2e:13:11:00:60:f8:bc:bc:3a:34:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C7:F3:37:86:F6:60:E6:C9:C6:CC:EA:66:9B:5E:CF:FA:53:C5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d920dd31-94ef-3e1d-b467-6419f75383f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:57:30:5f:ac:67:d8:3e:cf:6a:81:aa:7b:35:97:0e:01:
         ac:1b:c4:da:ce:0c:8c:ed:2f:f1:36:f8:01:8d:d2:41:ec:20:
         c1:c9:16:bc:dc:05:9d:8b:85:ac:67:ff:46:00:5f:37:55:27:
         be:7c:0c:5c:e3:31:9f:33:fe:c9:4a:48:9b:b7:67:bf:c3:3b:
         bf:e2:65:71:67:6e:34:e2:e9:54:27:8d:b8:02:9e:69:7e:ba:
         8a:df:fa:be:ba:d1:8e:8a:87:b2:db:8d:70:d4:84:ac:20:7b:
         6b:91:d5:44:66:76:bd:be:8c:22:82:38:0e:35:23:3d:bb:8c:
         a5:12:6e:c2:82:9b:ee:cd:43:f7:fc:21:ff:7c:61:51:7c:4e:
         c3:45:64:1f:70:b3:a6:09:a7:ec:89:f8:2f:35:02:9c:ac:9d:
         b6:d7:78:36:f2:42:ef:a2:b0:11:20:d7:9b:20:ed:93:f5:f9:
         b9:99:63:90:03:fd:ea:9a:af:a3:3f:42:59:12:ee:cd:69:61:
         13:08:8c:60:1c:89:44:76:5a:55:30:41:9d:1f:28:83:07:34:
         9c:fe:1d:17:c2:12:61:7e:3e:a8:9b:3b:bf:77:dd:43:3c:ed:
         a2:50:41:20:ba:52:0b:58:a2:4c:2e:37:8f:63:cb:2a:bb:8e:
         b2:41:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:10 2026 by rpki-client