Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa
File:                     7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa (raw, json)
Hash identifier:          /McIjgPl+4enG8ZLFsFD7Zdwc9r5KPbqzwgScycURLk=
Subject key identifier:   6B:78:87:20:06:61:F6:98:EE:FE:F7:E8:F7:BB:63:3F:BC:12:F8:09
Certificate issuer:       /CN=921f193c-15da-4399-969b-ee92f297f61a
Certificate serial:       010D0C9F4328584D300A55F80B125C31F9479540
Authority key identifier: 7B:80:50:1E:21:D5:2D:B8:F9:8B:88:DC:72:D7:B1:C3:68:C6:71:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     54277
IP address blocks:        136.175.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:55:f8:0b:12:5c:31:f9:47:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921f193c-15da-4399-969b-ee92f297f61a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=6b00bc13-544c-416e-9e7f-f0fcb40def1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:a1:2f:b4:ce:7b:dc:99:08:19:9b:0a:cd:
                    78:a4:89:c6:4e:4e:3d:7a:b1:f7:34:a8:c4:37:f8:
                    a8:79:c0:5a:f3:ee:e0:a4:db:0b:4f:ba:bf:c7:7a:
                    02:02:31:ce:27:24:35:a2:e8:38:e2:44:42:56:92:
                    10:cd:c0:bc:bc:5c:62:5a:0b:ee:4a:24:97:1c:94:
                    94:32:af:71:d3:07:97:17:b2:de:16:aa:a2:4f:df:
                    b1:5f:23:c7:4a:87:17:bc:51:f0:b3:36:3e:36:53:
                    79:ad:5b:91:17:55:97:2d:ea:52:69:b7:f7:cf:71:
                    ae:2e:7b:f5:bd:a8:1e:66:2a:d8:f0:f0:38:41:dc:
                    82:80:71:1e:54:95:ed:87:2c:e1:6d:f2:69:86:7b:
                    47:bf:f1:9a:90:cd:20:97:eb:39:e0:17:7a:07:d0:
                    c7:fe:44:2a:5d:f9:a0:2a:3d:d8:7a:98:07:db:b4:
                    36:f8:17:fa:9b:57:df:ca:e7:b8:60:fd:65:53:98:
                    02:2d:a9:af:3a:07:32:6b:d6:5c:e4:1d:17:0b:a0:
                    41:c1:cf:e2:33:5f:d6:85:76:27:8b:1a:cf:92:b5:
                    af:be:01:e6:80:66:6b:ad:b8:c8:37:65:30:9a:22:
                    a0:e8:ec:4b:f7:d2:14:39:82:dc:83:26:8c:12:f0:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:87:20:06:61:F6:98:EE:FE:F7:E8:F7:BB:63:3F:BC:12:F8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/7e108bc2-49b8-3f48-9a5f-9c4f946cb15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a/921f193c-15da-4399-969b-ee92f297f61a.crl

            X509v3 Authority Key Identifier:
                keyid:7B:80:50:1E:21:D5:2D:B8:F9:8B:88:DC:72:D7:B1:C3:68:C6:71:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/921f193c-15da-4399-969b-ee92f297f61a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:5d:ca:b0:03:40:d0:b6:86:bd:09:8e:a4:59:3a:ba:ee:
         58:27:e4:8b:09:f7:c9:88:6e:ff:9f:a4:10:b8:87:de:c1:50:
         6e:4b:af:6f:8f:9c:98:08:7e:fb:cc:98:7b:f8:e7:db:0e:05:
         48:f8:07:76:ae:d6:f9:64:30:bd:99:6d:ec:a7:67:4b:ea:fd:
         f1:cc:80:86:ae:1e:94:cf:14:40:c7:2f:41:7a:77:af:b8:16:
         22:d6:17:58:7e:52:66:d9:dd:9e:0c:05:72:89:39:f4:8c:4e:
         1c:d9:c1:ec:90:14:9f:80:4f:6b:3c:bf:35:d4:46:99:02:e0:
         9d:64:04:61:1b:ad:51:87:88:d2:8d:d9:75:d3:19:31:16:99:
         de:bf:40:50:46:c3:b7:48:66:1e:22:68:55:f8:14:54:e4:9d:
         62:d0:ea:cd:94:98:6e:3e:60:1a:90:c1:9d:aa:15:18:dd:d2:
         e0:2f:7d:2a:32:9e:86:40:51:a4:1d:fc:7f:e4:74:e9:f3:cf:
         72:fa:09:c0:73:5e:bc:2e:05:c8:ae:9f:b6:ee:b7:c0:4e:0b:
         e9:86:9d:2d:ad:4f:f8:48:f9:06:c5:a6:2e:77:5e:ab:76:4e:
         d2:f8:9b:05:40:cb:74:cf:a2:bc:96:1c:32:87:4d:c7:c2:c7:
         6b:0c:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:56:04 2026 by rpki-client