Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/c9024413-d87c-3b9b-ac7c-37199851de38.roa
File:                     c9024413-d87c-3b9b-ac7c-37199851de38.roa (raw, json)
Hash identifier:          LtPQzbellBIG7MJcWdGaf0qtMfDsTtgcij0e1VxPbYs=
Subject key identifier:   FF:21:95:68:E2:53:82:87:B9:C8:2E:1F:0B:9D:BF:EA:4B:4B:08:1E
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584D4C9CC690ED1C6433ADC2A358
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/c9024413-d87c-3b9b-ac7c-37199851de38.roa
Signing time:             Thu 26 Mar 2026 18:38:54 +0000
ROA not before:           Thu 26 Mar 2026 18:38:54 +0000
ROA not after:            Wed 24 Jun 2026 18:38:54 +0000
asID:                     2675
IP address blocks:        205.194.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:9c:c6:90:ed:1c:64:33:ad:c2:a3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Mar 26 18:38:54 2026 GMT
            Not After : Jun 24 18:38:54 2026 GMT
        Subject: CN=9d494a03-8dbd-4ed9-9981-5b010d82264e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:eb:59:6c:4b:1d:74:88:65:38:06:9c:79:
                    ca:9c:eb:d2:cd:08:24:7c:bb:74:91:b2:3b:0a:1d:
                    67:ee:e9:4b:1e:7a:e4:1c:bb:f1:e9:b5:d5:60:68:
                    b4:23:92:05:eb:be:6c:db:cf:c1:06:4b:0a:07:63:
                    12:78:b2:1a:6b:25:91:2f:ba:c4:b9:30:d3:e2:43:
                    a4:8d:3e:19:6f:44:a4:d3:6b:d6:04:9c:df:a9:07:
                    cf:2e:92:24:9a:18:3a:6b:9b:6b:42:76:40:d8:5a:
                    11:62:9d:62:71:0f:f3:19:44:79:01:80:bc:e6:de:
                    fe:6b:0d:5f:55:fb:0f:ad:da:2b:9e:a7:61:d6:04:
                    5d:50:39:ba:b9:6b:ae:6a:89:62:06:62:11:81:7e:
                    b9:f5:5a:57:07:db:b7:5b:75:ee:12:ba:46:ef:73:
                    ef:a2:4b:c2:89:30:19:c5:28:15:59:47:da:ab:29:
                    c6:d3:d9:b9:49:9e:a6:05:60:4c:a6:88:bf:8e:7a:
                    94:1f:dc:6d:74:de:a9:77:5d:43:a2:f6:34:77:7c:
                    e7:3f:29:f6:8a:d0:68:90:ce:a2:d3:73:05:ad:bd:
                    a2:ae:18:7d:b4:e9:c6:68:95:8d:df:61:0b:ca:c2:
                    6f:c1:cb:ac:13:b6:c0:8c:db:87:3b:ae:6e:b4:88:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:21:95:68:E2:53:82:87:B9:C8:2E:1F:0B:9D:BF:EA:4B:4B:08:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/c9024413-d87c-3b9b-ac7c-37199851de38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:90:0a:dc:ef:61:f2:7f:7f:c8:8c:a3:c4:96:f1:e4:c3:
         2d:ba:53:08:8a:bb:39:fd:cc:9b:65:21:1f:c3:ca:51:6a:b7:
         73:13:4d:0c:31:91:32:27:4f:fe:ae:90:19:9f:f4:6f:93:31:
         e2:00:cb:d3:90:68:d7:a8:b5:2f:56:6d:3e:87:3c:95:46:be:
         09:74:49:56:49:ad:09:f9:12:ab:43:08:01:93:92:8a:d1:a0:
         f6:9f:48:25:f6:32:c0:20:04:86:bc:35:96:66:6c:f5:97:af:
         d6:78:69:31:68:39:a5:70:56:44:4e:22:bc:4d:49:30:41:58:
         01:8e:6f:f0:8f:df:d8:14:0d:51:3f:7f:f1:be:79:91:d1:7e:
         2d:8c:c0:08:01:c5:e7:0f:cf:11:e5:cb:20:5c:b3:ba:cc:f3:
         21:13:16:00:0a:3a:16:58:1f:8b:36:3a:ca:d8:a2:c4:00:48:
         4f:2a:a3:a5:46:b8:09:cc:44:99:f1:53:30:b8:e8:22:32:6f:
         6f:39:08:c7:b8:65:0c:f6:9e:f6:72:5a:72:55:e9:62:23:f3:
         6d:18:1f:21:ad:d3:37:f8:12:41:2b:72:ef:cf:7e:03:d3:c2:
         32:0e:cc:1c:ee:13:a5:e5:43:78:28:c5:30:e7:7f:ed:11:1b:
         a7:16:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:07:30 2026 by rpki-client