Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ffff9d7-b400-35b5-8484-30eca9415c30.roa
File:                     8ffff9d7-b400-35b5-8484-30eca9415c30.roa (raw, json)
Hash identifier:          Wdvz5Y1pfteWPfQpiqg+PIS7teTgePVVx3EZWz0zRbE=
Subject key identifier:   72:E1:84:95:7D:D4:85:8A:39:79:C4:FB:DC:5B:C2:4E:E7:45:B1:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DD4C0837EB0FD7A48F9AD8100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ffff9d7-b400-35b5-8484-30eca9415c30.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     64267
IP address blocks:        168.91.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:83:7e:b0:fd:7a:48:f9:ad:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=d041abb2-7910-4bdc-8d0c-61ad4a61da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:63:84:da:9d:2f:7e:8f:21:2a:63:1f:f0:
                    c3:87:b9:6f:29:31:10:2f:81:e8:35:09:2b:67:9a:
                    ac:bf:d4:c4:be:f3:c4:96:1b:3a:9a:79:a7:15:4d:
                    e2:78:15:14:10:3d:36:6c:11:1b:5b:ba:d4:5c:63:
                    bb:df:a4:0b:9b:6b:8b:cb:72:92:a4:35:a1:50:70:
                    ea:e8:5e:12:b2:04:42:7c:31:22:d5:b2:fe:03:77:
                    25:a5:83:4e:4c:d0:7d:de:2e:3a:5b:29:42:df:06:
                    e4:f7:b4:ca:59:31:f1:74:47:5f:12:f4:ed:7c:c7:
                    7d:4b:bf:41:c3:b1:66:33:51:c8:2c:9a:49:52:b7:
                    50:bb:39:88:e0:6c:54:c0:fb:18:b5:7f:29:f5:ea:
                    f7:50:40:51:b6:41:ea:85:bf:f6:91:00:60:7c:8a:
                    d0:31:3b:81:8b:26:39:e0:67:2a:dd:66:b1:9b:12:
                    e2:a3:3a:36:19:c8:b9:5e:52:f3:84:b2:76:4d:d8:
                    74:17:a7:9e:e3:84:f2:d5:1c:81:a8:25:fc:8f:02:
                    56:42:f7:a6:ba:70:55:ad:e3:51:a3:11:7f:35:52:
                    76:3c:6d:ba:1f:cf:d1:d3:17:36:e8:15:f4:51:70:
                    89:ef:1a:f3:6c:d2:fd:28:41:c1:fa:9a:1c:c9:5d:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E1:84:95:7D:D4:85:8A:39:79:C4:FB:DC:5B:C2:4E:E7:45:B1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8ffff9d7-b400-35b5-8484-30eca9415c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:5f:09:6e:91:c8:bb:98:64:d8:37:75:47:8f:da:12:ec:
         07:33:01:4e:58:7b:90:92:be:21:70:38:21:a3:bb:ca:23:26:
         04:49:90:74:ae:01:d7:53:59:ea:5c:9b:d3:ee:3d:43:e1:58:
         55:0a:16:eb:28:3c:b2:25:b8:b4:7c:62:44:6c:d9:51:df:75:
         ae:84:3e:b6:bd:63:5d:ee:de:bc:f2:f7:f1:73:62:a5:45:03:
         a8:0e:27:30:ff:db:b4:29:09:1e:0a:89:7c:e9:cf:5e:b7:59:
         0c:b8:b2:57:a2:84:d2:4b:d0:8b:59:76:16:34:3e:c6:22:87:
         f6:8e:44:ad:31:8c:ba:a4:d9:90:eb:af:63:a3:99:53:09:bd:
         f7:6a:78:06:b2:c2:79:af:df:9d:4e:4b:8d:26:22:8c:4f:d5:
         d3:ce:a7:67:34:95:87:05:20:ea:98:d6:25:06:e6:82:06:b0:
         dd:75:82:9d:14:3d:fd:e4:6c:00:77:10:e1:17:a3:b4:48:a3:
         fe:57:79:56:d3:e0:66:13:33:c0:0b:fa:f9:fc:b7:1b:2a:fd:
         e2:95:4e:b4:b2:bb:33:a9:78:10:4e:58:8d:74:d1:e0:f7:f8:
         f8:45:88:c4:55:93:ef:2a:37:67:81:f0:68:a0:3d:02:66:2d:
         cd:44:bc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:25:00 2026 by rpki-client