Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa
File:                     9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa (raw, json)
Hash identifier:          v64ZpvQoyIt+xDM3SLfdGMSrFkJ+OuF33BCPRmViFgM=
Subject key identifier:   9E:4A:72:AD:24:96:8B:4A:8F:45:89:BE:41:6D:BD:9D:8A:F7:FC:FE
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F4328584DFBD5EF51A360AA4F31BEDB04
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     16652
IP address blocks:        204.13.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ef:51:a3:60:aa:4f:31:be:db:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=ba7b72c6-6837-487c-a9bb-6554d2f00f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:67:19:e6:3e:3a:ba:b9:dd:0d:1c:39:82:
                    28:b1:b6:1a:86:34:dd:3a:12:39:1e:19:cb:e8:7d:
                    0b:8a:38:f5:8e:64:8c:38:3c:91:97:18:5d:5d:08:
                    d1:aa:2c:ae:53:e8:35:87:7a:17:b8:13:f0:09:ca:
                    07:e7:74:e4:32:a9:ec:a8:ef:2a:37:e9:ec:4a:93:
                    31:14:05:88:22:b5:56:0e:4a:c2:00:7a:86:8e:f4:
                    38:af:0e:11:ea:93:7a:82:fb:75:52:fc:21:8d:42:
                    84:31:a5:50:8e:22:19:71:c7:1c:fc:33:6d:32:93:
                    1a:ae:9f:da:60:27:85:12:8b:1e:a2:8e:8b:e0:60:
                    a9:6a:11:d6:f4:12:09:60:c9:4c:bb:f5:88:8e:d5:
                    52:4a:a5:29:bc:19:03:bf:d4:2d:5e:6c:fb:3c:c3:
                    22:39:37:e1:5b:d3:b1:7d:e9:69:39:81:2b:bc:e8:
                    47:0f:ca:c1:51:79:63:0f:05:c5:ea:98:13:fe:cb:
                    a8:c1:02:9e:3a:0e:da:7c:ff:23:9f:16:0a:47:24:
                    42:47:9d:26:9b:6a:ea:82:3b:40:98:74:74:75:b4:
                    5f:eb:a8:a1:10:f7:39:65:b2:2f:4f:09:00:59:f9:
                    22:51:e6:9a:5f:bc:97:dd:8b:cb:24:b5:08:c2:6d:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:72:AD:24:96:8B:4A:8F:45:89:BE:41:6D:BD:9D:8A:F7:FC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/9d5dbb0c-a1c8-30d6-8011-fd4d397ee047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:78:eb:4b:47:4c:b0:6a:90:96:2d:47:2e:33:6c:08:c3:1a:
         ae:9a:c2:53:9d:2f:82:c8:2f:f2:d5:c9:29:c9:bd:c4:21:b6:
         32:e6:5c:75:80:f7:d5:b1:8c:2c:93:51:f6:0d:65:05:97:58:
         10:9b:fc:98:92:c3:2d:9d:e0:86:e7:03:53:5e:50:ed:69:75:
         24:d4:63:2e:8f:2c:b8:f0:81:b3:fb:e5:0a:a1:55:0f:cc:80:
         2d:a0:66:55:89:64:a9:92:ff:d2:f4:26:68:ce:4d:5e:be:a1:
         7b:91:77:46:ab:5a:3e:09:39:9e:cb:01:e9:b7:8e:84:33:42:
         47:03:85:19:e3:a7:24:d8:e1:aa:2f:dd:9d:f8:0b:1d:8d:22:
         81:2f:74:3e:63:f5:7e:0e:6e:ff:98:cd:0c:cf:8f:eb:09:f5:
         00:e7:6e:41:ce:f2:06:83:91:7f:73:7f:4a:72:59:63:2b:24:
         5d:e9:af:ce:fa:00:d4:f3:4a:e9:25:6b:4f:a9:1d:78:69:7b:
         87:e4:0c:2a:8c:0b:29:76:f5:28:86:64:3f:2f:81:a6:6c:8a:
         a9:71:f3:f4:83:71:f4:31:58:e5:ca:13:6b:de:fa:11:91:34:
         3f:db:91:8f:57:af:4a:a3:19:2d:0a:6d:07:1c:22:1b:f7:71:
         52:0f:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:06:15 2026 by rpki-client