Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c316ea5b-b185-35ec-8a16-3781959cb79c.roa
File:                     c316ea5b-b185-35ec-8a16-3781959cb79c.roa (raw, json)
Hash identifier:          rNmwsTOraovsVPhjTHUj42/hmjQiMtkX74JyvpibGfk=
Subject key identifier:   55:2A:E7:B6:69:2E:E6:60:2E:8B:DB:AC:26:E0:5E:3F:C1:9E:CE:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85FEFC29102410EE752B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c316ea5b-b185-35ec-8a16-3781959cb79c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     212465
IP address blocks:        184.120.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:fe:fc:29:10:24:10:ee:75:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=87ff9183-9951-42a4-9fc1-040dfe54fe94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:6c:63:9c:f5:5d:77:7e:8d:eb:fe:2c:ac:
                    4b:58:dd:dc:89:a4:5c:5e:60:12:16:6a:6d:4e:0e:
                    dd:cf:72:f1:25:e6:12:45:ea:fb:cc:ec:55:b6:f4:
                    79:c2:12:6a:23:01:5b:e2:0f:ec:35:54:9f:b1:d2:
                    e1:87:4f:98:7b:a8:22:0c:35:2a:5b:fc:fb:bb:91:
                    2d:2c:bc:17:18:57:e9:f3:b5:78:43:fe:17:0b:92:
                    fe:cb:0f:23:9b:53:35:b3:e7:6d:e4:8e:ca:62:60:
                    7e:f7:e8:7d:03:10:25:fd:50:6e:cf:d8:61:21:97:
                    00:09:6f:1d:03:6e:27:82:96:08:ae:89:66:ec:84:
                    eb:91:ea:ed:b4:c4:4c:6d:ce:d0:ea:9a:8c:7b:5e:
                    d1:e3:e0:52:67:86:98:7a:fb:f8:67:31:af:e5:1a:
                    96:84:d9:a9:66:20:9e:f5:99:d1:1a:23:b0:1e:09:
                    c5:08:e9:97:c5:73:5f:9d:4d:fe:40:66:62:31:ee:
                    f2:ab:a6:57:13:68:ea:5e:e0:70:7b:5a:fc:7f:96:
                    d6:97:40:2f:47:c9:b5:93:18:4a:23:a9:57:0a:f6:
                    ad:f9:d3:00:54:42:6d:e5:33:1a:90:99:53:96:d9:
                    08:e5:70:d4:d9:db:7b:79:56:81:c9:e0:02:e4:94:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:E7:B6:69:2E:E6:60:2E:8B:DB:AC:26:E0:5E:3F:C1:9E:CE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c316ea5b-b185-35ec-8a16-3781959cb79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.120.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:13:ba:8b:c4:e6:e5:72:92:7a:e4:ab:6a:a7:31:47:6a:
         ba:ae:38:9a:2d:60:f9:d6:cb:7d:2d:04:e8:ef:c5:d6:81:5f:
         eb:a9:8c:90:0e:0b:5d:22:2e:11:73:d3:88:cd:58:fe:f3:b6:
         e3:0f:63:6c:ef:e0:93:70:9a:14:e3:db:22:e0:60:af:93:dc:
         81:34:43:e2:d0:34:ed:dd:33:73:70:0e:28:8e:8f:5c:ca:96:
         ed:4f:36:85:c0:ac:d0:3d:1f:bf:81:ed:c0:46:19:b2:44:57:
         dc:1b:e7:20:f7:03:23:bc:13:1a:e6:79:fe:fa:6a:fa:77:33:
         27:1e:d1:4b:9d:4d:87:f3:3e:b0:5d:61:f8:c6:ee:87:76:12:
         83:b0:88:48:4d:18:69:99:da:1e:58:fa:4f:22:08:24:86:ae:
         b0:07:27:75:07:35:b3:2a:a8:4e:cd:9e:31:b3:a4:b1:67:26:
         5b:97:35:21:ee:58:10:c6:11:0d:02:10:ac:47:61:51:d7:58:
         88:7e:25:36:6d:5b:f4:ca:88:93:d0:ec:b1:e3:ae:87:fc:3a:
         68:d0:4a:d8:24:06:d9:55:46:41:0d:50:0b:0f:25:de:1c:b1:
         4d:db:e7:9b:8f:54:8a:7e:8c:16:be:73:6f:5a:a5:45:a4:f7:
         75:84:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:00:29 2026 by rpki-client