Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e68f008-80f2-3196-8efa-45d81b5960ad.roa
File:                     4e68f008-80f2-3196-8efa-45d81b5960ad.roa (raw, json)
Hash identifier:          Xa4urL7DYkHG1QJPHE6WCrEly0lSQLJsNHjlZoiYRCw=
Subject key identifier:   F0:5B:3B:91:8A:C1:7A:09:F1:1A:5D:95:46:81:FF:7C:54:6E:5C:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8AC54E03CBB52FBB36CC3320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e68f008-80f2-3196-8efa-45d81b5960ad.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     31984
IP address blocks:        173.222.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:4e:03:cb:b5:2f:bb:36:cc:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=beb8d509-f6e6-453c-ad05-1278c0948a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:70:ad:81:66:ea:f3:38:40:25:7f:ff:fe:
                    c5:f5:ff:27:ff:c2:fe:44:30:47:7a:56:d3:93:2a:
                    ca:74:67:fb:74:53:6b:7d:4e:6d:a2:7e:be:1d:82:
                    e4:e2:e4:f0:ac:65:d8:c8:5b:04:11:9e:6f:ee:50:
                    79:07:5b:72:63:7a:30:36:9b:d7:40:85:18:d4:ef:
                    26:a9:48:74:c3:a0:3f:b6:9d:98:e8:e1:0d:89:a6:
                    40:26:09:0c:60:e7:67:9f:99:14:d0:27:f3:0b:61:
                    13:01:d0:0e:a0:ea:d5:19:0d:4b:79:5a:ca:7f:14:
                    26:55:0b:f5:79:ef:99:97:fb:de:d8:25:50:30:a0:
                    ed:28:ee:d0:9b:f2:17:2b:a4:68:36:1c:6e:89:9f:
                    94:b3:b3:2b:05:c1:74:16:27:ed:8c:b7:bb:20:07:
                    02:7e:df:2c:d3:fa:5e:4c:a7:ea:28:91:bb:80:87:
                    86:bb:75:48:45:08:db:fe:f7:17:64:e4:dc:62:94:
                    cf:bb:e4:b0:c2:fb:b1:4f:67:a2:4d:03:8f:ee:ef:
                    6e:e8:d3:b7:ce:fa:25:c1:d9:b2:f3:58:9a:d3:7b:
                    75:64:49:fe:7c:85:cc:2a:c0:01:6c:f5:8d:12:ec:
                    1b:1d:cb:bf:76:dc:bd:c2:5e:04:9e:3b:37:fa:a5:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:3B:91:8A:C1:7A:09:F1:1A:5D:95:46:81:FF:7C:54:6E:5C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e68f008-80f2-3196-8efa-45d81b5960ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:b4:b4:a9:6e:69:93:d0:c1:4d:4f:08:fb:07:42:4a:16:
         df:cd:f1:ad:49:67:06:76:76:b4:2a:ee:52:d5:f1:58:f6:b7:
         d7:4a:1f:d8:88:4c:09:08:8e:11:1f:6b:a4:89:19:86:3c:7d:
         8d:92:66:2f:a7:48:f0:59:e1:90:12:e1:03:91:60:2b:05:4a:
         d4:48:5c:26:c7:0a:05:9e:b0:69:77:eb:47:47:36:50:a6:46:
         a6:ff:20:cf:44:4c:09:6c:ef:ff:4d:e2:94:f4:5e:ef:2d:e1:
         bd:a4:ad:19:d7:3e:0c:bf:fc:e1:06:fc:f6:56:0b:bd:56:2e:
         4d:d0:d2:21:c9:ce:2e:cb:7a:c1:37:8f:bd:8c:66:e5:b0:83:
         e8:8a:1f:aa:7c:ac:e2:18:4c:81:da:68:94:b5:2c:70:56:ac:
         4e:d5:c8:7d:d1:45:b1:02:18:89:b4:e6:4e:bd:5b:0b:3f:eb:
         b2:79:ed:18:ab:0f:fd:28:16:b9:a6:53:58:8e:25:3d:b8:90:
         39:3d:2b:36:eb:52:4b:35:f3:c2:8e:54:d6:7e:a2:ee:30:9b:
         b8:c3:f9:d2:34:be:cb:0f:f0:a2:df:d9:c9:19:9c:e8:9a:78:
         15:67:1d:38:e0:42:0b:fd:bc:d1:f2:2c:5e:1d:0b:b2:98:a4:
         05:a5:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:15:39 2026 by rpki-client