Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd77e964-ba3e-384b-b9cf-3eafe36a91de.roa
File:                     fd77e964-ba3e-384b-b9cf-3eafe36a91de.roa (raw, json)
Hash identifier:          tEYjVEKsD4Gyp6LGZ3MELN4/f8HMHDv0xui28s8quKE=
Subject key identifier:   31:0C:65:95:D6:E0:B2:5E:6B:CB:96:01:C3:06:4A:E7:B6:32:EB:D1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D83F4209897C742AB39042800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd77e964-ba3e-384b-b9cf-3eafe36a91de.roa
Signing time:             Wed 15 Apr 2026 14:24:21 +0000
ROA not before:           Wed 15 Apr 2026 14:24:21 +0000
ROA not after:            Tue 14 Jul 2026 14:24:21 +0000
asID:                     198250
IP address blocks:        69.33.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:f4:20:98:97:c7:42:ab:39:04:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 15 14:24:21 2026 GMT
            Not After : Jul 14 14:24:21 2026 GMT
        Subject: CN=1b1e8d17-edfa-46b0-a154-d0cbfd9b81d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:f0:73:66:56:cc:24:97:9a:23:58:9a:13:
                    9a:32:02:4b:7a:b0:ac:5c:d2:db:09:a0:e7:54:83:
                    e9:1f:54:c4:fa:bc:ff:bc:87:2d:16:3d:5f:2f:0d:
                    f0:6b:03:ae:5b:50:a5:31:c8:e2:d1:f5:fa:0c:64:
                    83:02:15:8a:00:8d:06:a4:32:42:c8:48:b0:dc:08:
                    92:9f:5b:89:2c:ad:76:fa:d4:2d:b8:e4:7c:fc:f3:
                    f6:0e:67:0f:c5:92:ed:85:e7:36:a3:54:52:54:5d:
                    4d:0d:ca:68:46:01:05:08:1e:fa:a9:c1:53:69:e9:
                    7b:c8:cd:6e:aa:e7:1f:63:44:4e:53:a4:1b:0e:88:
                    d0:9b:20:a7:c6:82:17:eb:3c:61:e6:66:23:1f:07:
                    1a:2c:aa:f4:87:c8:30:48:c4:aa:2b:5d:a8:6d:7f:
                    65:4d:4e:fe:e5:66:91:1a:2e:45:b1:82:4b:a2:d4:
                    f1:5c:fb:3e:93:9e:33:f3:23:fc:6d:4b:76:b9:fc:
                    e8:ac:b7:74:bb:34:80:f9:b4:a5:cb:e3:de:04:91:
                    bd:e0:2b:d9:a3:7f:3c:0b:be:75:75:12:3c:a3:72:
                    ba:c3:88:21:0d:98:27:df:cb:ab:c0:ae:7d:3c:f3:
                    a3:4b:e0:df:14:36:2a:73:76:b7:86:34:22:90:54:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0C:65:95:D6:E0:B2:5E:6B:CB:96:01:C3:06:4A:E7:B6:32:EB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd77e964-ba3e-384b-b9cf-3eafe36a91de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:f9:f5:0d:25:51:6a:b2:04:67:1e:b3:8d:82:0c:fa:f4:7f:
         d9:31:36:e0:78:cb:2d:48:ff:ba:89:58:4c:e0:ee:d4:c5:bb:
         41:c2:ed:ed:c2:f5:30:69:f9:68:47:d8:03:a6:56:77:b9:e6:
         bd:0b:96:d2:ec:8e:15:b4:2c:ef:aa:b5:6e:c2:7a:17:e9:f1:
         45:3f:ba:73:af:29:7d:95:c7:ee:fa:e9:74:17:f5:7a:56:f0:
         4a:b0:aa:38:95:39:ca:a5:df:45:80:4e:61:36:7e:79:fe:b2:
         f9:0b:5f:92:4b:0a:d6:63:95:b5:66:20:58:00:29:d1:b9:7d:
         e9:0b:ba:81:89:fd:e2:6d:b0:e6:83:f1:4a:93:31:b9:22:55:
         95:a5:25:0f:4f:20:d6:ce:a6:91:3a:ab:84:a6:c0:71:03:98:
         97:58:78:3a:f2:40:51:f0:d9:f4:f3:43:9d:dd:53:38:5a:4e:
         00:90:da:bb:82:70:b9:c6:5d:fa:02:b5:25:0d:11:43:4e:e6:
         60:a3:0b:eb:6e:3f:6f:c3:59:cf:37:6b:2b:22:99:18:25:74:
         98:0f:62:e0:4b:1d:93:e3:b9:f9:73:fd:70:9e:fc:67:d1:31:
         b0:b2:36:42:55:37:4d:ac:7c:73:45:fd:80:5f:26:a3:7e:55:
         93:e5:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:11 2026 by rpki-client