Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d30d2b49-79a2-3d2d-b5a0-c15d0522d20a.roa
File:                     d30d2b49-79a2-3d2d-b5a0-c15d0522d20a.roa (raw, json)
Hash identifier:          3Yrg7nq/y+bYl6Ji0QpbwkgLut2xYqHN9/Tq+AxCLdY=
Subject key identifier:   76:5A:80:43:47:DF:71:20:72:15:4B:86:AB:8A:2A:2F:9F:55:B0:2C
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584E36019149E4AC6921A83D20C0
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d30d2b49-79a2-3d2d-b5a0-c15d0522d20a.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     14114
IP address blocks:        169.145.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:91:49:e4:ac:69:21:a8:3d:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=aecc5e75-eeb0-414a-bf78-387b22ee8d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:7a:fa:04:b8:09:0d:0c:81:32:62:14:bb:
                    ca:8c:a4:98:97:1d:6f:83:2b:10:15:a7:65:ab:c4:
                    20:0d:ab:d7:4e:24:1f:3f:92:ba:32:1a:60:d4:f3:
                    7d:0c:9e:ec:36:f0:41:b4:80:f3:d3:d0:c3:c5:bb:
                    9c:53:3b:38:6f:5b:a2:67:2f:30:83:67:a0:af:4f:
                    35:f0:8a:b6:63:1f:56:ad:93:e9:a9:5f:00:f1:f9:
                    f2:e3:8d:a2:87:1d:ab:86:e4:0e:2f:52:e9:d6:2b:
                    24:14:13:75:18:0e:86:69:26:b1:ee:ab:6c:6d:f9:
                    c0:87:82:d1:89:68:37:ac:f4:ba:d2:14:71:37:60:
                    f0:76:f1:7f:a8:d9:95:99:8f:13:07:a3:0b:3b:73:
                    98:27:82:d7:ed:0d:85:ef:b2:c3:13:5b:29:8f:5e:
                    d7:2a:1d:75:8f:65:14:6a:c9:ba:91:43:b4:18:6d:
                    f8:c0:a5:85:9a:1d:1b:11:51:bc:2e:91:55:d2:82:
                    52:4c:db:43:28:9a:35:f6:a6:df:e0:4a:f7:fe:60:
                    bb:8e:88:b3:2d:a6:38:68:d4:6a:b2:07:e4:ef:57:
                    c1:59:79:e1:bc:8a:89:59:f8:a0:c7:37:e1:e4:b6:
                    75:89:26:fe:14:91:79:c6:9f:f0:fd:d5:bf:5a:a7:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:80:43:47:DF:71:20:72:15:4B:86:AB:8A:2A:2F:9F:55:B0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d30d2b49-79a2-3d2d-b5a0-c15d0522d20a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:f8:4c:b3:b5:42:1b:f5:48:cb:6e:ea:e6:af:ad:1d:ce:
         e2:eb:e0:d6:69:be:e4:09:31:4f:86:b6:4c:00:ca:f0:db:15:
         02:8d:72:5b:1a:19:f9:2d:20:72:1b:af:79:cc:cc:18:79:52:
         40:cc:09:30:b1:e5:2f:6e:45:09:8d:70:e9:f0:9d:7c:16:9c:
         ca:41:6f:2a:33:4b:09:77:38:24:26:1b:b6:9d:22:b3:0a:e0:
         d2:b9:83:75:6a:2c:54:33:38:e7:55:a8:c0:a4:ba:64:95:cb:
         28:da:13:20:0a:6b:9a:99:ba:4d:44:cd:b4:0b:83:fc:ed:f5:
         e9:d9:2b:e8:d0:22:d1:98:ae:ba:fc:78:88:f0:db:fd:c2:2c:
         1a:14:0e:79:ac:91:30:38:1a:fc:f3:b9:c6:86:bd:4a:f1:ae:
         19:5f:f9:95:3d:a3:bc:15:4c:0f:64:9a:08:14:21:3a:0e:00:
         71:56:40:eb:66:43:03:a1:8b:dd:c9:f4:86:88:78:65:04:4f:
         fb:e4:aa:a2:d4:b4:04:58:d1:79:be:aa:70:83:99:28:49:a9:
         5e:f5:8b:ab:07:7e:fa:28:8e:b7:b9:33:d7:86:5a:cc:c8:76:
         39:44:20:f5:c1:d9:63:2a:59:fc:64:f1:5f:ed:4e:1b:78:75:
         43:b4:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:20:50 2026 by rpki-client