Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa
File:                     f188524f-d4f1-39b5-9a52-fbbd10d25950.roa (raw, json)
Hash identifier:          9QRLJRG0i5rhVxrbc6txOHhVOv+Jze0D29OQeM6X9FM=
Subject key identifier:   0B:98:81:EF:27:AF:70:73:30:5F:D1:F9:E8:EF:BD:42:F8:5A:6D:CD
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584D4D5A73FAB62080FD8F0E4B80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     394927
IP address blocks:        204.155.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:73:fa:b6:20:80:fd:8f:0e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=950f379b-6d7a-422d-91ff-47ef13714a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:9f:50:d2:2c:26:97:a8:a8:6c:2c:25:9c:
                    f1:73:c8:4b:a7:1d:dc:bb:36:1b:61:8b:14:36:81:
                    3a:87:e0:27:d3:72:eb:15:10:0c:d0:ca:f6:cf:9e:
                    0a:6f:c8:4a:75:7a:72:6a:ee:af:b6:e2:cf:63:ef:
                    ec:78:29:19:e7:f0:f9:1e:2e:98:9d:5f:8b:bc:90:
                    c0:2b:d6:9c:71:64:54:b0:a2:9a:42:89:f0:95:aa:
                    31:56:56:79:17:08:20:3f:1f:54:24:14:53:e3:7c:
                    4e:6d:f0:fb:bc:16:4b:25:12:44:00:ef:2e:7d:d8:
                    52:a5:71:54:6e:d0:d8:71:e1:a5:d0:fc:f3:47:5f:
                    02:92:1d:c7:9e:43:d7:0a:54:20:91:b9:ac:da:38:
                    54:d7:5a:c3:2d:3c:71:f3:13:33:93:a6:19:38:93:
                    7c:da:55:78:52:9f:f3:9a:09:4e:bd:4f:63:04:73:
                    25:e7:38:62:f0:58:36:f6:d0:3b:b2:4d:2f:cd:25:
                    d4:c2:cc:0a:37:33:33:e9:51:d3:04:4f:0f:f4:2a:
                    d0:81:eb:85:91:5c:05:5c:38:a8:6b:35:5a:5a:db:
                    0a:72:dc:11:f8:87:26:5a:f9:b3:af:fe:c3:29:64:
                    a0:85:c9:d5:6f:44:ad:ee:65:77:2b:e4:a8:2f:56:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:81:EF:27:AF:70:73:30:5F:D1:F9:E8:EF:BD:42:F8:5A:6D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:5e:e6:4d:3a:64:02:f0:8c:ae:5a:06:a2:ae:8c:1a:91:
         4e:83:37:a0:be:e8:e4:ec:ad:44:71:a4:ce:5b:cd:98:fb:0e:
         9f:53:bf:63:08:04:31:30:5b:a3:43:72:f8:53:1a:dc:ef:c2:
         84:67:6a:4e:74:69:2c:a4:f6:2b:94:35:c7:2e:a3:75:89:bb:
         aa:c1:cf:5d:ad:43:4b:e9:51:21:66:67:ea:c8:95:08:5c:b4:
         c8:f4:b1:41:00:f9:17:21:43:8d:09:40:e7:75:d1:a4:38:10:
         27:f9:80:85:12:22:5b:49:52:f9:13:29:e0:2c:78:1c:eb:a3:
         e0:e9:1e:56:14:7b:a0:6b:3f:e7:14:5e:fa:2c:aa:9f:b5:bd:
         c7:f0:51:35:1d:58:f3:f3:10:73:da:a0:fb:13:46:2e:2c:a1:
         21:2b:44:3b:be:08:35:c2:dd:cc:f5:64:1c:1c:3e:52:92:9d:
         95:bb:0e:70:52:be:e8:39:10:06:01:80:0e:32:af:0f:a5:36:
         4f:06:33:3b:76:c0:17:3f:c6:f9:1b:a4:7f:32:6c:4e:91:47:
         b3:63:e1:61:84:b8:03:f9:9f:3c:08:cb:82:41:10:fc:79:3f:
         7e:71:42:18:4a:51:6f:8d:a2:b6:56:91:32:aa:e9:28:9c:72:
         77:37:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:11:11 2026 by rpki-client