Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/6a8d1992-39e9-3c96-b9d9-9f504a8527d1.roa
File:                     6a8d1992-39e9-3c96-b9d9-9f504a8527d1.roa (raw, json)
Hash identifier:          GM+nHj1zsIjc0IsYhCM+OoC03guclCL7yB2a5tcFMsk=
Subject key identifier:   FC:F3:16:61:B9:69:7B:D7:CE:12:81:46:6A:0B:7D:ED:61:2F:AF:12
Certificate issuer:       /CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
Certificate serial:       010D0C9F4328584D300A4761850954D493F7E640
Authority key identifier: 00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/6a8d1992-39e9-3c96-b9d9-9f504a8527d1.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     41378
IP address blocks:        207.167.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:47:61:85:09:54:d4:93:f7:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=beadd7d3-c53f-4092-a916-0a28e2d666c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:29:bf:a6:44:98:d5:c8:7a:cc:a0:6f:6e:
                    70:7f:45:d0:3a:5c:62:cc:10:3a:9a:e1:e5:47:4d:
                    0e:0e:8d:df:cb:50:14:56:36:61:16:d4:20:57:bd:
                    e5:35:67:05:b3:d7:7e:9a:1e:c0:ff:15:5e:35:54:
                    67:2a:4f:f0:33:3f:8c:ec:2d:3a:36:82:df:2f:f6:
                    d2:0f:a9:31:8c:03:5e:3e:9c:85:e6:91:ee:e5:64:
                    da:1a:55:89:0f:af:22:e1:df:c8:5b:10:2e:cc:29:
                    f8:ed:9c:a1:21:01:77:21:3b:01:66:25:54:8d:b0:
                    a6:b4:4c:f2:06:b2:85:a5:ed:fd:38:49:1c:47:fb:
                    31:ba:d5:ea:09:be:90:78:5f:0b:33:e4:c2:45:c9:
                    76:b5:f8:34:2e:b1:d3:e7:86:ca:6e:d0:29:cb:8c:
                    c6:00:4f:11:7b:b8:b1:5c:23:01:a3:ab:7f:7e:5b:
                    8d:13:17:f7:7b:8b:dd:b8:2f:40:66:4e:9f:61:a0:
                    14:f6:c8:30:ed:05:ec:f9:17:c6:ac:e3:f9:a8:55:
                    d6:8d:64:e1:35:b4:ea:79:50:43:8f:c4:a4:df:81:
                    7f:c1:bb:43:66:ba:fc:7d:59:c3:2b:c9:2c:0c:08:
                    6f:6e:93:e7:7a:e3:f7:f0:f0:df:37:87:a3:a3:fd:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:16:61:B9:69:7B:D7:CE:12:81:46:6A:0B:7D:ED:61:2F:AF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/6a8d1992-39e9-3c96-b9d9-9f504a8527d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:8a:59:e2:70:66:c6:36:08:bc:34:7f:96:d7:b4:db:45:
         b2:90:8e:9b:b3:85:3e:33:0b:24:4d:df:10:d2:c4:3a:6b:78:
         ea:e5:5f:98:f4:08:ca:0d:d1:ff:7d:e9:36:76:43:19:b8:75:
         6b:a1:f7:0f:ba:3a:55:2d:0c:ff:ed:92:2f:0b:2d:51:ec:ab:
         bd:79:0c:66:f5:34:a5:8d:00:ad:c4:18:18:25:cb:9b:1e:1c:
         67:b8:67:50:c4:46:63:8e:ba:7e:74:51:fc:ed:41:aa:1f:14:
         ea:f2:1a:ad:65:38:6d:88:56:86:d8:9f:b3:06:53:b3:2f:87:
         20:d3:fe:ab:13:d2:58:9f:cc:f5:5c:24:18:1e:43:41:81:a3:
         c6:89:a2:f6:c8:40:f6:aa:1e:76:39:1d:76:63:11:2f:3f:94:
         0a:32:59:78:38:bf:fa:db:62:35:1a:70:84:df:cc:9d:c6:fa:
         39:5f:c0:bf:70:6f:8d:aa:de:c7:e4:bd:00:ef:43:60:c1:f1:
         6b:8d:92:32:70:71:b5:f3:25:f1:15:df:27:96:6a:36:53:12:
         44:90:0f:96:94:94:35:54:fe:bc:7d:d2:d4:39:09:29:e2:97:
         8b:7d:48:30:46:bb:95:2f:0f:16:59:c5:a6:11:d4:80:ec:d2:
         a7:3b:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:25 2026 by rpki-client