Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
File:                     5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa (raw, json)
Hash identifier:          lZl+bgZdl7Buqo8dzaC8bYRgcAp4WsQ+82u8fG2xeSw=
Subject key identifier:   DE:00:7C:EF:B2:F6:C8:22:88:01:B6:7B:41:AF:BA:77:8E:BA:2B:01
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584D4A8F902877F429902B2C8D26
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     10359
IP address blocks:        216.165.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:90:28:77:f4:29:90:2b:2c:8d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a9f3bb29-253b-4e2f-8082-64d7f65df797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:82:b1:24:0d:fe:c3:bf:97:17:41:5d:a9:ac:
                    88:3f:98:98:47:e1:c8:a4:5c:89:6b:4b:65:2f:a1:
                    01:c9:5f:a1:92:41:0e:6a:6b:80:c1:cd:53:85:f0:
                    c2:84:f2:f2:6c:1e:48:ea:02:4e:e0:5d:c0:51:33:
                    b5:48:af:ac:f1:4d:39:ce:24:8b:91:64:33:1a:e8:
                    fb:81:a4:91:b8:40:a0:ed:fa:36:1f:54:cf:fd:14:
                    99:8a:b7:fb:02:b3:17:2d:da:14:93:91:c7:88:8b:
                    be:57:80:f0:72:14:e6:b9:00:27:ad:b3:1d:c4:e7:
                    52:56:e7:41:88:f6:d3:2b:27:13:22:55:75:9d:eb:
                    8a:f5:da:84:a4:c2:31:6a:2d:2e:5b:a5:ca:6b:5f:
                    8d:43:2b:44:5d:63:1f:c4:41:e6:30:86:e3:32:fa:
                    05:6d:3d:78:64:d5:34:7e:d7:5d:d5:8b:61:e0:e5:
                    22:03:11:ba:43:bf:c7:d3:69:55:dc:7b:2a:e5:d1:
                    d6:cb:e5:57:84:c9:b0:7c:3e:ab:b1:33:c1:2c:c9:
                    4d:1b:9d:e8:b3:4c:ff:87:7e:a3:e0:6f:66:59:60:
                    75:86:e7:c7:23:fa:f1:1e:ee:0b:46:9d:3e:64:73:
                    65:34:64:57:d2:0b:7a:1a:0a:63:05:c1:34:9c:dd:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:00:7C:EF:B2:F6:C8:22:88:01:B6:7B:41:AF:BA:77:8E:BA:2B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.165.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:58:df:4a:00:e4:95:95:fd:5d:90:41:6c:c3:45:f0:ad:19:
         db:cf:11:af:0f:4d:57:ef:28:d8:28:4b:85:cc:3a:7a:30:4d:
         14:27:ec:1e:74:27:03:0f:eb:12:60:43:91:2f:78:37:6c:b0:
         30:fc:48:15:d4:44:44:de:c9:b1:9f:dd:12:13:ac:e3:a0:20:
         0d:82:b0:8e:73:b3:2f:14:20:d5:15:24:1e:5f:5a:59:6d:10:
         dd:23:81:5a:df:2b:3b:59:de:18:05:c0:e7:2f:b0:8c:be:9e:
         53:94:4f:0b:63:b2:4b:74:67:1b:f9:09:2e:ad:4d:eb:d4:9f:
         76:ef:06:5a:50:c9:3d:e5:65:fd:3a:15:7b:34:85:29:30:d5:
         f7:31:91:a4:54:1e:34:d8:8e:b5:de:1a:b2:7a:51:c6:0a:30:
         c8:b4:1d:99:3b:0d:04:49:86:89:68:e9:63:60:30:8a:39:1f:
         f1:ff:05:8b:ce:ac:23:33:cf:be:02:cf:8b:dd:7d:ed:b4:28:
         94:1a:3f:2d:ef:dd:d6:d2:dd:de:18:68:41:b2:10:ed:ab:11:
         74:67:08:9a:db:38:ee:05:f4:ec:04:ed:aa:67:f7:87:6a:e4:
         42:8a:7c:10:77:b2:98:d8:2d:20:3e:d2:17:39:37:5f:b3:49:
         26:0e:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:53 2026 by rpki-client