Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c746568a-4194-38a7-a9a8-29dd46bf9950.roa
File:                     c746568a-4194-38a7-a9a8-29dd46bf9950.roa (raw, json)
Hash identifier:          n6Xxjq/qjMRYPHDTpz6wrx3JTsBuX8r3A1jtgh2b5Fw=
Subject key identifier:   62:0A:C1:1D:10:6F:A0:96:FE:58:86:CD:27:2D:BC:A1:03:F8:13:21
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584D0BDD03C1D8B9AB0EE2803200
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c746568a-4194-38a7-a9a8-29dd46bf9950.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        150.9.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:03:c1:d8:b9:ab:0e:e2:80:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=ed406121-3c81-4b1c-95e6-05ca1e10c156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:e2:e2:c3:6b:c6:0f:ca:51:77:9c:5f:80:
                    37:93:49:25:78:03:d5:60:6a:2c:c6:71:af:eb:fb:
                    63:30:33:2a:22:c1:2c:52:c2:f5:5a:ec:cd:b4:8a:
                    54:09:56:21:83:70:c4:20:c7:2a:b1:4c:f4:60:66:
                    47:f4:fe:bd:3e:55:bc:b0:e7:0d:8b:39:b8:fe:01:
                    63:57:dc:0f:30:44:ff:e9:4f:ad:3a:0b:ae:eb:65:
                    64:89:5c:91:36:d7:a4:32:79:88:f9:e5:f0:a0:d7:
                    3b:70:ee:a4:ab:a1:a0:80:52:d2:1b:76:05:63:21:
                    1b:92:0b:a7:73:2b:f2:41:64:c1:e1:be:57:4f:87:
                    09:c5:20:16:c3:67:be:aa:ca:29:38:fe:7f:35:8c:
                    00:81:4d:1e:49:52:65:35:b5:43:99:45:64:ce:4e:
                    65:4e:e2:e3:c7:44:d0:f8:48:f8:17:97:32:69:2b:
                    89:ea:e0:9c:d0:49:78:b9:0e:ca:05:06:c9:6c:ac:
                    8a:d3:a7:41:b3:63:08:eb:95:f4:d7:84:34:63:8f:
                    61:da:44:a6:86:93:72:80:e2:ab:ef:4e:46:50:e7:
                    21:53:4f:3f:50:a7:aa:0c:36:75:27:71:40:53:0b:
                    31:55:17:0d:ec:05:48:eb:ca:26:13:e4:19:d9:8b:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0A:C1:1D:10:6F:A0:96:FE:58:86:CD:27:2D:BC:A1:03:F8:13:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/c746568a-4194-38a7-a9a8-29dd46bf9950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:c0:b4:34:30:88:19:a7:ce:25:7d:fd:64:1f:e0:17:42:
         27:75:1e:62:1a:78:bc:eb:54:7c:7a:17:d5:91:c3:2c:96:ea:
         12:43:3f:c0:2c:f8:e5:8a:67:12:6d:9c:c8:e1:34:fc:45:8d:
         b7:82:8d:dc:8b:4d:36:86:2d:94:49:9c:1b:c1:d6:a3:f7:12:
         f2:36:4c:13:5e:95:25:e3:b1:7f:23:ad:31:52:d5:98:93:86:
         9d:10:cc:79:b0:2a:47:84:94:5b:3d:97:ea:3e:13:fb:77:df:
         43:f1:c6:4d:63:1c:81:23:6c:4f:af:e5:43:94:fc:07:21:8c:
         bd:f2:84:e8:c5:68:c1:08:93:ca:5d:7b:ff:3e:88:74:df:4a:
         59:ed:50:10:75:de:be:2b:bb:a0:d9:34:c6:cd:ec:37:27:d8:
         ab:b0:d9:7e:5d:bf:9d:bf:ef:b2:36:97:5b:f7:b0:7c:13:21:
         79:5b:56:7b:73:ef:84:24:ab:11:cf:b6:7b:c7:2e:17:db:c2:
         6e:3f:56:4a:cd:90:d9:8a:78:69:35:40:c5:9f:99:73:85:d7:
         0b:18:e1:1f:c4:15:a2:16:73:5d:43:f3:a5:d8:6a:12:1c:b5:
         29:0f:a8:04:28:df:6f:06:30:11:21:de:71:5a:76:01:4d:fa:
         da:e2:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:47 2026 by rpki-client