Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
File:                     a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json)
Hash identifier:          Sb+L2kuRa0EMkpbQFF0wOZEG3b4QajCjNWJWx6gEsQQ=
Subject key identifier:   77:E5:9D:7D:F8:FE:C8:50:0D:A8:D5:01:3D:71:C2:78:1F:E4:D1:45
Certificate issuer:       /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
Certificate serial:       010D0C9F4328584D3DFFA622C23AB4E9232D1E00
Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     12059
IP address blocks:        216.223.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a6:22:c2:3a:b4:e9:23:2d:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=05f0b3a6-0ad1-49c4-889a-cb90da5f075d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:54:62:99:7c:59:bc:be:98:d4:5b:36:98:
                    c5:28:a9:4e:6a:a0:78:bd:cb:13:44:e6:1d:36:80:
                    8c:ee:f6:dc:74:5f:d0:b0:f7:cb:f4:59:2b:70:69:
                    50:26:ab:32:3a:4a:53:e4:9f:ed:45:97:26:f0:d3:
                    64:7c:e4:a4:8c:82:40:8f:f2:2b:5c:3d:d8:cd:18:
                    b9:f8:61:d8:de:0c:60:43:dc:85:8c:f8:cf:bd:ba:
                    52:0e:45:71:45:a4:07:c5:df:b9:dd:12:3e:9b:4a:
                    70:1a:cd:5d:49:71:36:8e:b3:b7:49:b9:c0:a8:23:
                    e2:3f:8d:6a:ca:34:5d:cd:2d:5b:1a:29:11:4d:53:
                    e0:9c:3a:5c:69:ff:a9:94:6a:4b:04:26:e9:82:3a:
                    50:76:93:a2:75:1f:99:ae:5a:b1:33:85:c2:47:18:
                    f4:fd:c1:cb:3a:13:b6:51:3f:e8:6c:60:1a:a9:41:
                    7f:f7:b0:86:69:0e:46:28:01:b6:af:4e:d7:0e:59:
                    a4:ff:95:d9:15:07:ae:ab:f2:98:6d:56:ed:a8:8b:
                    ce:99:c3:87:ba:5c:7d:c1:b3:9a:c9:eb:08:d5:6d:
                    67:47:e0:d8:03:78:62:cb:38:34:10:8f:8a:d0:0c:
                    2a:0a:4f:bd:40:71:19:39:cb:ee:c1:13:de:60:ae:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:9D:7D:F8:FE:C8:50:0D:A8:D5:01:3D:71:C2:78:1F:E4:D1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:bf:fa:08:85:64:c5:fd:3c:57:41:ac:d5:33:31:a3:75:ab:
         4f:90:e2:c3:0f:90:7a:14:ec:69:e2:49:3f:dd:20:f2:71:d0:
         e4:50:f3:0b:35:68:72:e0:3f:88:98:9d:e0:19:0f:36:14:1c:
         02:ad:54:68:ea:5e:a1:c6:4c:41:df:2c:6e:c7:00:9d:5b:e7:
         89:f0:d6:c2:30:5d:45:52:65:67:03:ef:79:cf:09:bd:44:80:
         46:6f:10:3e:c0:8e:f6:e9:34:75:35:0a:1c:5c:92:6e:28:2a:
         15:f3:ac:64:4e:1e:e5:c7:f3:27:f9:be:ba:a5:3b:48:ed:06:
         96:8b:37:32:50:a0:e1:e4:3d:03:16:de:27:13:f4:1c:dd:71:
         34:cd:a6:d3:dc:99:f3:f8:36:e3:5c:c1:2d:2a:5e:1a:85:b5:
         47:04:c2:09:ea:63:b5:72:e1:4d:d2:c8:d5:ef:4a:c3:e3:57:
         26:64:e1:05:ce:ad:cf:ac:67:53:0e:2f:e3:c8:14:cb:ab:a4:
         fa:39:95:30:a7:51:85:db:fa:48:2d:35:de:13:9c:23:7c:14:
         f6:ac:bb:e8:75:ae:35:0a:e7:9b:ca:fa:f8:18:a9:8a:72:87:
         23:9b:4f:83:2c:bc:c7:ad:cc:62:53:5e:fa:4d:e7:ec:29:6c:
         43:1a:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:23 2026 by rpki-client