Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa
File:                     20201439-07dd-344e-8b2d-3694e8efcd6f.roa (raw, json)
Hash identifier:          L3kE11NJktH6TpuDUzUU3UuxSkh7Ol4q2j/94SChgx0=
Subject key identifier:   C8:56:3D:5B:A7:C4:8F:A3:D8:EC:6E:A9:E5:04:27:37:78:E4:1D:AC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DE58088FF64E0E6090B258080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        216.175.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:88:ff:64:e0:e6:09:0b:25:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=b142c089-2c94-4c2b-b8cb-334630381c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:5b:74:47:b8:66:bf:f3:2c:c8:d0:9d:f7:
                    07:b7:43:18:0e:1b:0c:7f:a0:6f:e5:5f:88:7b:7b:
                    84:c9:b0:4c:3c:0a:a3:cc:82:d7:42:f9:26:2d:f1:
                    e6:49:78:04:98:9b:dd:ac:d6:1a:dc:ca:9e:d3:88:
                    ee:f1:aa:e0:2d:c4:60:28:1f:8a:17:11:e4:37:54:
                    21:34:c9:c2:e1:0c:29:64:32:5c:36:aa:55:5d:c6:
                    95:d0:d5:1d:b4:91:3f:31:a0:b5:47:9e:14:fa:a1:
                    64:1b:3a:d7:b5:f2:1c:ea:e4:7b:e7:5f:e6:f6:34:
                    0e:85:70:12:ce:ff:e5:26:b5:d6:6d:3c:2d:21:b3:
                    0b:46:6d:b6:9b:bd:e0:72:3c:97:1a:cb:dd:e4:83:
                    08:92:61:90:a4:86:4f:a0:82:0a:98:ee:98:ef:a4:
                    fd:0e:9c:d6:31:7c:1c:2e:a2:8e:2e:1a:e8:34:5e:
                    67:ce:2c:b5:e9:cd:42:f3:ad:70:66:73:ee:b3:15:
                    f4:7f:9d:b4:90:44:36:d9:64:2d:ce:90:c1:87:83:
                    24:03:33:ce:0c:8e:90:ec:8a:bd:29:25:b3:db:b5:
                    e2:4f:89:28:0d:04:bc:f8:1d:ec:85:6c:e5:f6:bb:
                    fc:c3:e6:25:95:51:64:a9:58:c8:bb:c4:53:9b:18:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:3D:5B:A7:C4:8F:A3:D8:EC:6E:A9:E5:04:27:37:78:E4:1D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/20201439-07dd-344e-8b2d-3694e8efcd6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.175.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b7:d5:67:b8:2e:fb:ff:68:6d:7e:2a:d9:a1:d1:39:d0:7e:
         ca:83:0c:35:12:35:5a:5c:c6:6b:2a:cb:4e:f7:9b:ae:d6:eb:
         d7:8c:85:6d:99:28:43:bd:d6:8b:08:6e:45:c5:3d:5c:18:65:
         e3:35:ae:a9:af:0c:79:4f:95:40:c8:8d:9f:0d:21:9c:c6:62:
         34:4d:8b:25:f8:47:c4:59:2e:44:21:cb:88:3e:ec:88:2b:9c:
         0f:da:a2:a5:47:95:b2:92:3f:a1:03:ae:f3:e4:5e:96:41:45:
         d2:15:12:68:70:92:2f:b1:7e:d9:89:fe:90:60:2a:9c:05:a7:
         73:5e:0a:b9:9b:c4:f8:12:58:89:f9:12:6c:db:2c:67:52:6a:
         97:83:51:75:0b:a9:d0:e9:8f:fe:3e:04:c3:0a:f3:24:b7:4a:
         da:e5:24:02:1a:ad:28:0c:98:6e:50:e4:b7:55:3a:9c:9b:5b:
         d5:c7:3c:41:a8:13:03:27:d2:a5:87:ba:e3:1c:64:34:3f:b9:
         05:a6:82:5c:68:da:5b:89:d9:d3:98:69:4b:97:38:a0:73:d1:
         5c:3c:06:6d:fc:f0:73:1a:15:ac:a9:07:df:0a:27:fa:c5:d6:
         00:0a:42:8f:f3:be:83:c2:83:56:15:98:e3:76:25:6b:1e:23:
         89:3a:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:31:41 2026 by rpki-client