Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/27179f3e-bc50-3123-a91f-37db21b542b1.roa
File:                     27179f3e-bc50-3123-a91f-37db21b542b1.roa (raw, json)
Hash identifier:          LcTFoqNeRxCdUX8B0/5O1krf/WQaTXXpI/o6Sb+gWR0=
Subject key identifier:   70:5F:88:E4:1A:0E:6A:6D:6B:D7:F4:65:6E:58:C8:1B:E0:E0:50:AC
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D386A2C311CB47E662B7D9680
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/27179f3e-bc50-3123-a91f-37db21b542b1.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     6922
IP address blocks:        192.16.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:2c:31:1c:b4:7e:66:2b:7d:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=6dec1530-dd32-495b-907d-b36373d5ce64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:b9:8d:79:f3:57:85:f3:fc:86:f6:34:09:
                    78:5d:6c:24:e3:c1:9f:5f:d1:c3:ba:85:d3:84:f6:
                    e1:6b:b2:08:54:bf:e5:d0:ec:72:2d:83:cd:5e:f5:
                    93:8c:01:aa:1b:86:bb:33:7a:8c:1d:46:62:52:48:
                    03:6d:82:40:d3:58:d4:f4:4f:e6:19:90:80:84:68:
                    ab:60:ec:5c:f2:86:2b:15:6e:6a:6a:8c:1d:cc:9c:
                    29:14:10:81:bf:1b:e8:f7:6d:1a:32:86:e5:78:48:
                    27:2c:f6:c2:b5:c2:f4:51:bc:cd:60:83:fc:b7:b4:
                    1e:86:04:51:65:87:14:53:87:2e:e9:9e:46:8a:59:
                    e5:be:36:81:07:52:13:e2:24:96:f0:98:b2:47:22:
                    20:57:59:32:2a:5c:04:31:c6:19:76:7f:42:da:f1:
                    bd:c5:62:98:29:91:46:e3:32:73:90:a2:c4:ca:89:
                    e5:09:48:eb:0b:44:1c:e0:b4:26:54:43:6a:a3:f3:
                    18:9f:4b:29:5c:e8:64:d5:34:18:d7:e4:c9:1c:d1:
                    bf:01:4a:a4:55:53:48:19:f8:b4:22:0f:05:35:50:
                    a3:02:62:b6:a4:73:ad:dd:3d:6b:6f:28:4b:68:01:
                    6a:28:3c:76:37:dd:e8:14:81:ff:b6:e7:9b:50:3b:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5F:88:E4:1A:0E:6A:6D:6B:D7:F4:65:6E:58:C8:1B:E0:E0:50:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/27179f3e-bc50-3123-a91f-37db21b542b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:b3:07:af:75:4f:b4:b6:ad:19:20:9e:c9:2c:5e:26:05:
         c5:27:63:de:37:4a:ed:6b:6f:0b:90:b1:f2:68:ef:7b:5b:70:
         f2:1b:c0:dc:24:b2:03:59:97:09:24:e2:47:8f:77:f3:fc:22:
         30:1b:af:b8:4b:ee:ca:64:30:b6:d2:5b:07:4d:dc:e2:c8:10:
         96:b2:aa:fe:d1:ef:2d:9e:ac:c8:42:5a:e7:66:53:54:7e:c6:
         20:f0:32:94:28:f5:41:f2:f9:24:f2:c2:84:02:6a:5a:c2:c8:
         eb:42:89:b7:e8:53:90:b0:97:a8:d0:d4:09:21:91:44:1c:8f:
         dd:ca:56:74:ff:39:38:bb:9e:0e:af:f6:7a:61:ae:18:d0:fd:
         ea:f3:d8:e9:dd:59:c0:b7:ce:a8:71:d0:64:53:a7:93:b0:e9:
         4a:d9:63:7d:42:d4:6c:a0:d2:ee:45:b2:34:52:21:e4:ba:da:
         01:1a:0e:f1:23:81:3a:80:a3:83:fe:c0:94:73:e5:bc:75:8d:
         9a:42:25:d6:ac:55:78:93:f2:31:30:6b:ef:7a:06:ba:12:00:
         73:10:72:f7:71:0e:1b:db:31:24:e9:6e:30:d6:f8:dc:4d:bb:
         79:9d:f0:f2:70:c0:61:96:ca:50:4f:15:42:62:bf:0e:ed:52:
         31:4b:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:44 2026 by rpki-client