Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
File:                     d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa (raw, json)
Hash identifier:          YIlS9nGAo9zLGlT2y1iWzDniCQXN5k4frrcGg00cb84=
Subject key identifier:   FD:6C:16:C6:8A:FF:90:EF:92:8C:25:D4:83:1E:65:A6:35:4C:B4:6D
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584D59EA79FCDAA4FF90C6BB4640
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        199.65.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:79:fc:da:a4:ff:90:c6:bb:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=45a27cb4-5214-47df-8324-3dfe0a46e2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:2f:c5:32:be:d8:d2:1a:8d:3a:ff:d3:83:
                    03:a7:0a:9c:fb:09:54:65:51:3b:ae:45:7d:dd:0c:
                    6f:70:6b:21:71:2c:5e:38:72:01:c9:73:7c:a9:e0:
                    33:a2:36:bc:88:e7:6e:65:3d:ce:bf:f7:9b:48:68:
                    16:34:b3:f5:2a:e3:07:95:7a:0f:34:a4:65:39:3c:
                    99:98:03:75:c0:88:e3:01:dd:b5:f4:f8:12:1b:01:
                    e2:29:f4:bc:17:33:58:01:46:5e:79:12:73:45:ab:
                    10:78:19:62:7c:6b:18:32:2d:d6:6b:8f:8a:5a:76:
                    79:8f:ab:c4:45:8e:5a:82:96:31:c2:66:96:f3:84:
                    3d:64:62:e5:a6:31:35:48:1a:e7:76:16:78:fd:ef:
                    f8:7a:60:b1:6c:b1:d4:78:98:b8:9a:6d:70:80:16:
                    3e:f1:07:f0:db:73:a7:a4:37:e7:23:6a:e7:b6:4a:
                    ed:4c:cc:bb:19:4c:5b:91:a6:41:07:b0:f6:ad:83:
                    51:95:16:2a:e7:ec:74:dc:2f:7c:57:2c:68:d1:57:
                    d2:64:0c:93:e3:24:1d:aa:af:b7:00:5d:06:6b:e0:
                    46:4f:73:1c:fb:b6:36:87:6d:c7:fb:5f:ad:24:a2:
                    93:94:dc:6c:5a:9a:7f:82:57:83:da:e0:cf:5c:0c:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:16:C6:8A:FF:90:EF:92:8C:25:D4:83:1E:65:A6:35:4C:B4:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:56:65:d4:d9:99:a5:55:25:ac:b0:86:7e:98:8f:f1:d3:
         b4:cb:35:12:13:13:47:e3:18:ee:ea:0b:a3:c0:db:65:f1:19:
         c0:0b:73:5d:19:82:b0:64:5e:e3:4e:71:ca:0f:b1:7f:27:92:
         ab:28:3b:a2:93:59:4c:fe:e8:a4:73:bf:be:b7:77:63:1b:81:
         73:ba:2d:db:65:fd:93:71:7e:77:3a:f5:ef:ce:26:11:7b:f5:
         dd:c0:a3:c7:de:d7:7e:b5:09:77:d9:df:ed:de:6a:48:07:c0:
         89:c2:2b:83:1c:c5:f3:23:c1:aa:d3:e6:7a:b9:9c:4e:57:52:
         89:85:91:27:e2:b2:ea:52:fd:16:b5:6a:b5:27:cc:e4:48:69:
         6a:63:1c:b2:e2:c7:2f:8c:cf:a7:4d:4f:a2:23:5f:96:a3:72:
         59:80:73:c7:a2:49:4e:19:ce:e8:e9:70:b5:d7:79:29:bf:2f:
         98:fe:45:ba:c1:3e:25:95:f4:09:1d:66:67:05:f6:00:2d:47:
         7f:ba:5e:88:a7:80:9e:c6:7d:89:68:30:0c:b9:43:05:d3:0a:
         8f:8b:31:cc:f1:79:f5:d6:f3:10:67:a1:7e:3b:fb:76:57:7e:
         8d:79:09:26:9c:ed:c2:13:87:51:ce:8a:24:6f:28:a5:61:fa:
         99:94:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:45 2026 by rpki-client