Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa
File:                     eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa (raw, json)
Hash identifier:          NnhjT9RujF17vpsqVCb+Uc6nHJve5tbIqAMw9NEfkP0=
Subject key identifier:   73:CC:FE:E4:08:BE:98:68:91:6A:57:3D:98:25:94:F1:8C:5B:81:78
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584D40CA4A2F8CE282D35835E7E0
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     394080
IP address blocks:        172.110.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:4a:2f:8c:e2:82:d3:58:35:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a5461471-ad95-45b8-8a24-1f1d3a924f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:e6:c5:0c:e3:06:dd:3e:6f:15:9a:c7:56:
                    68:a8:a2:91:a3:f9:99:5d:b7:2f:23:07:b6:55:c8:
                    52:22:7b:b3:04:f3:1d:c5:2f:a1:3a:1c:8b:0f:12:
                    ec:15:3a:17:dc:c7:9d:10:e1:50:fd:a4:9b:cc:3d:
                    0f:ee:11:e7:36:06:54:17:d4:94:11:60:1e:c6:b0:
                    56:41:e6:70:3e:c3:db:df:60:4a:1e:f9:de:d6:b7:
                    f8:b1:5b:64:71:b2:a6:5b:54:9b:c1:04:df:e1:52:
                    bb:ca:4b:1f:c8:c0:45:82:a6:9f:0d:df:f0:42:0e:
                    d4:9c:e6:d5:54:5a:5f:88:20:86:09:df:a7:d8:73:
                    9c:cc:13:cc:32:ad:70:97:be:79:24:fb:b9:96:65:
                    2a:ea:e9:39:b1:97:ec:e6:f2:d5:6f:69:1d:52:02:
                    d7:b5:86:63:f9:cc:2b:57:0b:44:57:d6:e7:be:6e:
                    a5:8f:04:04:fd:f0:6c:69:4a:7d:e4:52:08:33:6e:
                    87:22:1e:e4:ed:6d:d6:2d:9d:24:40:03:7b:de:1b:
                    b5:89:f5:01:d5:ca:35:68:df:cf:9a:5e:8e:b9:c7:
                    08:e1:9b:bb:f0:af:23:2f:f5:90:df:87:87:24:db:
                    c0:a8:24:9e:0c:5d:9c:65:fb:ad:7a:f2:da:31:47:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:FE:E4:08:BE:98:68:91:6A:57:3D:98:25:94:F1:8C:5B:81:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/eb8c7ee7-23ae-3652-8702-636835ed9f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:6e:84:2e:cd:4e:9e:e9:bf:de:02:5b:57:76:49:c9:75:
         9e:23:36:c8:ef:ff:af:4c:59:bb:13:0f:49:f4:3f:54:1f:55:
         d1:fb:21:9e:57:a5:39:c8:56:ee:3c:de:6b:8a:4c:a1:7f:2c:
         16:e0:18:c1:1e:da:dc:42:c2:d6:35:72:e3:7e:9c:b7:2d:cf:
         69:3b:af:59:4a:4c:32:c4:8d:f2:52:50:29:f6:d3:da:98:ae:
         80:fd:ee:8f:79:af:c9:aa:d2:9f:2b:15:f7:67:31:8a:53:d6:
         ac:0d:6e:b2:81:0d:e6:71:9c:5d:95:90:ff:ed:4b:2a:de:8d:
         46:be:ee:a3:8b:39:d8:f6:a6:58:0f:ae:ad:1a:f8:d1:1d:f6:
         9e:4e:f4:a8:92:f1:6f:c9:65:85:e7:64:22:0c:86:45:ea:cb:
         00:ad:0d:16:40:fa:95:13:37:b6:1c:ac:61:57:9b:b6:5b:c1:
         57:f0:5f:98:11:4b:48:90:7e:2d:b7:b9:ba:23:14:83:36:e4:
         b6:cb:a3:83:1b:da:44:58:ba:81:12:3e:b4:3b:62:47:3d:37:
         cf:7f:36:c4:52:65:55:2a:2b:b7:99:5a:04:66:4d:d5:b6:74:
         0a:33:27:77:5d:e4:8c:c3:3e:f9:87:40:85:29:56:41:54:f8:
         18:d7:71:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykovjOKC01g15+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdmNDI2YmMtZTAxNi00ZTMxLTg0MjQtYmM3Y2I4NmE4
MDhlMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YTU0NjE0NzEtYWQ5NS00NWI4LThhMjQtMWYxZDNhOTI0ZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DnmxQzjBt0+bxWax1ZoqKKRo/mZXbcvIwe2
VchSInuzBPMdxS+hOhyLDxLsFToX3MedEOFQ/aSbzD0P7hHnNgZUF9SUEWAexrBW
QeZwPsPb32BKHvne1rf4sVtkcbKmW1SbwQTf4VK7yksfyMBFgqafDd/wQg7UnObV
VFpfiCCGCd+n2HOczBPMMq1wl755JPu5lmUq6uk5sZfs5vLVb2kdUgLXtYZj+cwr
VwtEV9bnvm6ljwQE/fBsaUp95FIIM26HIh7k7W3WLZ0kQAN73hu1ifUB1co1aN/P
ml6OuccI4Zu78K8jL/WQ34eHJNvAqCSeDF2cZfutevLaMUfEWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPM/uQIvphokWpXPZgllPGMW4F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0
MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdjYjg2YTgwOGUvZWI4YzdlZTctMjNhZS0z
NjUyLTg3MDItNjM2ODM1ZWQ5ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmNDI2YmMtZTAxNi00ZTMxLTg0
MjQtYmM3Y2I4NmE4MDhlL2E3ZjQyNmJjLWUwMTYtNGUzMS04NDI0LWJjN2NiODZh
ODA4ZS5jcmwwHwYDVR0jBBgwFoAUGw6WAE4CF+OdBPmjHZ7ZA+pr0HEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdj
Yjg2YTgwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG4qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVcboQuzU6e6b/eAltXdknJdZ4jNsjv/69MWbsTD0n0P1QfVdH7IZ5X
pTnIVu483muKTKF/LBbgGMEe2txCwtY1cuN+nLctz2k7r1lKTDLEjfJSUCn209qY
roD97o95r8mq0p8rFfdnMYpT1qwNbrKBDeZxnF2VkP/tSyrejUa+7qOLOdj2plgP
rq0a+NEd9p5O9KiS8W/JZYXnZCIMhkXqywCtDRZA+pUTN7YcrGFXm7ZbwVfwX5gR
S0iQfi23ubojFIM25LbLo4Mb2kRYuoESPrQ7Ykc9N89/NsRSZVUqK7eZWgRmTdW2
dAozJ3dd5IzDPvmHQIUpVkFU+BjXcSw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:35 2026 by rpki-client