Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa
File:                     e3ba4400-8694-33ef-add0-4b97cb1013e1.roa (raw, json)
Hash identifier:          1AeLDGJMfsYrPf3p14To7mTkJrbbp5vGaLhkctoWdMo=
Subject key identifier:   CE:91:52:78:92:27:0B:25:29:E0:F7:47:CA:ED:CC:8E:9C:B2:43:54
Certificate issuer:       /CN=2dc207a0-a39a-4922-b631-3ea815cafcad
Certificate serial:       010D0C9F4328584DD625AFC966FFB80121CDF580
Authority key identifier: 70:EF:B2:36:35:A8:A4:17:22:B1:76:B5:1B:9E:6D:36:A3:6C:3B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     18647
IP address blocks:        69.84.240.0/20 maxlen: 24
                          160.238.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:af:c9:66:ff:b8:01:21:cd:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc207a0-a39a-4922-b631-3ea815cafcad
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=f59dcb9b-f43a-47a1-80a3-e60b5235314e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:9a:c1:22:48:2a:fc:14:d4:af:41:a5:95:
                    fe:d9:31:ed:72:1f:8d:e8:c4:b6:2a:ea:9f:2e:61:
                    a4:84:87:1c:fb:85:df:ef:04:5a:27:b1:99:7f:f0:
                    47:9c:ec:02:20:2f:67:1d:91:39:de:6a:76:dd:9f:
                    6c:ab:3d:c6:62:11:19:72:da:97:81:73:c6:f5:ef:
                    4f:77:54:d6:33:07:37:fa:83:d0:51:34:10:d9:a0:
                    f5:16:6d:73:3f:9d:8d:82:1e:b5:f2:ec:5e:60:8e:
                    4b:94:73:d9:e4:a0:5e:a0:0d:8e:f7:ad:e0:d3:ff:
                    d8:f5:be:e0:92:4f:b3:10:67:d7:98:70:b7:ac:4c:
                    25:af:68:e4:50:11:40:36:5e:4d:79:17:33:7f:e4:
                    c9:3e:4f:44:3a:9c:af:f7:cb:ff:63:b0:4d:60:71:
                    4c:fe:b5:30:bc:51:70:b6:f5:0e:57:a2:c2:59:88:
                    02:a8:6e:cb:cb:ac:7a:5f:04:02:8e:9f:91:07:bc:
                    7b:b0:ef:cb:84:db:3e:c1:ce:ef:e0:dc:fc:e0:a3:
                    69:a0:e1:0b:83:8b:d8:77:37:9a:90:0e:f4:c7:7d:
                    e7:ec:b1:64:d4:1e:bc:a9:a0:6c:49:f8:73:a7:3f:
                    23:c6:34:0a:5d:90:c0:da:3c:d6:59:6e:74:e0:7a:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:52:78:92:27:0B:25:29:E0:F7:47:CA:ED:CC:8E:9C:B2:43:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/e3ba4400-8694-33ef-add0-4b97cb1013e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad/2dc207a0-a39a-4922-b631-3ea815cafcad.crl

            X509v3 Authority Key Identifier:
                keyid:70:EF:B2:36:35:A8:A4:17:22:B1:76:B5:1B:9E:6D:36:A3:6C:3B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dc207a0-a39a-4922-b631-3ea815cafcad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.240.0/20
                  160.238.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:03:a1:ca:87:f1:30:ca:dc:7b:22:46:ab:e1:59:23:ac:fc:
         63:a4:14:7b:2f:76:9a:d7:56:f8:8a:71:9d:a2:a3:d0:e2:be:
         a5:0e:10:70:0f:e3:64:d7:40:20:a1:53:8b:03:d7:09:9e:a9:
         12:63:6f:fe:9d:be:38:f9:8e:56:f2:9c:e5:50:ae:80:09:3a:
         16:f8:c9:78:c8:59:3f:85:ea:1e:49:4c:c0:0d:fb:27:f9:4a:
         fa:b1:63:d8:71:7b:f3:5b:10:9e:e5:c6:aa:d1:75:ba:3a:74:
         06:e6:8e:e0:46:f6:6d:ca:03:7d:e2:e6:d0:4b:ea:49:7a:c2:
         14:9d:39:2a:15:ac:4a:50:62:9e:0b:ef:6a:30:5c:ba:68:a9:
         80:30:bf:77:a4:30:a6:e9:25:ac:6a:a7:31:c7:43:a0:83:07:
         de:a0:7c:79:73:49:f4:b9:f2:39:5c:64:40:5e:72:31:08:57:
         8f:ea:71:4d:46:4a:7b:1b:1a:1d:10:56:e2:d3:4e:e1:b8:28:
         3d:d9:43:35:48:10:3b:76:27:8a:89:d6:32:b3:83:2d:69:f0:
         2a:09:8e:d0:67:75:5d:fc:11:ca:26:4b:68:f0:c4:4e:a1:a9:
         d7:de:bb:48:1e:83:60:8e:23:c4:33:17:1d:6e:bd:f9:26:47:
         32:38:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:41:54 2026 by rpki-client