Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa
File:                     a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa (raw, json)
Hash identifier:          OKSSnVVejPXjZMfPlR3AgR8+AeXbhIh5TfMRfxhy6eU=
Subject key identifier:   8B:4B:DA:9C:A8:47:D3:DA:6F:45:F5:BB:61:FD:77:ED:6E:1F:96:D7
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584D8EF586CF098ECB0711C879C0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     4181
IP address blocks:        205.213.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:86:cf:09:8e:cb:07:11:c8:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=33971cc6-f15f-4e81-b395-b757983b4995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:47:5e:80:2d:c4:59:83:e7:46:34:af:81:
                    33:ac:fd:4d:6a:86:95:ba:fe:af:e8:b4:43:1b:1f:
                    67:5b:71:d9:37:76:96:35:d1:30:47:be:43:e4:08:
                    ad:87:79:dd:c5:67:cd:2d:a0:c3:02:06:9f:bc:99:
                    b7:77:59:21:15:88:09:30:16:31:66:88:25:93:d0:
                    ae:9b:9e:50:0e:3a:5c:c9:10:2c:1f:0d:56:7c:2f:
                    50:17:c4:97:81:04:a2:b4:b1:0a:df:69:72:c1:9b:
                    26:90:20:17:5c:00:a2:36:d6:5f:e3:49:ac:20:69:
                    88:02:00:73:8b:d5:2f:cc:e0:8f:9c:78:c1:d0:54:
                    c6:a8:d8:72:72:db:3b:f8:de:a5:d1:a4:bf:0c:b8:
                    1b:de:5f:63:c0:75:39:fe:13:d9:5f:d6:06:1a:93:
                    72:c8:dd:a2:48:3c:91:67:d6:9c:50:39:25:27:da:
                    a2:87:08:d2:24:6e:4c:3b:aa:90:5f:d1:c8:7a:6b:
                    fd:5b:84:3a:29:f2:37:f8:31:7d:b1:c9:e0:ed:dc:
                    23:bd:92:ca:c5:45:d2:dd:c9:79:d3:b6:d8:f8:5b:
                    11:05:b9:63:1b:23:db:de:6f:ec:ff:6d:1b:53:99:
                    4d:30:5c:d2:eb:88:cf:2d:1d:ba:93:e3:1d:78:c8:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:DA:9C:A8:47:D3:DA:6F:45:F5:BB:61:FD:77:ED:6E:1F:96:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a090f9fe-373e-3ed7-8429-8e53ccb113e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:bd:35:60:60:01:88:79:a2:df:b9:a2:21:31:75:91:f7:
         84:05:9f:ab:8e:7a:f7:5f:06:6e:3d:04:51:17:75:46:57:00:
         6a:d9:4d:42:58:13:ac:6e:34:db:34:a8:5b:66:54:e0:72:c0:
         db:56:7b:9e:1e:7b:f6:ac:7c:d2:a9:14:41:fd:db:93:2c:51:
         47:6a:2f:f2:a7:98:a4:cf:d1:f2:95:4c:e7:af:ef:b1:bb:c8:
         ab:f3:1b:e8:78:8c:7b:9f:19:e6:9b:45:a7:a3:c3:ba:d8:31:
         cd:e5:2e:0a:cd:59:cb:65:e7:19:63:03:22:3b:eb:e3:2b:f5:
         cd:c3:52:3b:ee:fb:66:d2:44:4b:4f:72:c3:6c:9c:40:c1:c8:
         21:24:76:5c:5e:a4:24:e6:2e:ff:1b:a0:35:eb:16:6d:e8:1e:
         59:a1:1f:95:5a:b1:84:ae:fe:f3:43:97:1d:6a:48:b9:cb:fc:
         06:03:1e:82:34:e0:f0:a2:49:e9:1a:b1:05:a9:3f:60:53:58:
         cd:ba:d7:0c:32:f1:0e:7a:d9:9a:7f:a8:65:80:8f:af:fc:d0:
         3a:8d:f1:68:ac:09:9b:c6:94:2c:90:fa:13:1c:ef:27:c8:c3:
         7d:a1:7f:b6:48:43:ce:d4:26:b4:73:b4:f4:6b:9c:b4:99:c1:
         9e:e5:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:26:51 2026 by rpki-client