Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e5ad746-8ad2-38f1-8fdc-a0630ef202ef.roa
File:                     9e5ad746-8ad2-38f1-8fdc-a0630ef202ef.roa (raw, json)
Hash identifier:          7PkzeggGMLQzoZozfc6a6AY0wdRGg13FcmL1HjQmJiw=
Subject key identifier:   5C:C3:05:AD:05:A6:12:0A:9F:79:57:DE:B2:76:58:D8:DC:80:D6:1E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9A92B164115C07AD93664380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e5ad746-8ad2-38f1-8fdc-a0630ef202ef.roa
Signing time:             Thu 23 Apr 2026 16:51:38 +0000
ROA not before:           Thu 23 Apr 2026 16:51:38 +0000
ROA not after:            Wed 22 Jul 2026 16:51:38 +0000
asID:                     211341
IP address blocks:        149.57.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:92:b1:64:11:5c:07:ad:93:66:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 23 16:51:38 2026 GMT
            Not After : Jul 22 16:51:38 2026 GMT
        Subject: CN=d670045f-a5ad-423c-85e7-9cc2f30645a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:59:72:46:74:5c:c3:0a:5f:8b:0a:55:41:15:
                    7e:67:30:10:bb:26:9c:3f:a4:89:58:9e:9c:25:99:
                    c4:1d:b3:51:00:35:4c:da:ab:51:e1:85:86:a2:2b:
                    22:b2:b7:ea:f6:ed:11:aa:51:90:de:36:9d:51:c5:
                    36:49:c9:66:1d:c8:aa:6b:34:3f:1b:6e:e7:16:d2:
                    2a:9b:5b:ad:af:1d:af:fb:65:07:71:81:8d:fa:59:
                    78:55:93:86:f8:47:8f:1c:f2:2d:eb:b4:3d:c3:4b:
                    47:da:20:14:99:c7:36:e9:4f:22:53:a3:3e:c9:52:
                    a2:39:42:f5:f0:cd:cd:2c:cc:00:fd:0b:ee:07:53:
                    a7:77:95:17:09:af:f0:40:72:cb:ae:ab:c8:e4:75:
                    7f:04:67:a1:dd:77:4e:79:2a:de:c1:05:90:6d:27:
                    56:f8:2d:a2:26:05:99:b5:68:0d:95:42:dd:f2:76:
                    60:92:09:a3:61:37:f3:a2:98:31:38:ce:b9:56:9e:
                    f1:9e:fe:e5:39:5e:f0:d4:b3:70:bd:88:cd:e8:53:
                    12:74:3b:20:44:71:e7:84:af:30:8a:14:1a:e9:24:
                    65:65:1e:63:60:a2:da:e8:77:cb:71:60:30:45:65:
                    60:93:a3:05:b9:d4:50:fd:41:e2:aa:c5:d4:b0:12:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C3:05:AD:05:A6:12:0A:9F:79:57:DE:B2:76:58:D8:DC:80:D6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9e5ad746-8ad2-38f1-8fdc-a0630ef202ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.57.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7d:af:53:f7:fc:a5:2d:70:be:ca:05:85:4a:89:6f:02:d1:
         8b:68:b9:6f:c1:88:47:df:1b:3c:e5:d4:0f:04:e1:30:0e:a2:
         1d:6c:4d:7a:f6:0b:5a:64:a7:ea:86:81:b6:c2:2d:1d:8d:65:
         41:0c:5d:6c:af:1e:ed:85:cb:04:1f:59:4a:04:c5:ff:fc:95:
         cb:71:cb:d4:14:70:4c:99:b6:40:e7:f3:f4:eb:05:9c:ac:67:
         62:7e:83:3a:3b:7a:29:12:82:13:ee:88:cb:e7:fa:71:e9:fb:
         04:10:0f:50:ec:1b:87:90:52:57:e9:d3:b7:8d:ec:74:cb:f8:
         96:cc:f2:9d:45:15:55:f3:b6:1c:63:b7:bd:e6:c2:09:8e:1e:
         96:45:87:9c:dc:17:9e:d7:85:84:16:66:63:12:f9:13:81:15:
         20:02:cc:9c:ff:16:18:66:31:f4:07:b4:5d:d9:2b:dd:42:66:
         0b:b7:0b:14:10:da:41:a3:b7:59:2e:a4:a0:a4:02:5e:7a:97:
         5c:64:10:70:e6:f8:6a:cc:17:d5:55:b1:38:c7:cb:78:11:1d:
         0f:da:a7:1d:46:90:5e:db:2e:4b:42:9a:09:17:dc:b8:33:94:
         a2:7c:69:99:ee:17:06:3c:e5:7b:68:ec:4a:dc:83:68:fe:37:
         f1:64:7a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:11:42 2026 by rpki-client