Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
File:                     2681e094-c5f0-376d-abe2-47d9d9497306.roa (raw, json)
Hash identifier:          7OLmkbUBxnSuFu/hYYmZMT3QvxxPsEA9lQG587aHNJc=
Subject key identifier:   53:8B:DE:B8:96:31:25:12:4A:D7:6F:D7:C6:77:1E:BB:C1:F0:A3:4D
Certificate issuer:       /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial:       010D0C9F4328584D80FFEF349063A87DE4E32510
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     36466
IP address blocks:        199.180.216.0/22 maxlen: 22
                          208.71.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ef:34:90:63:a8:7d:e4:e3:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=e493d8bd-108b-4474-95c5-832a82bae8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:20:89:60:01:b6:a3:0b:83:fa:26:d1:cf:
                    61:75:c0:74:f2:21:21:5a:ff:16:66:48:38:d0:c9:
                    3b:8d:d0:60:01:94:2b:30:4f:e8:0e:22:b8:27:49:
                    9f:87:32:4a:a0:42:96:ae:c2:9a:c2:f3:e0:d1:5c:
                    1d:1c:d5:20:cf:2a:91:db:93:ff:7e:ee:6e:03:29:
                    35:e3:f9:10:77:89:9e:a1:e0:d7:26:e0:cf:ba:42:
                    d3:e2:f0:00:36:0e:a2:9e:eb:a2:55:ed:9c:64:d7:
                    c0:cf:78:2f:04:ba:9e:1a:2d:92:5d:c7:4a:af:8a:
                    fd:fd:a8:0c:f2:ba:b4:fb:54:39:14:ca:26:73:1c:
                    9f:ff:ae:4c:14:8d:f9:74:6d:49:67:2e:88:07:c9:
                    12:7b:96:e9:ed:3d:a8:89:69:cf:ed:35:50:fe:e3:
                    93:7e:19:a6:e3:38:e8:f2:10:56:a0:9b:25:18:9c:
                    cb:52:b7:b9:8f:75:16:5f:d8:2b:9f:e6:f5:38:b9:
                    a5:46:4b:a1:0b:61:75:64:8d:3c:77:40:c8:6e:c0:
                    ae:8f:8b:67:ab:1f:19:12:b4:f5:d8:03:01:f9:54:
                    07:cd:6c:4b:2d:24:34:95:fa:2e:df:66:84:c2:f3:
                    56:6a:17:cf:c5:60:f6:d0:9e:f2:70:af:3a:eb:36:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:DE:B8:96:31:25:12:4A:D7:6F:D7:C6:77:1E:BB:C1:F0:A3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl

            X509v3 Authority Key Identifier:
                keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.216.0/22
                  208.71.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:5b:5e:e5:d3:40:b6:db:2a:c1:64:2b:fa:46:72:52:d6:
         b2:c6:07:fa:94:be:12:70:db:4c:0b:06:b6:8d:1e:58:9d:3a:
         35:1c:a6:4d:84:09:79:1f:66:3e:0b:8b:94:35:f9:75:ea:05:
         69:3b:58:58:66:cc:7c:05:d6:ab:e2:92:0a:56:bc:51:80:66:
         44:8b:96:45:11:32:d4:45:42:40:08:20:36:66:f2:5f:0a:54:
         61:93:c1:e4:57:c3:94:36:8b:76:4c:76:9d:d2:82:b6:aa:fc:
         9a:51:4d:58:9a:79:2c:4c:af:48:ed:ad:1b:36:fb:57:ea:68:
         57:06:9b:d8:92:11:e7:9d:22:2f:ff:1d:fa:05:32:d8:a6:df:
         7d:2d:7a:91:86:0e:5e:b8:b1:ca:e2:f9:7f:e6:ea:3d:82:7c:
         62:46:e9:11:5e:0a:c0:83:18:cc:c6:a8:21:14:e2:68:cc:2a:
         bf:d1:4e:40:31:72:d1:34:b5:55:5a:ff:d9:34:b0:7a:87:a7:
         84:ef:2d:d8:bc:da:48:18:48:e9:c7:b2:96:f6:df:07:cb:cd:
         09:49:51:94:66:3c:17:2c:8b:b8:79:0a:5b:f7:d0:78:95:c6:
         94:78:fa:b6:4d:42:4b:04:13:97:54:0f:55:cf:32:3d:01:76:
         d9:f4:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:32 2026 by rpki-client