Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
File:                     f18517cc-6da9-30ab-8184-12b511ccaa4c.roa (raw, json)
Hash identifier:          5Gu5ll3FupecIkXNDcKvpt1hvbuaAsUIBQwJrsjezlA=
Subject key identifier:   8A:D0:47:1F:0B:01:1F:46:80:9B:DF:81:EB:52:18:29:52:1F:F0:38
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584D60E4FB577295E3A1E98D2D80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30698
IP address blocks:        209.221.240.0/21 maxlen: 24
                          209.221.248.0/22 maxlen: 24
                          209.221.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fb:57:72:95:e3:a1:e9:8d:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=62eeaad6-48d0-4bb7-8fa1-bc0b57a56af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:00:69:1f:8a:7a:11:15:90:e1:dd:a0:2c:
                    af:59:d6:ef:53:6d:db:7b:2a:9f:fb:ec:3d:93:fc:
                    c5:27:0b:d4:4c:b7:88:e6:54:a2:f2:7b:98:46:33:
                    e0:f5:1f:a7:55:34:b9:33:16:b1:52:d9:f6:0e:6e:
                    b4:87:f4:9b:e1:23:f9:a1:85:aa:e2:b0:dd:d8:3f:
                    01:6d:26:83:cd:6b:e3:ef:75:fa:c9:31:b7:c0:5d:
                    8c:fb:87:fc:c4:6d:fd:16:f9:17:c2:f4:19:c1:2b:
                    ab:e0:cb:04:f2:0d:ac:8b:45:f6:6e:42:08:f2:fd:
                    1a:ca:7c:eb:5a:36:c2:03:6a:ca:d6:68:8f:25:c5:
                    fa:ad:3f:66:d6:fb:da:73:0d:66:c2:91:e0:c5:28:
                    d3:10:9c:2c:d2:44:e2:f6:df:df:9e:71:5d:18:29:
                    0c:47:4f:88:66:27:69:eb:b9:db:82:18:be:57:43:
                    8b:88:fb:43:23:4d:d4:c0:53:07:44:df:95:d2:4d:
                    ba:07:f1:73:8f:6f:d0:1f:a8:59:d0:53:d7:1c:c3:
                    84:d1:06:8e:f8:7e:76:a6:1c:03:28:e5:74:80:0d:
                    42:81:3b:8a:c7:38:1f:fe:70:d8:75:f0:22:5f:28:
                    49:b9:72:8f:d7:9d:83:25:1c:02:83:42:4c:68:07:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D0:47:1F:0B:01:1F:46:80:9B:DF:81:EB:52:18:29:52:1F:F0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0-209.221.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:c5:6f:a0:68:3e:a9:97:37:eb:16:b0:0c:4c:d5:e5:33:
         ee:59:1c:a7:b5:81:c2:1b:5e:de:4e:0c:cb:b9:37:d3:a2:1d:
         72:dc:07:06:9a:7d:c8:57:e9:fb:a0:e2:10:02:5b:51:6c:ab:
         43:4d:1d:13:d5:70:c8:b7:9f:57:0d:d9:d1:e8:bf:7a:50:41:
         89:2d:85:ef:4f:d4:3b:79:70:b1:84:fc:48:a1:8d:1c:37:1b:
         b3:f8:a3:bf:a6:d1:b2:a2:2a:00:c3:92:36:a4:af:3b:14:c2:
         0a:03:7d:3a:81:18:ff:e1:3b:9f:97:f6:2d:cf:be:73:b0:c5:
         e9:65:d7:b6:00:25:1a:af:03:eb:a4:c4:22:45:57:0e:19:5c:
         af:ab:eb:ea:1e:e8:ea:17:dc:c4:60:cc:52:52:95:a7:98:c4:
         28:8e:64:98:53:e6:7a:03:bb:74:7f:61:c1:8c:3e:f4:e4:a5:
         ce:ea:dd:85:b5:8f:93:60:5c:5b:a5:aa:92:d8:c2:a3:12:cf:
         28:f8:07:ab:c7:38:ce:17:f7:d0:2c:4e:57:22:1e:95:bb:93:
         44:30:02:d6:9d:85:49:a4:f0:89:24:ee:40:02:42:8c:cd:34:
         f5:4e:a5:b2:37:d7:04:81:73:3e:d1:47:22:8e:bd:92:88:0b:
         ef:e1:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 03:40:28 2026 by rpki-client