Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/61941345-8c0e-3a88-aade-c91adeccd0dd.roa
File:                     61941345-8c0e-3a88-aade-c91adeccd0dd.roa (raw, json)
Hash identifier:          VtO2sNGg436q3b4ZB03ksDk/RmQMSrd5zuALgXIp+bo=
Subject key identifier:   8E:0F:F1:C3:6D:C8:91:8B:AE:00:B5:16:9C:AB:F7:5E:BB:1C:75:3D
Certificate issuer:       /CN=8866ed50-4fe4-4558-8cfc-b417bf2032f4
Certificate serial:       010D0C9F4328584D571FC1F20D592B1FA04B1980
Authority key identifier: 74:2A:E0:07:F3:8E:E4:7A:BE:7F:8B:F9:8D:9A:EF:2F:BF:20:F3:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/61941345-8c0e-3a88-aade-c91adeccd0dd.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     5769
IP address blocks:        204.19.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/8866ed50-4fe4-4558-8cfc-b417bf2032f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/8866ed50-4fe4-4558-8cfc-b417bf2032f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:c1:f2:0d:59:2b:1f:a0:4b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8866ed50-4fe4-4558-8cfc-b417bf2032f4
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=cc51f6b6-3ae3-4663-956d-4982a9795977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:b3:b3:6d:b7:82:b8:97:f6:1b:1a:d1:02:
                    ef:ae:83:40:ad:cf:ac:1b:1b:9e:b3:0a:e4:9f:9d:
                    e8:71:be:2e:06:38:38:04:3b:ba:7c:ce:5d:2c:8d:
                    e3:12:e1:d6:6e:af:ff:55:c9:36:26:ea:58:00:a6:
                    01:77:b2:3b:ca:a1:69:c2:3c:28:7b:85:87:8c:81:
                    7f:ce:1d:3d:19:0b:5d:d0:b8:ea:60:d7:86:17:bd:
                    cb:94:58:7b:83:cf:81:29:15:c1:13:16:ec:5f:41:
                    95:22:ee:5f:1a:92:b3:e4:ca:f9:59:41:71:90:4d:
                    12:de:bf:ce:fc:d2:49:b7:ba:a3:d6:fd:d3:b5:88:
                    02:97:8b:b2:08:90:a4:65:43:57:2c:35:78:84:3c:
                    a6:5f:1c:f0:85:f9:2d:17:52:1b:1a:d8:89:6a:b3:
                    fd:0d:72:91:67:65:c2:91:db:1b:f7:11:ae:7b:3e:
                    d6:7c:c0:45:08:5d:57:96:6f:40:02:e7:ae:80:39:
                    96:48:18:8e:2c:4c:52:4b:eb:69:d2:c5:d0:17:2c:
                    1d:f7:71:80:0d:8b:ce:6c:ba:c2:09:a2:bb:2c:f7:
                    49:05:dd:ca:f3:20:c4:56:1b:a7:02:da:ea:31:93:
                    8c:fa:ad:1f:ce:2b:93:fe:47:59:e8:77:d2:fe:3d:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:F1:C3:6D:C8:91:8B:AE:00:B5:16:9C:AB:F7:5E:BB:1C:75:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/61941345-8c0e-3a88-aade-c91adeccd0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/8866ed50-4fe4-4558-8cfc-b417bf2032f4.crl

            X509v3 Authority Key Identifier:
                keyid:74:2A:E0:07:F3:8E:E4:7A:BE:7F:8B:F9:8D:9A:EF:2F:BF:20:F3:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:9b:f4:23:a7:8d:8b:4c:4e:16:4e:34:8b:19:e6:04:a7:
         0b:77:69:29:0e:64:e5:83:6f:a5:e0:5b:5d:cc:58:d1:f6:8f:
         58:09:5e:81:f8:d7:57:04:a1:05:ec:6a:4e:f5:3e:f6:40:0d:
         87:32:af:6d:a9:5c:74:53:12:a2:3a:c4:ab:a7:3d:ba:60:b9:
         24:3e:4c:a6:bb:e7:e6:8d:60:80:4b:ff:b9:20:27:fa:f5:3e:
         1c:12:34:6f:d6:44:39:69:8c:67:13:45:a8:21:6f:5f:45:7d:
         d6:c4:de:7a:83:7f:bb:90:a2:dd:a2:1c:55:a6:ca:2a:d5:93:
         8b:64:98:bd:66:bc:b3:a7:d4:65:1b:cf:a8:88:93:fe:ab:18:
         8c:df:9c:db:f8:34:08:49:bd:db:61:9c:ca:30:e5:99:c1:c4:
         d2:b7:a9:53:d6:ce:e0:be:d3:25:b3:1c:f7:0d:11:27:33:07:
         4f:7c:1f:27:7b:34:c9:d6:f0:25:8a:86:e5:a0:bb:41:a6:df:
         59:03:4b:78:d6:a7:47:14:85:27:56:2d:70:36:e1:78:0c:18:
         e1:ad:d0:9e:70:2b:ef:f7:a9:32:94:bc:5b:ba:45:4b:72:8a:
         0a:4e:4b:f8:f4:fc:b7:21:e0:02:db:b3:a6:74:58:58:83:c2:
         46:4a:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:56:11 2026 by rpki-client