Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
File:                     0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa (raw, json)
Hash identifier:          +KeJU0gSYFI4l8j9fluVSw0vTQWEeZT/TEg1K87SXyg=
Subject key identifier:   ED:F7:3C:3B:CF:B0:74:81:5C:8B:71:88:3B:6D:02:91:2E:22:7C:EB
Certificate issuer:       /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial:       010D0C9F4328584DA3E5634668585BB7A13D2040
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     46692
IP address blocks:        184.94.224.0/20 maxlen: 24
                          192.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:63:46:68:58:5b:b7:a1:3d:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=5a8eff81-4f92-40d4-b4c0-5bd0fc2a098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:2a:3c:54:56:70:a1:ff:34:96:e4:ed:94:
                    57:05:08:e1:ba:7e:b0:a1:ab:f4:12:88:b3:1b:5f:
                    01:9d:79:5d:6f:e1:c3:de:27:30:e7:7f:c8:4b:bd:
                    88:fa:be:ed:40:52:40:44:b4:1d:fb:f6:75:e3:3d:
                    99:83:98:f5:02:cd:9c:72:ee:5b:08:73:a1:25:c3:
                    20:81:e8:00:1c:86:d9:37:a0:69:b1:c9:62:e6:01:
                    ff:78:d0:3f:bb:0c:b9:8e:f7:5f:b8:35:73:d0:5c:
                    87:13:c2:6b:04:5c:cf:9f:38:a3:ab:8f:6e:7d:7b:
                    67:d0:67:e4:c9:a7:3e:f8:4b:62:1f:ef:6a:f2:75:
                    c0:8b:e5:b8:7f:d3:2c:1c:11:52:d2:b5:5f:08:44:
                    59:44:53:4f:c9:49:f6:cb:ea:72:de:a8:34:f2:69:
                    70:f1:07:e2:ee:2c:b1:a5:c9:7a:96:be:a3:fa:9c:
                    0b:bd:f7:50:63:59:b1:6b:41:db:ca:e8:da:1a:0d:
                    dc:37:aa:3c:15:93:8c:99:1c:07:14:88:b2:ae:1f:
                    db:89:06:fc:e2:65:45:42:07:25:8e:5d:7f:a7:80:
                    aa:32:0d:e6:87:d6:3d:46:76:ac:de:d3:1c:fb:58:
                    83:f8:3b:5b:d4:c9:44:14:65:45:68:5f:3d:99:36:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F7:3C:3B:CF:B0:74:81:5C:8B:71:88:3B:6D:02:91:2E:22:7C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.224.0/20
                  192.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:81:8d:1e:33:33:23:94:af:58:6d:b4:bd:11:c9:72:91:
         75:a1:1f:97:a9:09:0c:58:4c:87:f5:79:4e:e6:76:5a:4c:b0:
         9b:eb:0c:32:60:fa:de:1c:30:db:1a:2f:11:a5:20:72:c2:cd:
         1a:12:5a:f0:26:11:c1:e9:b7:cb:db:b5:26:4a:fa:18:da:a4:
         21:2d:59:5d:26:54:1b:8c:ba:02:f9:42:04:2d:bc:3a:f4:3a:
         e9:e9:64:27:8e:96:c7:a2:fe:49:24:2e:1d:0b:09:24:b2:13:
         b8:c2:87:26:db:e4:b9:51:cc:13:56:69:96:39:6b:72:30:55:
         35:ba:e2:8d:d0:a6:ef:f1:b2:44:99:45:54:28:b1:9c:1a:98:
         c1:57:5b:c5:7f:cb:87:ef:5b:18:5d:08:f8:e2:f2:1c:c8:1a:
         c6:56:41:74:5f:7d:41:19:b9:f7:67:43:cf:da:51:88:86:b5:
         39:0a:1e:77:42:8b:ee:4c:2a:b4:78:f3:19:a9:d6:21:8e:95:
         13:e7:27:d9:34:4a:d4:33:26:0e:e1:dc:a4:8b:e1:74:71:66:
         1a:6c:37:15:95:86:4f:e6:3e:51:9e:d7:21:bd:30:e3:26:89:
         9d:9d:b6:45:fe:d0:3e:6b:e7:bf:12:13:80:28:46:ac:20:50:
         01:42:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:36:19 2026 by rpki-client