Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
File:                     94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa (raw, json)
Hash identifier:          6ElKUZwXzRMZ6/0G6dlCtKVSHLeW72mZcNjllWM7uVk=
Subject key identifier:   87:6B:DF:C4:F9:88:1D:C4:AB:07:36:CA:E9:A5:9A:D1:40:ED:C3:E3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6C0FDB4D92C4EA9EE173B100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     265086
IP address blocks:        216.28.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:db:4d:92:c4:ea:9e:e1:73:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=aa793a4e-1327-4b94-b8b2-db4557140a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:67:53:dd:28:33:a9:11:9d:da:9d:dc:a3:
                    6c:91:3a:0c:f9:cc:cf:27:86:b6:cd:dd:6f:cc:8a:
                    ae:89:c1:56:f6:53:26:7c:79:0d:84:91:a5:3d:25:
                    99:d5:f6:aa:97:51:6f:3c:76:6e:88:ec:fb:32:82:
                    3d:61:06:1d:1d:23:d7:ee:42:fd:a8:45:4a:d2:69:
                    aa:61:f3:c1:3d:fc:d7:bd:d1:27:c4:83:58:08:cd:
                    64:d0:39:ec:f2:13:58:71:89:5e:e7:5a:6b:83:67:
                    d7:61:69:bc:b2:68:8e:1c:5f:8d:02:b9:b7:dc:66:
                    24:68:5a:75:59:8a:79:18:23:6e:3f:34:11:d7:9f:
                    66:61:3b:ac:83:aa:d0:41:77:31:84:4d:ac:bd:cb:
                    d1:d8:f6:4c:d1:28:bd:3d:8c:0c:d2:50:a2:fa:32:
                    dc:8b:17:fa:a0:db:02:96:76:d5:d4:62:e2:49:88:
                    e4:13:e0:16:0a:95:1d:53:24:ef:01:7f:0a:7f:12:
                    d6:c0:86:14:15:d9:31:60:b0:15:33:82:cb:f4:36:
                    be:69:c6:53:5b:a7:49:48:56:4d:d0:68:15:f1:8a:
                    3b:77:7e:0b:fd:88:90:11:f2:96:cc:f0:55:52:4f:
                    4f:6d:c9:15:b2:11:87:7a:78:83:f4:62:62:9f:68:
                    b7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:DF:C4:F9:88:1D:C4:AB:07:36:CA:E9:A5:9A:D1:40:ED:C3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94f18aa2-c25b-3fa5-bbb8-f44d868bfa3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:4c:40:5d:4a:de:1d:50:c1:5d:ac:64:48:d9:e9:0f:0a:
         4e:1b:7e:70:d7:ac:72:c7:1e:31:a6:01:14:10:cc:e0:58:b3:
         d0:82:4d:2c:9d:78:0e:b5:f2:77:1d:6c:23:c7:d1:0e:96:11:
         20:80:6e:86:30:63:14:ca:0e:7e:f4:85:08:93:09:36:a2:25:
         f6:61:56:6b:47:98:75:72:f2:2d:97:26:db:d9:81:72:0f:35:
         27:92:3e:a9:ff:e6:89:ac:a9:fa:e1:9a:e0:4c:6e:92:5b:3b:
         75:19:83:75:14:20:1d:c9:18:ad:1d:ca:67:cf:18:ec:09:d3:
         e3:cf:7d:bf:f3:ed:69:44:00:6d:0f:14:ac:fe:da:ba:e9:fb:
         79:0f:68:9f:a5:3b:00:86:25:04:a6:6c:cf:2d:09:6a:a5:56:
         19:56:d3:ad:b2:e2:d7:fb:7c:bc:d1:40:e7:97:29:44:77:e2:
         eb:59:fd:f2:0d:33:ab:6c:83:9c:90:80:7d:0a:13:4e:90:b9:
         82:08:8f:ee:ef:43:fe:7e:5d:d4:f5:ed:12:95:f3:30:46:2e:
         0b:8a:ec:e7:9c:67:5c:72:28:4b:3f:bb:cd:cd:fd:be:67:30:
         bc:c3:e7:78:8e:87:62:95:95:a5:d8:bc:9a:7b:b8:b0:8c:77:
         e3:c2:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:35 2026 by rpki-client