Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
File:                     5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa (raw, json)
Hash identifier:          1ftqLCcZxrGbhpA0VXiHFXxTKxah886+qUXI0EyHPMA=
Subject key identifier:   5D:EE:A9:E8:EC:1F:7D:FC:99:AC:74:82:9C:A9:57:1C:E4:06:F9:D3
Certificate issuer:       /CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
Certificate serial:       010D0C9F4328584D55BA4A5A3A681D8FC7375340
Authority key identifier: 27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     396317
IP address blocks:        104.193.40.0/22 maxlen: 22
                          104.193.40.0/24 maxlen: 24
                          104.193.40.0/27 maxlen: 27
                          104.193.40.32/27 maxlen: 27
                          104.193.40.64/27 maxlen: 27
                          104.193.40.96/27 maxlen: 27
                          104.193.40.128/27 maxlen: 27
                          104.193.40.160/27 maxlen: 27
                          104.193.40.192/27 maxlen: 27
                          104.193.40.224/27 maxlen: 27
                          104.193.41.0/24 maxlen: 27
                          104.193.42.0/23 maxlen: 23
                          172.110.136.0/22 maxlen: 22
                          2605:3c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4a:5a:3a:68:1d:8f:c7:37:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0125580-9deb-4d15-b1e7-1a6f7958b187
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=64bd6fd1-a701-4d3e-90fc-d2c4e6f404a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:c7:1a:c2:20:de:56:7e:64:14:d7:26:e8:
                    58:83:b5:78:7b:66:f6:20:39:97:90:0c:5a:23:de:
                    87:d5:41:ff:ac:a5:63:fe:f5:b9:8e:5e:71:7e:0e:
                    53:41:7b:61:8c:ed:b9:71:30:f7:ab:9f:57:f6:ea:
                    4b:54:94:ff:52:d9:ed:10:bf:3d:ec:34:f9:f1:92:
                    f9:b9:85:96:83:1e:b1:94:25:26:ad:13:27:b0:38:
                    39:f3:5e:85:54:56:f7:8b:b0:97:3a:e1:97:53:ac:
                    05:ae:d5:5f:ed:4e:4f:80:75:f5:6b:3a:20:5b:7f:
                    e3:3e:54:78:8d:7f:52:ad:40:78:60:03:d7:a3:fc:
                    8d:0e:42:36:3d:9c:7c:79:7f:b6:9e:e2:69:22:05:
                    2e:f3:e4:41:8f:d1:97:63:59:a6:a5:9a:4f:02:93:
                    60:2e:bb:e0:a4:82:32:b9:9f:42:64:f8:ac:90:c0:
                    77:3a:92:19:28:aa:5a:a7:54:3a:e8:81:35:3c:d2:
                    c7:49:9c:cc:a8:02:c6:4a:80:7b:9d:6a:c9:fa:9f:
                    9d:b0:ef:4c:76:3a:eb:03:2a:45:a8:eb:32:2d:cd:
                    ce:3d:fe:a6:00:f7:4e:56:6f:54:69:5c:94:8f:52:
                    15:d3:30:d5:72:31:c7:a0:cf:25:4b:8b:fa:77:23:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EE:A9:E8:EC:1F:7D:FC:99:AC:74:82:9C:A9:57:1C:E4:06:F9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/5b3c4409-9420-31b9-9382-a403ca3ecdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187/d0125580-9deb-4d15-b1e7-1a6f7958b187.crl

            X509v3 Authority Key Identifier:
                keyid:27:1E:F7:AC:7E:4E:7A:FE:50:4B:09:66:D3:CC:F4:B5:E6:48:A9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d0125580-9deb-4d15-b1e7-1a6f7958b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.40.0/22
                  172.110.136.0/22
                IPv6:
                  2605:3c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:2c:22:54:88:fe:12:ed:4a:27:8b:06:4f:30:a3:8d:db:
         3a:e8:34:8f:fc:c6:d5:2b:7f:d6:7d:33:dc:84:e5:70:56:3f:
         5a:bd:46:5b:21:0a:bd:49:bb:fd:82:26:b8:74:be:fe:d4:64:
         dd:58:38:59:f8:bf:14:5a:4a:a5:1f:77:d2:d0:f0:31:8c:4a:
         bc:ad:d8:2d:d9:d2:5e:7c:de:7b:e7:7d:cd:b4:9f:60:f3:23:
         dc:9a:00:65:3e:48:b0:3e:bb:08:a2:87:01:32:9a:e6:b3:66:
         f4:e0:54:1f:21:94:ff:e1:1d:32:ec:30:9a:a9:98:e4:43:23:
         b1:bb:e8:a1:50:0b:56:6e:16:12:a3:f1:41:87:dd:bd:b5:44:
         ab:81:19:91:48:2f:90:5b:98:03:54:6b:0b:34:6b:9f:74:ec:
         34:2c:71:15:41:ea:e1:db:1e:df:44:02:d2:0b:56:ec:73:5a:
         68:24:3f:58:7e:94:81:31:ff:27:bb:23:87:72:4f:00:0e:89:
         67:60:44:e8:6c:56:b6:30:72:e8:96:72:c2:ba:5b:69:e5:9f:
         de:e2:43:95:47:ed:c4:25:ea:65:26:ea:e3:c2:c3:ca:0c:a9:
         20:69:3b:c2:5c:0d:05:bd:8b:6b:4e:71:97:87:4d:f4:73:7e:
         88:5f:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:00:08 2026 by rpki-client