Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/679bc04b-de3b-3a2d-8ad5-3ca419dc9324.roa
File:                     679bc04b-de3b-3a2d-8ad5-3ca419dc9324.roa (raw, json)
Hash identifier:          L1z1wPmJ0cOAzrX26yWxEEb/1Wwd442vrrr9SJBHeMg=
Subject key identifier:   72:0A:EC:D6:9E:60:7C:DC:F0:10:9E:E1:71:6F:C6:7C:FF:8C:48:BE
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D703FD5227AEAEDB145A14440
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/679bc04b-de3b-3a2d-8ad5-3ca419dc9324.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     20454
IP address blocks:        174.138.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d5:22:7a:ea:ed:b1:45:a1:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=1d778ce2-84d6-48fb-8af2-3bcf5561eb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:bb:57:23:87:87:40:2c:e8:78:22:77:c1:
                    33:f7:32:2b:d5:a8:bb:e6:f7:e5:aa:8c:49:03:ff:
                    f6:d7:b9:95:28:9b:05:3c:95:d4:3f:10:65:4c:5a:
                    72:a3:8f:5c:39:f8:d4:fb:6f:0e:72:ec:c9:47:da:
                    48:e2:bc:cc:3d:39:1c:cc:ef:60:69:d0:b5:0a:b1:
                    86:16:6f:23:7d:c3:44:70:6e:6e:f8:84:e1:c4:49:
                    4b:5d:df:72:5c:3d:28:c6:4d:7f:72:8a:fb:29:8a:
                    ea:6c:6f:c7:c1:97:36:4c:fc:f5:cb:1e:b1:77:84:
                    38:39:a9:d1:d4:ae:d5:54:b3:58:0b:eb:42:2d:7a:
                    b9:23:9f:03:93:d8:ac:a0:f8:e9:11:e4:4b:c2:60:
                    d2:23:71:55:16:6f:de:25:44:92:28:99:b2:d0:09:
                    43:4b:a9:5e:85:ec:66:2d:cd:74:89:36:14:06:8d:
                    9b:48:79:94:31:64:0e:51:78:53:59:54:60:49:3a:
                    44:2f:df:c6:b7:6a:32:8b:e2:aa:f4:c5:8d:e6:7a:
                    8d:93:52:ab:1e:b6:5e:29:95:ea:86:1a:fd:07:f9:
                    a3:cb:36:37:bc:98:dc:ff:78:f7:68:2e:19:07:90:
                    f6:9e:3a:fd:8b:6a:98:14:55:4c:01:bc:53:65:a7:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:EC:D6:9E:60:7C:DC:F0:10:9E:E1:71:6F:C6:7C:FF:8C:48:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/679bc04b-de3b-3a2d-8ad5-3ca419dc9324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:82:0a:ae:a5:64:5e:e1:01:a3:7a:0c:75:ec:ca:66:4a:
         7e:76:c2:3e:04:45:94:d5:89:94:c2:ea:c4:0a:fa:6d:36:ad:
         72:21:6b:42:88:62:b0:0c:27:20:0b:5d:23:78:9b:71:a4:57:
         76:96:52:63:a0:94:bf:08:ac:3e:6f:66:ee:d1:79:eb:31:fd:
         0c:af:67:95:0b:61:c9:e9:69:fe:d6:53:cf:40:0c:9f:c4:7e:
         cd:14:92:d2:70:c5:c3:5d:5a:58:a3:90:e9:2c:19:ed:9c:31:
         85:df:e9:a9:b5:d5:82:a1:35:b0:12:55:95:64:34:e4:95:d7:
         3f:c0:1f:b0:3d:ab:8e:27:a8:ac:9f:46:58:36:a2:9d:9c:08:
         57:68:ca:c9:ff:32:20:59:57:80:c1:0e:49:f7:c2:50:71:ac:
         4b:d8:43:30:1f:44:10:a3:30:ab:15:25:29:db:1c:9f:87:e9:
         39:42:cf:c8:80:e9:27:1b:24:b0:b9:50:fe:fd:37:c1:20:fd:
         f9:b2:db:0c:c7:42:94:9a:14:fe:56:f0:05:48:12:59:60:55:
         c2:42:04:cc:19:6a:23:51:91:cd:ed:3f:b7:6d:d2:09:98:7b:
         7b:b1:a4:f0:11:a9:0f:1d:71:27:08:86:6a:01:cc:75:5b:ef:
         b9:db:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:46 2026 by rpki-client