Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa
File:                     3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa (raw, json)
Hash identifier:          Fuhqcf8gfTiMLj+uiNA8AMIg3Jk8lGmN/UljJNHym+0=
Subject key identifier:   F2:B2:EE:DD:79:B1:33:23:B8:BA:F2:9D:A4:27:4C:FE:7E:8C:0E:B5
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584E1FA9B5B7097A1B55D53D1D00
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     40266
IP address blocks:        204.228.198.0/23 maxlen: 24
                          204.228.226.0/24 maxlen: 24
                          206.207.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b5:b7:09:7a:1b:55:d5:3d:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=910399df-b1fb-42d4-a905-fc13f76d637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:db:b6:fd:fe:e8:1f:38:67:63:64:1e:ce:
                    3f:41:c5:59:6c:c8:ae:47:35:8d:03:dc:36:2a:13:
                    e3:28:2a:02:8a:3a:10:07:ec:ad:57:58:31:c7:87:
                    22:44:7a:c8:53:5c:3f:72:9b:a8:f0:b6:9c:18:46:
                    c5:55:a1:86:38:2d:66:e8:77:3f:93:a3:bb:42:9e:
                    50:99:92:b9:c4:0f:f1:91:a0:c5:eb:41:34:4e:c2:
                    08:7c:43:39:65:07:e1:c9:31:4f:14:65:9e:d1:ce:
                    5c:db:6d:db:3f:dc:36:b4:bb:b5:16:fe:d8:f9:90:
                    56:71:15:57:31:11:09:ce:bd:46:64:c7:9c:42:1b:
                    08:76:54:30:0b:b9:12:a3:58:0a:fa:62:ad:f7:60:
                    8b:c9:1f:ba:ac:6d:e5:db:91:04:ec:fa:47:a2:59:
                    dd:e5:d2:1f:85:0a:8b:02:25:86:67:95:eb:d5:6a:
                    b4:96:09:f3:96:9d:a7:9b:67:ce:f2:7f:08:11:f6:
                    11:67:9b:b8:f4:1d:d6:88:2a:bf:1b:ab:00:e4:16:
                    90:7a:d1:ed:e8:49:f8:90:35:aa:8c:40:4c:99:2d:
                    16:0e:31:ab:ec:1a:5a:ba:85:8c:60:ae:3e:db:83:
                    33:3b:59:97:02:fe:46:12:06:1f:52:97:cf:69:00:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:EE:DD:79:B1:33:23:B8:BA:F2:9D:A4:27:4C:FE:7E:8C:0E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3089e18c-f6cf-3d5a-9c2a-e19e81097cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.198.0/23
                  204.228.226.0/24
                  206.207.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:27:a9:09:06:32:88:1f:92:7b:a4:5e:2c:30:1e:bf:cc:5c:
         2b:9c:7b:89:8a:60:d9:93:95:de:45:ee:f6:61:05:1b:96:1a:
         6b:f8:3e:2b:3d:47:6b:98:bf:df:d4:fb:3e:fc:89:3c:e9:2a:
         51:5e:6a:bd:da:41:b2:c8:5b:cb:57:3c:a8:15:0c:31:4c:8d:
         b2:f2:10:39:c7:d6:50:ea:2f:4e:6f:bb:c7:f2:c2:a4:98:94:
         2a:f8:40:d7:07:96:62:c2:f5:78:b1:02:38:6b:0f:3d:96:0c:
         81:18:8c:17:00:35:2c:9f:4e:44:3a:af:f7:c8:d8:db:ca:be:
         11:31:d6:8b:87:ad:60:a6:3b:c5:2e:04:dc:a0:31:f3:a5:2e:
         20:d1:bb:b5:00:0d:40:f2:79:bb:c7:9c:42:c8:be:a1:17:fd:
         22:87:da:32:5f:98:2d:80:85:ff:96:27:b4:9e:90:d7:0e:3b:
         92:ff:30:12:8b:50:a2:dd:ea:20:3e:0b:4b:6b:6f:9b:53:fd:
         4f:af:53:6c:87:e6:5c:23:75:47:67:31:09:01:3a:29:34:11:
         f0:88:c2:22:b5:95:0d:64:2a:a9:91:b2:07:f4:2e:ac:9f:2f:
         23:8f:10:e3:88:55:62:0c:a4:e2:07:c6:4a:99:40:39:51:b3:
         e2:8e:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:44 2026 by rpki-client