Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa
File:                     43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa (raw, json)
Hash identifier:          kOmhuOt0jemsu5//xG2w2STmYekB50QJprRy5VSkdxQ=
Subject key identifier:   37:E2:58:84:3B:69:EF:99:45:70:13:3F:E6:F3:DD:EF:F6:16:4C:5B
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584D65150D68BC1CF3DBECAE1D80
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     23344
IP address blocks:        139.104.96.0/19 maxlen: 24
                          139.104.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:0d:68:bc:1c:f3:db:ec:ae:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=e17ee858-1350-491d-81f2-2a8d793cda21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:7c:ac:b5:22:ec:bb:ac:8d:18:28:b7:ba:
                    d0:a2:7e:69:3d:bb:9e:64:82:3a:24:b7:4b:b9:1a:
                    70:5f:9d:a2:f8:9a:6a:0d:11:2a:28:db:c6:ef:37:
                    e5:6f:ac:b8:df:92:46:0f:8a:27:30:7d:c2:39:06:
                    45:0b:c3:c5:f0:e1:dc:52:3f:9d:09:6d:74:67:f5:
                    7b:39:3b:ec:cc:75:e1:2b:7b:ba:88:53:09:f0:c9:
                    5a:ed:3c:7a:3e:4d:b0:a1:01:1d:a4:52:ed:36:b0:
                    14:f8:8a:63:3f:7c:32:7e:92:f1:a7:69:a3:85:e0:
                    14:bb:a9:a5:ed:a0:ef:e9:53:72:b1:9a:0d:a9:2f:
                    a1:65:19:f9:cc:4d:cf:18:9a:5d:9d:d6:8b:d8:65:
                    b5:fd:35:a7:3f:28:a1:0f:ff:49:8d:51:17:9d:67:
                    58:48:4a:08:ee:43:97:49:1b:7e:a2:6a:55:2e:14:
                    13:42:db:7f:52:b4:e7:cf:42:80:6f:bc:ff:09:28:
                    99:f4:e8:41:89:03:ca:b4:53:6e:bc:8e:4a:8d:2c:
                    57:53:65:d5:0f:88:5a:1e:09:b1:5a:8a:99:2b:01:
                    90:ad:82:4c:dc:5f:6c:e7:09:e7:7c:5a:71:59:1b:
                    51:71:cb:aa:63:a3:8a:b1:5b:65:6b:df:46:99:98:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E2:58:84:3B:69:EF:99:45:70:13:3F:E6:F3:DD:EF:F6:16:4C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.96.0/19
                  139.104.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:42:29:8b:af:ea:1b:96:cf:af:c1:e1:ae:25:53:25:8e:6d:
         e5:c2:4d:07:d1:dc:99:26:d8:84:6a:83:f9:0c:71:a8:7e:04:
         73:ad:b1:af:35:1d:7f:f5:1e:4a:77:cc:aa:ae:e0:ae:6d:73:
         e5:fa:d9:c9:90:14:f0:7c:a0:04:ba:23:56:d1:07:1c:1a:c8:
         75:6e:2a:df:1a:ff:0f:6c:ef:dc:29:83:ae:3e:56:85:3a:16:
         f7:93:b0:dc:35:e4:e2:67:d9:71:81:4b:96:71:a7:df:c4:eb:
         3b:b3:95:29:db:44:b4:2b:9a:ce:aa:35:cf:5e:8e:52:c5:03:
         3f:e7:b2:75:99:c6:c4:75:6b:8b:70:70:85:56:99:2c:84:6d:
         a1:a4:3e:bf:19:b2:e4:b4:22:9f:31:cb:17:9a:a3:27:71:b4:
         41:90:3e:28:91:4e:6a:be:cc:55:f9:53:e4:b3:f9:f6:95:57:
         3c:2a:47:ed:6d:d7:54:7d:6e:5e:8a:0c:9b:0c:5e:64:6e:41:
         1f:b9:92:62:a6:6b:32:5f:18:4b:9a:03:2c:8e:cb:61:00:bf:
         24:01:4d:48:6f:aa:be:23:ae:28:9a:57:40:70:46:d4:4c:14:
         c2:f1:0d:7f:1f:06:d9:32:ea:51:0f:5a:39:a5:f9:14:b2:a7:
         71:5e:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:40 2026 by rpki-client