Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
File:                     774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json)
Hash identifier:          4ajdNHQa0hfA5DEZa0dCuswZCtfFKrHMTxkPaJwE4FA=
Subject key identifier:   5D:CA:5E:AE:A1:63:42:A0:65:EE:32:F8:3A:88:FF:DE:92:02:BB:F9
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584E0C1ECEE347FC238821FE4900
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     16433
IP address blocks:        173.240.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:ce:e3:47:fc:23:88:21:fe:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=70be198a-6bb7-4ba5-9d37-47956f7fdef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:08:87:27:6b:53:85:9e:e3:e4:e1:38:26:
                    6e:6e:6a:40:e7:64:90:40:39:84:3a:9d:49:8d:cd:
                    66:4a:81:e3:2a:67:a1:63:bf:f6:b2:55:2f:a6:c6:
                    c4:e0:0d:61:00:5e:a2:05:01:d9:b1:32:b1:2f:95:
                    9e:f5:8e:99:9a:1f:70:ae:b1:a9:d9:c6:ab:ac:e3:
                    53:e8:1d:f1:af:55:aa:2e:5b:24:40:c8:70:24:03:
                    31:9f:08:b3:d5:e9:1b:02:e6:b7:48:ef:25:e2:1f:
                    c7:7a:1f:8b:23:0e:a4:c8:9d:96:e5:36:d7:eb:06:
                    66:11:19:e3:d0:e9:9c:b2:f7:3a:49:3f:78:94:1d:
                    76:07:e1:ee:f0:86:c3:84:2f:8a:de:ab:63:cc:6d:
                    7f:82:46:2d:c1:d0:ac:e8:16:00:bb:26:12:48:e7:
                    6f:97:41:57:95:6b:d0:e0:ae:47:41:45:11:31:e1:
                    b3:2f:c4:1e:c8:12:7a:22:ba:e0:e2:85:46:c4:c2:
                    6d:dc:f5:64:1e:d8:e6:07:b1:04:a5:c9:42:d1:5f:
                    a1:f0:e7:b7:37:27:1d:59:6e:85:93:83:ab:9b:2b:
                    c9:8e:4d:04:93:1c:4c:0f:21:e1:46:76:59:63:3a:
                    73:53:86:ed:26:c9:96:10:85:e5:39:fb:bc:1b:e4:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CA:5E:AE:A1:63:42:A0:65:EE:32:F8:3A:88:FF:DE:92:02:BB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:c3:ee:e7:81:34:d5:70:ce:4a:b9:83:cd:37:70:48:f5:
         e3:20:61:8d:a8:46:bc:27:43:0b:87:12:0e:71:35:89:e0:7b:
         e7:a7:33:7e:50:89:77:72:b6:df:b0:68:7a:6f:c0:f7:77:a0:
         07:84:1f:d6:eb:70:5b:b5:d4:6e:46:29:ee:34:62:d2:eb:c3:
         68:7b:2e:c1:3d:be:4b:e6:66:c9:0b:f4:bb:76:02:dd:68:73:
         73:c2:42:d7:8a:92:7f:e5:64:f1:45:50:13:91:08:2e:0d:1a:
         a8:de:74:39:a1:c9:28:a3:80:12:b1:55:93:47:53:da:c4:c1:
         f4:14:c6:60:a2:11:5c:db:8c:90:34:1e:e5:52:3b:0e:9d:56:
         1b:31:1f:69:b0:ba:38:89:b9:4b:26:08:ad:eb:f5:ab:ac:c2:
         40:f3:fb:00:a0:65:b5:79:b1:f0:3a:11:d9:36:5d:c9:70:34:
         a0:b5:77:e9:d2:17:24:cc:c7:b7:3d:32:5f:14:65:17:a3:e7:
         5b:20:e8:1a:d3:8c:bb:52:8f:3b:e2:49:2f:cd:54:8c:db:90:
         df:96:c7:f7:90:f1:1d:7b:34:b9:e9:03:ac:f9:08:d6:96:05:
         4d:6f:c4:59:16:de:7e:63:8f:ef:a9:7b:36:0e:ff:72:78:86:
         29:ce:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:55 2026 by rpki-client