Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816a4afb-fa62-35ac-8103-75e674550124.roa
File:                     816a4afb-fa62-35ac-8103-75e674550124.roa (raw, json)
Hash identifier:          OEYkLIQgZYb2yQ3y/TLmE6Zckv6ydoLPxpPonbCTh80=
Subject key identifier:   33:0E:95:34:3C:21:80:A8:D5:C9:49:CE:E7:42:47:04:19:A2:EA:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001815306844245DB9D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816a4afb-fa62-35ac-8103-75e674550124.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     36628
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:18:15:30:68:44:24:5d:b9:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=d9c8ff4b-6dea-4c44-bf7e-1a67a6644975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:e7:11:0f:b0:90:2a:80:22:ba:7e:c6:4a:
                    c6:24:e2:af:f9:62:56:6f:bc:d7:1b:00:d7:8b:6e:
                    a5:4b:f0:16:bb:43:04:c0:60:77:dc:2e:c4:ab:a0:
                    00:f7:8f:60:25:ee:2b:92:42:ba:91:ad:ea:11:90:
                    c4:0b:69:cf:78:c7:1e:be:09:91:86:aa:d7:a6:9c:
                    87:9c:46:2c:02:6b:68:42:83:9c:72:87:93:04:cb:
                    e8:84:ee:7f:28:29:aa:32:bb:ab:d0:8d:14:f2:a2:
                    52:a7:e9:d3:fc:a8:ea:b3:1e:37:5b:ad:10:e0:3b:
                    b0:bd:e8:43:09:59:7a:c9:f2:b7:a5:4f:15:bc:c8:
                    03:7f:6b:9b:6b:af:c8:4c:3c:3a:72:c4:c6:52:a4:
                    ce:7d:ec:36:28:24:eb:c2:24:e5:02:e3:4f:2b:62:
                    f5:c7:56:62:04:89:ce:dd:95:dc:53:a7:8e:2e:a9:
                    72:e6:3f:db:75:a6:1c:45:40:d6:d8:ea:0d:b5:be:
                    0e:11:8d:77:8a:20:4f:44:3f:45:a1:6f:f7:fc:5b:
                    2f:09:c2:a4:f3:49:0a:42:37:92:dd:57:12:35:3f:
                    c0:5c:2a:96:f9:3e:00:8f:f3:28:99:6f:2b:88:d1:
                    64:64:b4:22:2d:9a:dc:e6:a0:22:1a:ba:54:9c:64:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:95:34:3C:21:80:A8:D5:C9:49:CE:E7:42:47:04:19:A2:EA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/816a4afb-fa62-35ac-8103-75e674550124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:76:44:ac:f7:1a:f6:4e:e3:e5:12:d8:ad:f2:68:86:8e:a7:
         81:f8:e1:ef:d7:f4:38:ff:1a:69:7c:d9:7c:95:ed:68:a2:bc:
         37:7d:10:ac:7f:c9:80:92:d7:ca:b8:d3:23:69:4d:e2:ab:5f:
         0c:cd:a1:5f:1f:2c:79:22:72:8c:db:73:8d:9d:a3:4c:ce:52:
         f5:74:da:62:4a:a9:c0:65:1f:8e:98:f6:7c:85:cb:ba:f3:c1:
         cd:5a:d1:a1:8d:77:d0:a8:04:e8:86:49:0a:8e:5a:88:8a:0c:
         1c:df:70:af:df:83:1d:5b:9b:5f:62:3e:b7:6c:ef:7f:2c:7c:
         09:a2:e7:d5:55:0b:61:d1:55:93:33:c4:b9:bd:01:db:e5:88:
         b7:34:61:e5:ba:01:ad:c4:f2:56:99:41:7e:ec:1b:d8:42:ed:
         75:86:fe:21:1f:8f:4c:0b:4e:f0:04:f5:83:49:f5:04:2a:e3:
         f5:47:58:2e:4b:94:f1:3d:96:c9:95:d3:cd:2f:5a:b3:37:c1:
         0d:ba:c5:51:02:90:ba:96:30:40:c7:b0:e6:78:bd:c2:95:76:
         fa:35:5e:02:00:93:09:b7:f7:3b:cd:24:cb:4c:a1:90:22:85:
         5d:27:d9:17:3e:d4:1b:84:a2:c8:62:83:8e:08:32:11:50:ba:
         35:68:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:13 2026 by rpki-client