Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/643dfa49-024d-395c-81c2-3eac22fb3f6b.roa
File:                     643dfa49-024d-395c-81c2-3eac22fb3f6b.roa (raw, json)
Hash identifier:          9rPzJ1JG6YpeookvvKK/9OuM0CXHEbFZ4Ox/gQ3NDS0=
Subject key identifier:   74:59:CF:22:F5:F5:DD:27:BD:A1:52:16:D5:CC:7F:34:8C:53:DF:69
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584D94895911A4584A6B1BF37180
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/643dfa49-024d-395c-81c2-3eac22fb3f6b.roa
Signing time:             Tue 21 Apr 2026 12:57:57 +0000
ROA not before:           Tue 21 Apr 2026 12:57:57 +0000
ROA not after:            Mon 20 Jul 2026 12:57:57 +0000
asID:                     132541
IP address blocks:        104.250.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:89:59:11:a4:58:4a:6b:1b:f3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Apr 21 12:57:57 2026 GMT
            Not After : Jul 20 12:57:57 2026 GMT
        Subject: CN=8a3463b9-5d5b-4361-9549-8bfa9761b537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:55:26:02:87:e1:04:01:0a:d4:02:b1:14:36:
                    10:46:b2:35:49:e1:40:e6:66:b3:4d:d3:10:6b:ce:
                    4d:3e:d6:82:de:02:1a:da:22:63:d6:0f:57:36:c1:
                    7e:a4:45:e9:f4:39:0c:02:bd:38:93:e5:d9:39:d0:
                    ba:8b:3a:cc:f3:cc:05:53:a1:4b:cb:27:76:15:23:
                    92:e1:6e:34:41:da:12:d1:a2:38:29:ca:5a:0a:b9:
                    2d:e5:bb:26:e5:0b:79:47:48:5b:27:c3:4e:09:40:
                    a7:2f:8f:a8:0f:8d:20:47:3c:90:52:52:48:3a:ea:
                    e3:5c:52:6c:c7:09:86:13:c9:b3:7f:d8:e6:7c:33:
                    66:de:c5:72:da:30:c5:28:13:37:86:e0:73:03:95:
                    d7:ad:8b:9d:47:d5:a4:56:5b:11:32:71:4c:f3:49:
                    84:3c:a0:ae:b0:16:d8:c1:c3:8f:7d:4e:a7:7a:47:
                    fa:7f:88:c9:b2:5d:1d:b2:4a:79:54:5a:fb:16:86:
                    25:e9:5c:f4:51:48:9e:bc:ef:42:21:f8:2a:c0:0d:
                    e9:80:bf:3c:0a:29:2c:fc:68:81:dd:5c:7f:a2:8c:
                    a2:5e:ae:90:e5:dd:14:99:a7:89:42:cc:3e:66:cf:
                    0b:35:8f:fd:cb:6b:0a:66:fa:7f:4c:47:e5:b0:ea:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:CF:22:F5:F5:DD:27:BD:A1:52:16:D5:CC:7F:34:8C:53:DF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/643dfa49-024d-395c-81c2-3eac22fb3f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:f2:ab:02:63:aa:cd:40:5d:7a:d1:c3:04:9d:75:00:01:
         c2:ec:0f:4a:b8:ba:52:bc:c1:f4:2c:9a:05:58:78:30:59:e2:
         a3:75:dd:1b:5f:07:da:86:5e:05:56:dc:cc:15:62:76:21:2c:
         3e:32:03:cb:ba:49:56:38:31:70:af:a7:31:b0:87:27:48:9f:
         32:2f:04:df:35:8a:00:6a:f9:3b:37:92:a2:df:14:b4:66:6a:
         7a:9b:54:72:d7:85:f2:ed:b7:f1:c7:d5:05:70:6b:f2:76:98:
         de:a8:13:c7:46:05:57:70:f3:4e:e0:3f:e0:38:2b:36:88:b6:
         fe:f3:6b:d7:bf:b4:40:58:e6:37:96:71:5b:bb:25:05:65:0d:
         03:74:b8:c9:91:46:67:9e:09:16:59:91:d7:65:6f:82:cf:44:
         6d:f3:0b:6b:bb:62:eb:33:63:64:70:2f:38:aa:fc:e0:5c:ed:
         2e:4d:b6:88:bd:e1:ce:ed:d8:8b:6c:92:90:3c:1e:06:76:56:
         bd:df:97:f0:58:71:26:0c:65:1b:f8:0e:35:62:07:c6:b3:96:
         c2:ae:c2:03:98:c6:1e:fd:ee:48:8a:6a:51:ee:65:c7:ea:1a:
         7f:ce:67:7f:06:db:72:4a:2e:c2:01:a4:ac:a3:ba:8d:3f:8d:
         74:ea:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:21:17 2026 by rpki-client