Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
File:                     cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa (raw, json)
Hash identifier:          ofYv0ABuLrnyCFI4jQwoYRX5BOz9FN4sUpFCvtcU47s=
Subject key identifier:   6D:E7:CA:6F:25:40:EA:20:5E:1B:1E:C4:EC:AA:E3:A1:1E:F4:E3:3E
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F4328584DA97AB915A28DA27421BCBF00
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     393336
IP address blocks:        169.197.160.0/22 maxlen: 22
                          170.39.172.0/22 maxlen: 22
                          208.65.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b9:15:a2:8d:a2:74:21:bc:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=7ef13a38-ad32-4b9a-8d74-1d5f202a18a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:86:d5:ec:e3:c8:57:04:23:a5:df:b9:68:
                    d9:f7:9c:7e:79:69:20:7d:95:7b:b1:11:3a:27:32:
                    ca:94:a7:1e:02:68:29:5c:cb:2b:52:cd:d0:d8:4f:
                    0e:22:66:8c:b0:8c:ae:37:1e:15:80:a8:33:84:26:
                    de:16:d0:51:8c:5c:01:b3:b5:e8:4b:15:ea:b4:8a:
                    23:e4:42:83:3e:f2:a9:9e:ab:33:c7:af:9b:76:da:
                    c8:fe:02:d4:89:64:9f:8e:fc:52:b8:8d:2c:b4:ac:
                    25:90:64:37:d9:dc:fc:d4:f0:c3:13:0f:c7:34:ab:
                    f8:16:f8:ee:f3:e2:a8:fb:86:85:06:7b:4f:16:6f:
                    84:8b:de:33:32:ca:01:44:e6:20:31:4f:c5:e7:61:
                    70:de:7b:60:05:0f:91:3e:e3:db:ef:1a:58:15:4a:
                    42:20:e0:d8:88:28:ba:a9:1c:4d:84:fa:6b:d2:9b:
                    12:ba:c9:95:6b:34:2b:50:84:68:8d:dd:81:6c:74:
                    2e:62:bc:99:a7:44:a1:66:5d:12:88:7f:bb:9c:f5:
                    d6:36:53:71:3f:5b:bf:bb:00:18:de:10:b2:b4:92:
                    c3:b2:ee:52:40:8e:a2:54:d8:f1:8b:6f:bf:18:df:
                    3b:df:19:7b:2c:87:64:18:6c:22:9f:26:7b:85:14:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:CA:6F:25:40:EA:20:5E:1B:1E:C4:EC:AA:E3:A1:1E:F4:E3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.160.0/22
                  170.39.172.0/22
                  208.65.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:c7:1c:fb:eb:a5:d9:22:36:32:ad:c3:5d:cf:0d:2c:34:
         80:20:20:77:fc:35:7e:07:b9:a0:e0:80:dc:8b:d7:e5:00:23:
         7f:20:71:c7:27:1e:ce:99:d3:fe:c0:9b:fa:b4:ea:ad:fc:53:
         a6:80:bf:f1:44:8a:10:e2:c1:66:42:60:b3:19:89:f6:c1:25:
         a1:c7:35:07:ac:07:6f:df:78:1e:0f:10:0f:ec:39:5b:7d:80:
         a0:fa:ce:7d:4b:be:47:f8:e5:33:bc:a8:5e:b9:9a:dd:05:cc:
         2e:63:35:0b:1b:03:35:b3:d0:d4:97:be:94:af:c7:e9:b8:66:
         e7:52:a0:a3:1c:fc:f4:0f:be:45:8b:d4:8c:3b:c6:4a:4e:10:
         19:73:76:e5:89:1e:24:c8:53:5b:bc:3a:35:ce:a7:a7:73:e4:
         f3:97:9c:c9:05:0b:1a:90:38:48:3b:9b:19:5b:31:b6:54:2d:
         f8:fa:a4:86:82:83:90:37:a0:8a:9f:f1:2d:6f:43:a1:6a:85:
         94:ce:e5:72:ab:7f:8a:69:9a:16:34:39:07:10:5e:aa:e4:e6:
         2e:40:bc:85:e5:46:58:88:5d:c3:fd:5a:a9:6d:67:40:05:ce:
         07:d2:e7:2a:6d:67:d3:b7:54:81:3b:67:b1:2b:ac:4d:17:79:
         03:16:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 12:54:56 2026 by rpki-client