Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa
File:                     da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa (raw, json)
Hash identifier:          jRQ/6786YXEXuFHh8X2nkKDQEE7YPy47+hCRVDvSlKY=
Subject key identifier:   7C:2A:43:84:B5:F2:49:BC:88:69:27:3B:7A:30:74:3F:3A:BE:6E:6C
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584D1F4A3DC9821F12882E503240
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     395153
IP address blocks:        107.182.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3d:c9:82:1f:12:88:2e:50:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=23f79a39-1c37-4df3-8162-88dfe684be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:e6:d9:c1:f9:f8:76:25:46:a3:d1:75:71:
                    f6:1b:b6:34:0e:3e:de:95:f5:3e:2c:7d:c6:d5:74:
                    28:4b:a3:0c:20:15:fe:b4:1c:86:9e:5f:35:7e:17:
                    62:5f:7d:95:f5:d8:97:3b:8c:82:76:c8:a8:95:97:
                    f9:50:dc:c5:07:4f:ba:c9:6a:a7:3b:96:e2:cb:e6:
                    70:ec:77:8e:7d:e9:9c:a5:96:c8:d9:82:08:e1:08:
                    97:9d:03:b5:de:91:fb:7c:3d:7b:6e:e7:dd:8f:1e:
                    b9:1b:3c:ff:5d:03:02:19:55:80:2e:d6:0e:eb:3e:
                    d0:c2:71:4e:36:7a:51:bf:5b:77:91:8f:2a:1b:26:
                    d4:51:6f:0d:47:67:b5:cb:a1:a7:79:97:92:5e:38:
                    2d:b4:5e:3b:5d:e1:a7:81:68:26:ed:bf:86:3e:57:
                    b7:44:cc:69:b3:18:e8:9e:08:f1:7d:48:0b:6e:0d:
                    cd:2e:37:da:46:08:b4:83:0f:d7:12:e5:db:03:47:
                    77:a7:c3:07:ca:8e:48:9e:d8:e2:cf:2a:25:c1:4a:
                    3d:b7:35:2e:61:4b:8d:3b:e7:a4:92:a7:70:93:f7:
                    69:c6:b4:7f:d6:66:23:8b:d0:5e:f5:9c:ae:88:30:
                    55:ed:23:8e:1a:65:b7:21:3f:4a:cd:ca:32:a5:80:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:43:84:B5:F2:49:BC:88:69:27:3B:7A:30:74:3F:3A:BE:6E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/da0ff670-f9b7-3879-90b6-1d71bf7f1217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:f9:92:c5:d5:a5:7a:5b:8e:0d:38:9f:4f:8d:25:64:73:
         d9:cf:02:3e:cd:48:1e:d5:fb:59:a7:27:87:7e:c4:26:5e:f2:
         2f:ee:d8:da:fc:83:ed:08:37:84:73:d0:ca:3e:b2:cc:06:7a:
         ae:03:b6:87:71:fe:6f:01:20:eb:93:01:1c:15:09:2c:53:55:
         66:5d:21:75:b2:77:9e:ef:9f:9a:03:20:e1:54:0e:0e:50:e3:
         fe:01:55:2d:d8:55:ce:36:ba:40:ae:07:58:dd:86:13:6b:0d:
         52:c4:b5:da:7c:1d:7b:9a:9f:53:3e:38:a4:c4:5c:8b:c9:c5:
         ce:82:c7:d2:58:a6:90:f9:9a:1f:51:16:f3:03:00:58:e0:86:
         90:a7:0a:91:e2:57:a4:de:0c:91:64:30:49:97:55:c2:de:21:
         8c:65:4a:ec:79:92:58:54:be:e8:f6:2b:88:0d:08:d2:67:a0:
         01:9b:63:05:41:9d:42:3b:45:dd:26:39:ee:69:76:d8:67:ec:
         43:0f:98:52:03:45:75:d3:89:85:26:f6:1c:23:c7:47:bf:55:
         86:a8:9d:2a:96:28:7a:25:4d:d8:2f:65:03:96:66:da:bf:d7:
         08:14:a6:b6:42:c1:e4:82:12:d3:0b:2f:72:99:e0:26:d8:c7:
         53:4b:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:45 2026 by rpki-client