Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
File:                     f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa (raw, json)
Hash identifier:          sYWnLidMg6VGqQr4Zz3invHsii5K3EKduF/B95xSZ0w=
Subject key identifier:   57:EE:A6:2C:E2:76:58:43:A0:42:39:90:3C:8E:DE:90:13:57:B7:4F
Certificate issuer:       /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Certificate serial:       010D0C9F4328584DAAE034F59E1F87A1C4DCCE80
Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     11105
IP address blocks:        142.58.0.0/16 maxlen: 16
                          199.60.0.0/20 maxlen: 20
                          199.60.16.0/23 maxlen: 23
                          199.60.18.0/24 maxlen: 24
                          204.239.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:34:f5:9e:1f:87:a1:c4:dc:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=a45a13c9-6a9a-4711-9c9d-74fbdea94988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:f7:97:99:25:cb:0e:20:30:1f:8d:ec:58:
                    46:4d:58:7a:3c:01:14:30:17:6b:fa:0e:cf:3b:e9:
                    91:7e:42:b2:19:0f:90:6c:7e:c9:f6:40:60:74:ac:
                    2e:ba:9f:b9:11:a4:1e:90:66:a6:18:fb:d6:69:7c:
                    fe:96:e1:b1:0f:e9:84:e8:5e:10:63:14:7d:fd:ba:
                    ae:87:f3:b8:41:32:73:a6:df:da:b5:ae:a1:02:d5:
                    fe:74:4c:59:c4:8a:47:df:d0:12:7b:6b:5c:7b:90:
                    79:1f:bd:78:ce:f8:4f:ec:ff:21:63:e5:41:9d:b6:
                    01:8d:4d:57:60:2a:86:6d:49:8a:bd:3f:22:af:9f:
                    75:60:8e:46:4b:ad:c4:e2:37:2c:8e:cb:b7:33:f7:
                    10:8f:e9:25:9a:43:9b:fe:9b:2c:38:54:20:d8:a2:
                    2a:3d:98:63:1e:c2:39:31:58:54:57:74:75:fb:45:
                    d5:49:cd:fb:df:89:fe:46:9f:dc:66:7d:33:46:ec:
                    59:dc:cf:f2:4a:81:a7:eb:ff:c9:2d:1e:7e:d6:ab:
                    f1:21:5f:bf:16:1a:5f:89:fc:7c:54:a5:57:ad:66:
                    46:b9:7b:6c:99:b0:1a:d5:a2:c5:45:e3:58:8e:08:
                    95:f2:34:6b:e5:fc:84:fc:83:8e:df:d8:fa:24:24:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:A6:2C:E2:76:58:43:A0:42:39:90:3C:8E:DE:90:13:57:B7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl

            X509v3 Authority Key Identifier:
                keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.58.0.0/16
                  199.60.0.0-199.60.18.255
                  204.239.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:9d:4d:9f:22:63:22:9b:4a:a2:ee:04:99:9a:1d:cb:66:
         2d:a3:1a:7d:af:9a:d5:57:b5:11:76:16:a0:cd:33:63:06:e7:
         92:67:c9:a8:5b:0a:da:d2:44:33:22:51:c6:18:cd:be:90:65:
         2a:97:05:e3:68:05:7c:03:44:11:a4:49:fa:82:d5:bf:a2:6a:
         e4:f8:3e:9a:00:f5:85:1c:a6:d5:ba:1b:b9:3b:7d:79:c1:df:
         72:35:1c:58:18:49:3f:fb:52:44:9e:ce:d9:fa:db:d6:c0:e0:
         af:2f:0d:71:83:77:cb:7d:c7:0e:41:76:45:4d:f6:27:cf:fd:
         9b:62:95:a4:7a:10:0a:8a:f9:6f:a9:64:67:9f:7d:f1:cb:44:
         2d:29:f8:69:f5:06:74:d2:c2:fb:5a:0d:fe:65:97:2c:71:d5:
         b6:86:25:fd:67:12:61:5c:37:00:cb:88:b4:a0:2a:31:f8:49:
         d7:2f:31:ea:c4:75:f2:17:c3:cc:28:f7:5d:5b:7d:01:da:99:
         74:9f:5b:08:b6:4e:8a:6c:9e:94:f8:e6:3c:92:26:de:9b:b1:
         59:32:9d:03:4c:58:d6:02:f7:20:dc:8e:62:3b:ab:65:40:10:
         23:1e:9a:2d:4b:f5:76:9e:92:74:04:56:75:9b:d3:d1:20:f2:
         81:42:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:39:54 2026 by rpki-client