Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/c5b67904-7828-3f28-8c50-efff73dd376e.roa
File:                     c5b67904-7828-3f28-8c50-efff73dd376e.roa (raw, json)
Hash identifier:          jl3+jr3oMcfy1U1wJMU3TqldRY9QHb36tS0uQ2CVAC4=
Subject key identifier:   57:DA:AE:6F:FD:AB:F7:82:3A:E0:15:A4:92:A9:8B:DA:CD:1F:F8:25
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584EAC574A2DA3CF7AB555889F00
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/c5b67904-7828-3f28-8c50-efff73dd376e.roa
Signing time:             Thu 30 Jul 2026 18:23:26 +0000
ROA not before:           Thu 30 Jul 2026 18:23:26 +0000
ROA not after:            Wed 28 Oct 2026 18:23:26 +0000
asID:                     18705
IP address blocks:        206.53.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:57:4a:2d:a3:cf:7a:b5:55:88:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Jul 30 18:23:26 2026 GMT
            Not After : Oct 28 18:23:26 2026 GMT
        Subject: CN=54b369c1-58d8-4d45-ae4d-8bcec5a54f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:19:53:37:13:bf:54:ef:32:f5:53:d2:94:
                    2f:31:71:aa:39:56:92:9c:9a:7b:88:5c:62:eb:bd:
                    b2:de:f4:64:b1:f6:c5:bc:8b:23:21:b5:54:46:64:
                    1d:69:ae:e5:ed:f9:2f:c5:fb:d3:8e:ed:e6:db:7b:
                    d5:0c:94:ca:2c:c9:46:57:88:2d:f4:48:c6:6d:fe:
                    0f:e5:28:19:c4:6d:d0:8e:cc:14:90:d6:cb:c1:c0:
                    20:7c:ad:7a:19:3b:8c:66:72:c9:92:9f:8c:c1:29:
                    18:c1:dc:0d:16:71:c6:9f:6f:c2:42:ea:39:fb:0f:
                    09:f6:fa:c6:ef:c1:bc:9c:8b:f1:be:34:0e:b3:04:
                    4d:d5:3e:41:63:25:f3:a9:d5:fb:ca:82:d9:0c:04:
                    f5:9f:e1:5e:85:b4:b8:50:d0:16:66:71:05:d4:ec:
                    63:a4:3d:d0:b6:5c:c7:26:fc:3f:4a:7b:50:2e:a0:
                    06:fa:b4:1e:3f:a9:b6:68:0a:f9:15:19:a3:7f:61:
                    8f:ed:1f:3a:51:da:77:69:6c:63:e7:0d:36:b9:93:
                    1f:99:1f:e9:39:29:1a:fa:0d:64:a5:9f:b1:f1:c7:
                    03:21:b0:67:04:90:bf:75:36:44:da:8a:ba:48:92:
                    dd:0f:02:57:0b:23:8d:1b:21:10:17:7f:1b:c4:74:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:AE:6F:FD:AB:F7:82:3A:E0:15:A4:92:A9:8B:DA:CD:1F:F8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/c5b67904-7828-3f28-8c50-efff73dd376e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:3d:21:75:2e:b3:b9:f8:81:9a:6d:a4:db:4b:32:0c:cd:ad:
         b4:46:3a:c7:39:db:ba:9c:1a:40:af:53:e8:fa:73:49:fc:a7:
         3e:f2:72:7e:f5:10:41:c7:f5:9b:01:8a:54:9a:5c:d7:91:8c:
         93:b6:3d:e2:7a:88:d5:28:1e:51:37:24:9f:b7:2f:51:4d:39:
         d3:b9:ee:dd:eb:f1:b8:bb:af:8d:ea:81:c8:a9:53:ad:73:ee:
         97:f2:46:f5:d9:fb:7b:63:ec:d5:26:81:68:e2:a2:44:a8:34:
         76:03:24:f5:8e:95:ca:cf:fc:d4:d9:f7:07:43:02:09:39:fd:
         62:a7:4f:06:b8:bf:f2:b8:5f:e2:f7:51:fa:00:cf:0e:e3:0e:
         2b:76:59:f4:63:94:4f:1a:79:50:84:2d:c6:42:29:ec:a5:ed:
         65:0d:6f:3a:12:32:6f:4f:c2:26:42:17:57:8f:bd:5d:c4:dd:
         83:f4:50:b8:00:d2:77:1c:0f:d6:67:7a:37:9a:0b:bc:b4:69:
         39:cc:db:3b:94:11:74:c9:1d:a6:59:ca:ea:13:42:d2:f9:0c:
         08:c3:c4:18:5b:41:b3:36:4d:61:25:c8:62:7b:f8:b2:8f:0e:
         81:9f:4d:54:65:93:b4:04:ca:32:ac:a5:6d:02:37:55:ce:e7:
         ee:99:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:55 2026 by rpki-client