Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
File:                     f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json)
Hash identifier:          xMXhH2lTs3Iwr/Vbx1yYt5TtoDqMnTwWnsKKtcDfRaU=
Subject key identifier:   CE:01:E1:A6:2B:3F:FF:40:CD:FA:F8:A0:82:77:44:E3:51:C6:7A:29
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584D300A5FF0CF36DABCF7908B40
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     18615
IP address blocks:        147.160.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5f:f0:cf:36:da:bc:f7:90:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=dadb4dbe-f847-4acb-a845-e59bba55fdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:ba:34:51:88:3c:53:b7:42:e8:45:98:d1:
                    18:10:f9:14:ce:da:26:4d:0b:80:41:69:22:b5:81:
                    b0:86:11:31:ab:1a:27:5b:89:96:dd:42:35:08:fb:
                    60:a6:75:b6:50:13:66:4b:65:fe:1e:38:75:98:0f:
                    93:7d:c9:1a:cb:88:6c:d2:a8:14:ca:34:39:5b:5b:
                    06:a2:16:16:bb:dc:c7:6d:ae:9f:55:f2:93:ac:3a:
                    ba:77:fb:65:ff:99:41:a9:1b:6b:df:c4:0b:90:d2:
                    57:99:9f:40:dc:43:65:59:49:9c:ef:a8:25:59:31:
                    30:4d:0c:55:e8:ab:69:68:23:6d:91:32:4c:ae:2c:
                    3d:c8:81:ed:20:0e:d6:e0:46:a2:30:46:e9:24:ed:
                    cb:90:d2:19:22:fd:f6:35:41:ee:ac:7c:e1:70:78:
                    b8:b3:dd:1d:3b:99:e6:9a:58:f2:3d:35:bf:92:a2:
                    55:38:f8:05:65:35:0f:d9:a3:14:a8:ed:02:7f:9c:
                    d7:82:62:c2:8d:3e:8c:c5:09:4e:73:d6:73:d6:9e:
                    2b:3e:14:78:eb:a6:92:1e:a0:bc:33:c5:bd:36:d4:
                    60:9c:fe:e2:85:65:8b:2a:b6:17:ad:c9:56:ec:d9:
                    a1:b6:71:a6:c2:10:0d:1b:6d:f1:42:ce:0b:ae:27:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:E1:A6:2B:3F:FF:40:CD:FA:F8:A0:82:77:44:E3:51:C6:7A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:7f:98:1d:eb:b7:56:48:08:4a:98:40:32:10:51:67:db:
         6e:4f:db:0e:82:bd:0a:ac:08:7b:e3:72:fd:25:45:e3:77:35:
         e4:59:9a:a4:c8:1c:0c:cd:13:f2:95:94:ee:8a:97:0c:55:8a:
         c7:2b:f7:f4:97:5b:39:7f:b3:7c:71:9b:e3:2d:26:af:95:8a:
         7a:89:24:c8:ae:27:b9:18:28:1c:16:01:80:d7:18:22:4f:e4:
         d7:be:2f:77:3b:3d:f7:5f:63:ce:45:53:7d:b6:1a:15:87:5a:
         08:07:c0:b4:09:77:31:2e:e7:46:57:91:12:a2:7b:08:08:88:
         fa:a0:42:71:22:61:6b:d0:d9:cc:10:b9:15:21:70:9d:8a:49:
         03:3a:cf:da:be:4e:94:c1:30:f9:f7:4a:70:32:4a:11:01:ac:
         bc:63:60:80:c3:b4:2c:bf:aa:7b:81:74:9b:8c:37:06:c3:a2:
         22:6b:5c:a4:ac:b3:a4:3e:98:41:99:aa:27:79:4f:65:88:99:
         4d:07:82:78:5a:4c:11:18:c6:4d:be:57:e9:8d:2c:fc:4e:0b:
         e2:b4:11:f1:5f:c3:b7:39:1d:ed:be:c4:ff:5a:2e:ea:67:36:
         94:f3:74:78:50:6f:51:54:06:c5:96:71:ed:3d:e5:2a:7f:4f:
         46:ae:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:55 2026 by rpki-client