Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa
File:                     f53d8254-0516-3991-a742-bbfcc5001432.roa (raw, json)
Hash identifier:          WeO+d8Y52dJ56N2NANbdc2X1ULpzI7S2y6bOD3fB4uw=
Subject key identifier:   A6:F2:FB:71:86:3D:4E:5A:91:64:9D:AE:75:00:C9:A7:4C:CD:57:C2
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584E0005DFF0FB513436B240AA60
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     14618
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:df:f0:fb:51:34:36:b2:40:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=927cae3a-857a-4bb2-8608-5c2269722302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:26:4c:ca:36:5c:16:7d:85:21:10:ba:a4:
                    45:b7:48:77:d3:4c:e5:25:bd:d1:66:bb:82:ea:33:
                    c7:59:8d:e1:6b:65:b0:13:b1:32:c1:6e:1f:6e:c1:
                    52:4b:73:8c:00:2a:97:42:75:9d:d2:d6:d0:6a:68:
                    1b:9e:81:7c:cf:e3:ff:7b:fe:87:35:5c:0f:0b:c4:
                    a8:2e:52:8f:19:03:f7:23:c3:be:e5:36:ea:f0:df:
                    8d:83:61:87:2e:b4:34:85:0f:3e:2e:b7:8e:d7:c4:
                    ec:7a:f4:d2:d7:60:99:16:d8:9f:f8:e8:7a:89:e9:
                    be:d4:0d:65:c7:07:7c:a4:3b:ca:88:6e:30:0b:90:
                    e4:ea:8a:ef:8a:ad:1c:25:b9:9f:f6:87:f4:e9:ae:
                    23:10:41:79:f5:8d:01:2a:d1:86:9b:17:6f:d6:10:
                    37:22:fa:8a:87:cb:db:a9:13:87:f1:2a:df:4b:60:
                    84:d3:c8:71:62:c2:79:f5:20:c1:b9:c5:ce:ea:46:
                    7f:37:47:e2:2f:97:e2:9b:3e:9e:41:f7:9b:9e:11:
                    2f:df:f2:84:ee:8d:49:a5:3f:ee:04:97:fb:e8:6b:
                    f9:84:10:65:a0:4e:ed:83:e0:1a:a0:58:bf:eb:f4:
                    62:52:34:27:82:45:f4:92:d3:02:c7:d5:69:1f:be:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:FB:71:86:3D:4E:5A:91:64:9D:AE:75:00:C9:A7:4C:CD:57:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:f0:1b:78:d3:d8:27:95:7e:a9:32:9e:54:90:63:3a:ec:
         c9:4e:bb:80:96:67:33:7d:75:f7:3c:b9:f3:50:19:e2:53:4a:
         7a:e2:1b:0d:41:28:9b:86:a5:0a:4b:0e:1b:42:41:38:6c:76:
         8e:51:e0:6f:ee:0e:6d:f0:e2:49:f9:7e:5f:9e:49:78:50:d0:
         b0:e6:40:66:01:09:6f:48:0d:09:7d:02:4f:da:45:11:69:68:
         dd:c6:9c:5f:8a:a3:79:83:48:09:2e:61:4c:26:df:ab:55:b8:
         e0:b6:88:2f:de:f8:14:f9:4b:4e:f2:f0:e3:9d:ee:77:cb:8b:
         2f:8f:eb:4f:c4:df:1e:48:3f:a1:4f:ad:c1:84:f1:c8:61:5d:
         9e:ac:00:dd:ee:9d:3a:3c:c4:0e:73:0c:94:3a:17:b5:76:85:
         fa:ee:f2:25:21:84:3b:a7:4d:61:8e:a9:78:d1:24:dc:b0:a4:
         e5:28:4b:d3:db:34:dc:56:ef:af:c4:67:82:54:b8:0a:a3:8f:
         9d:2e:1b:1c:e3:1e:69:b2:d5:37:c7:6f:b5:b1:60:51:23:bb:
         57:42:df:3e:10:c4:d1:34:53:76:53:a8:72:ff:ca:2b:c1:cf:
         39:2b:a2:53:81:36:ab:78:fc:c0:fc:f9:38:57:80:91:73:4d:
         64:4e:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:03 2026 by rpki-client