Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/cd9ad7e4-9760-366f-9aa4-6301951a6c20.roa
File:                     cd9ad7e4-9760-366f-9aa4-6301951a6c20.roa (raw, json)
Hash identifier:          el/+uCRKIRwWc65AtSOk3UiewdB6aPI0ok+ug9dLDsQ=
Subject key identifier:   88:FC:C4:7B:2E:BB:D6:B4:9C:35:3A:2C:E1:05:EC:46:22:E3:17:83
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584D1F4A347C0F496F7FF55D1A80
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/cd9ad7e4-9760-366f-9aa4-6301951a6c20.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        216.105.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:34:7c:0f:49:6f:7f:f5:5d:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6464ad2a-246a-4e24-9493-a646a61b7689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:27:8c:13:fc:13:59:75:fc:85:34:43:0e:
                    37:aa:1e:31:ad:90:61:c7:d1:65:ec:da:d6:ea:ae:
                    48:c2:72:a4:d7:cd:a2:25:4a:a1:65:a3:84:7d:f8:
                    b6:76:58:d8:2d:c7:61:31:58:ee:0f:10:e3:f3:00:
                    90:99:f3:f1:37:98:2f:79:4a:24:27:e9:a2:8c:50:
                    54:75:22:85:0d:c0:38:01:07:bd:4f:78:ac:20:1f:
                    e3:25:4e:62:90:6b:6d:6a:0d:55:a6:c1:7d:e4:c3:
                    1e:e7:56:9a:52:a4:23:26:92:9d:c4:47:19:5f:b4:
                    5e:16:25:72:86:fe:9f:83:40:1c:b0:20:ab:24:53:
                    2d:82:da:96:0b:ba:72:15:b8:e1:48:66:39:4e:a4:
                    20:62:f2:fd:81:ad:81:02:4c:fc:25:30:8d:cf:63:
                    ec:8b:7b:dc:de:76:96:cd:6b:d7:3e:b5:64:1e:83:
                    75:00:f8:ba:a2:d4:2a:36:31:da:90:28:01:91:4b:
                    54:ef:5c:c3:0b:9b:16:bc:90:8b:86:e8:85:d0:78:
                    b1:f5:b8:b0:b8:c9:ec:12:01:36:df:f5:d4:ec:f1:
                    99:5d:f5:7a:ea:cd:60:c2:e5:21:3c:a5:ff:1a:b4:
                    3d:72:20:f0:71:3b:1d:df:19:5b:63:e2:8b:46:38:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:C4:7B:2E:BB:D6:B4:9C:35:3A:2C:E1:05:EC:46:22:E3:17:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/cd9ad7e4-9760-366f-9aa4-6301951a6c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:07:ab:47:52:8b:d1:fc:89:f5:1f:58:a9:49:64:f5:bf:
         c9:96:37:13:48:4c:38:f6:34:87:08:c5:60:ad:b0:73:24:0a:
         df:bc:e8:74:08:88:ac:ed:15:19:13:76:04:b9:e5:7d:3b:df:
         de:fa:69:8c:24:c0:06:99:d2:0e:db:37:79:39:73:e6:d8:2a:
         d8:d9:b3:b3:03:85:f6:07:c4:47:79:34:4a:1c:22:42:8a:16:
         34:f5:c8:8b:58:3e:50:2e:29:77:d7:57:4e:61:cf:2e:28:3c:
         8a:b0:af:5d:a8:89:3d:88:6a:2b:4f:0c:48:d9:e7:f4:e5:9c:
         a2:b0:9a:bc:55:3b:35:a7:bc:97:a1:38:28:93:3d:bf:8b:8c:
         4c:38:2b:1d:78:b6:70:75:8b:c2:c9:4a:bd:27:76:0f:a5:48:
         7b:d3:0f:c7:24:de:94:5c:fe:0d:c6:02:d6:ea:c4:ac:00:48:
         3e:81:a4:dc:30:60:71:fd:d7:97:a4:4c:85:7f:6c:18:51:bf:
         da:e0:3a:5a:c4:2e:1c:38:e7:63:f4:42:0f:ad:f7:66:12:66:
         1a:40:e4:1c:2c:78:61:17:1f:31:ea:f0:e3:40:41:04:4e:f1:
         95:b1:65:7b:44:ef:42:dc:ba:1f:ef:57:51:ea:c0:b8:94:64:
         fc:76:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:15 2026 by rpki-client