Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/d18537b7-b9ef-33a6-9c47-ee38fcd9cf57.roa
File:                     d18537b7-b9ef-33a6-9c47-ee38fcd9cf57.roa (raw, json)
Hash identifier:          UsNmsksis3rQAIBGmKdPStBYi/su6YuLCSHMstw+8Aw=
Subject key identifier:   5D:2A:D4:5B:D0:94:C9:AC:96:09:28:70:1B:C3:C8:27:96:09:FB:C1
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584D9FB57040E5C5AD526375F380
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/d18537b7-b9ef-33a6-9c47-ee38fcd9cf57.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     23118
IP address blocks:        69.36.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:70:40:e5:c5:ad:52:63:75:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=cb7500db-4559-4f4c-b529-edf5e5ccc3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:9f:ec:2e:59:4c:b2:cb:ad:d1:dd:87:2b:
                    5e:f6:6a:3e:20:8d:99:ec:0b:db:23:45:7f:3f:de:
                    db:39:84:4c:88:22:63:eb:ab:21:04:0f:b3:ef:b2:
                    3c:f0:8f:d6:ba:c4:e8:8e:a7:47:07:f6:5c:a4:af:
                    27:cb:1a:e1:42:bf:c0:03:3e:a4:2c:31:17:10:08:
                    55:85:a9:4f:69:58:33:d3:a4:e9:97:74:21:79:d4:
                    95:6a:69:30:14:8c:4d:a9:1f:14:32:a0:a1:c0:d1:
                    87:dd:23:de:92:cd:57:43:0a:3f:45:7c:ee:17:70:
                    06:f5:59:81:67:06:c4:ba:cf:40:b6:3c:b1:2c:c7:
                    79:9c:f1:b7:19:90:3c:84:f2:52:bf:6a:d6:79:42:
                    88:68:c9:e6:85:7a:75:87:b6:5b:2c:b2:29:a2:e7:
                    f6:60:f5:c8:1a:b2:a4:a3:ae:dd:00:7c:c8:1d:59:
                    3d:77:ce:a0:69:16:50:39:62:b7:4d:f0:c5:0a:61:
                    98:d1:9c:d6:47:df:a5:cd:65:55:c1:5a:80:8a:74:
                    33:68:60:5b:1e:1b:df:cd:ed:b9:51:35:27:b5:85:
                    88:0f:f4:84:01:57:2b:bd:92:ab:fe:21:32:f2:7b:
                    db:d4:18:dd:de:3a:ad:04:2b:dc:f8:a0:46:e9:c5:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:D4:5B:D0:94:C9:AC:96:09:28:70:1B:C3:C8:27:96:09:FB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/d18537b7-b9ef-33a6-9c47-ee38fcd9cf57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f8:81:30:fd:ac:b7:c4:0b:e3:44:3f:9a:c5:5f:d7:86:98:
         48:b8:4b:57:80:95:c0:55:d0:37:8b:4a:e6:23:f8:6a:0c:57:
         b6:9b:fa:c1:8f:ea:e8:3a:b4:4d:48:17:b8:a5:83:56:07:85:
         d5:21:63:15:6d:d2:74:f4:0c:17:5c:e8:77:5b:68:46:4d:e5:
         3e:2c:2e:9f:00:1f:40:8a:b2:84:b8:21:91:22:79:37:f2:ef:
         4b:5d:79:f9:d9:dc:41:f9:b0:24:e7:f5:89:87:3d:be:a3:ff:
         f4:29:63:79:ff:31:c6:e5:79:cc:49:9f:fa:e8:6f:fc:a4:c2:
         94:c8:50:ba:5b:cf:1a:3c:1a:2b:be:37:ed:59:5a:ec:3e:e3:
         5a:68:1b:f6:2e:1f:c7:6c:01:70:80:89:f2:74:6c:ed:68:a0:
         5d:84:61:e7:1e:4a:9d:e1:30:df:99:a5:c5:76:ab:d9:71:67:
         2c:b1:d3:80:49:81:e2:9d:71:f0:f2:d0:5b:52:dd:ba:c5:dd:
         87:92:ec:d6:fa:d5:b8:56:ba:b7:70:64:ca:6b:e5:29:07:f1:
         89:61:d5:96:d1:df:4d:95:e6:50:c6:74:94:44:c4:7d:0f:01:
         92:f0:ce:2e:db:da:63:4e:a1:ae:8d:c7:db:be:1b:80:3d:e0:
         c3:7f:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:09 2026 by rpki-client