Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/4e919650-5175-3139-8e6e-38b962b0fc9b.roa
File:                     4e919650-5175-3139-8e6e-38b962b0fc9b.roa (raw, json)
Hash identifier:          ANlj735+wS73uvww7abm5mvQVNiW24A3+sj9Fx92bp4=
Subject key identifier:   E9:96:71:B5:38:A1:E4:B1:E3:E1:24:B2:9A:6C:3D:1B:75:F8:3A:4B
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584DD4916B8900D5F284DA836080
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/4e919650-5175-3139-8e6e-38b962b0fc9b.roa
Signing time:             Thu 14 May 2026 11:25:57 +0000
ROA not before:           Thu 14 May 2026 11:25:57 +0000
ROA not after:            Wed 12 Aug 2026 11:25:57 +0000
asID:                     132541
IP address blocks:        216.211.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:91:6b:89:00:d5:f2:84:da:83:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: May 14 11:25:57 2026 GMT
            Not After : Aug 12 11:25:57 2026 GMT
        Subject: CN=5910cb03-6e94-4a25-aae0-0f2585020e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:28:ed:52:7c:fa:44:a4:6e:42:46:f3:00:
                    a9:8f:6a:fa:9e:3a:de:27:39:b9:0a:74:fe:97:bc:
                    1e:86:de:12:59:8a:b3:22:aa:9e:05:7c:e2:bc:04:
                    3c:51:17:ad:d9:7f:fa:a6:f6:96:f0:44:e9:54:ec:
                    58:c4:54:28:64:3c:c5:98:17:88:3c:66:a2:19:4d:
                    60:3f:8f:40:ab:47:91:5f:bf:06:49:69:85:6a:81:
                    76:bb:63:07:da:31:dc:71:dd:65:64:c4:54:f4:31:
                    06:41:73:cc:08:4d:f0:7e:7c:f9:da:90:67:e1:c5:
                    cb:64:2b:85:3d:45:54:5b:7d:ca:f5:b0:cb:94:be:
                    54:e7:e9:bb:25:d8:89:8a:d9:f5:a5:98:0a:e8:28:
                    fb:0a:47:28:d4:ba:79:a1:83:a8:97:84:eb:db:12:
                    17:44:97:c5:5f:cd:47:0e:fa:56:94:2d:c1:7f:3d:
                    d6:3a:fa:a0:8d:19:ea:8a:24:c4:b1:87:92:d6:2d:
                    f0:33:c9:05:9e:cd:52:6f:2e:a9:f5:6c:3a:94:55:
                    12:21:fd:d4:37:1a:b2:72:f5:76:94:00:ba:ec:af:
                    7a:2a:6b:97:dc:9f:b9:8e:40:d0:c7:32:95:5d:da:
                    94:95:d2:79:85:a8:bd:c7:cd:e6:ca:c2:3a:19:5a:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:71:B5:38:A1:E4:B1:E3:E1:24:B2:9A:6C:3D:1B:75:F8:3A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/4e919650-5175-3139-8e6e-38b962b0fc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:4e:80:05:0d:f5:14:eb:46:da:39:de:42:4e:ee:01:5f:
         e2:c2:25:33:9c:7c:20:44:68:95:ca:e1:34:bc:44:f3:93:9c:
         29:fe:ce:f0:32:bd:f6:1d:29:61:9f:03:b3:ab:94:3b:80:33:
         6c:a7:da:1a:fb:3e:69:70:7a:90:df:61:ce:89:e7:b0:58:10:
         c7:31:be:56:c1:0f:41:02:26:71:b8:c2:e8:96:ea:42:90:26:
         c2:8f:97:39:54:6b:57:18:6a:34:e5:be:2e:84:13:4a:59:7a:
         86:c8:1a:82:2f:aa:ca:2d:62:eb:a3:da:7c:bf:96:17:39:73:
         6b:bc:f1:56:bf:7b:7f:4a:4c:05:dd:30:7d:d3:4b:5d:42:84:
         f7:27:f2:48:4c:35:d0:54:fc:9a:ee:d0:9b:1b:f8:b0:dc:d4:
         54:e9:cc:77:2d:2a:96:23:02:6c:7f:be:c5:5d:ac:d6:c8:e8:
         5d:be:da:79:65:5a:38:da:41:9d:2b:10:1a:ed:49:17:ca:6f:
         30:30:bf:a1:b2:46:7b:0d:03:3f:c6:9f:21:88:5f:e0:91:ce:
         82:6c:f8:b7:4c:d0:79:7d:03:68:65:cc:42:3e:a8:5d:3c:42:
         80:29:fc:3b:2a:45:3d:f0:0d:a5:49:b2:16:b3:4e:2d:e2:80:
         48:c3:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:41 2026 by rpki-client