Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/f61fa011-e974-3191-aa36-283dc1318cbe.roa
File:                     f61fa011-e974-3191-aa36-283dc1318cbe.roa (raw, json)
Hash identifier:          9vnJrl6dG5laQr8/Kz9+upte9p9O1rIp/+eaT0bHSaw=
Subject key identifier:   A4:A8:7C:2F:B9:81:AD:8E:B2:48:42:E6:16:A7:3C:3D:F5:5E:32:76
Certificate issuer:       /CN=5b076036-1f3e-4d42-8131-88102906b87c
Certificate serial:       010D0C9F4328584D1707DA2DC674E1548BA45780
Authority key identifier: B6:ED:18:34:F6:79:F5:63:3A:3A:39:2C:17:E2:67:12:27:F9:A9:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/f61fa011-e974-3191-aa36-283dc1318cbe.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     16889
IP address blocks:        155.246.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/5b076036-1f3e-4d42-8131-88102906b87c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/5b076036-1f3e-4d42-8131-88102906b87c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:da:2d:c6:74:e1:54:8b:a4:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b076036-1f3e-4d42-8131-88102906b87c
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=0ca03009-3984-45a2-ada8-22ab2f527ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:04:d5:be:ee:0b:25:b6:33:b4:92:d0:62:
                    36:87:17:34:eb:ea:71:43:f4:02:ff:08:7b:d9:75:
                    27:dc:d5:78:dd:d2:cb:3a:8f:42:c8:79:c2:f9:8b:
                    aa:d4:a2:44:29:2d:8a:dd:23:c0:8d:28:89:d1:25:
                    ba:77:7d:53:8e:a0:01:90:3d:6b:b4:83:c1:2c:1b:
                    cb:35:fe:ea:66:c1:6e:e2:23:e3:af:ca:d9:a5:b3:
                    92:f2:4f:39:bb:69:d9:fa:43:7b:ae:c5:97:78:d1:
                    e0:13:3e:17:5d:bc:f9:b7:98:98:9e:00:08:86:aa:
                    d4:70:88:ad:2d:ac:32:24:69:69:ca:43:c6:c2:86:
                    6b:90:ad:62:25:0d:01:d3:e8:4f:d8:d5:f6:38:48:
                    eb:d5:2c:0f:00:03:c8:d6:f0:96:d2:ec:a6:db:8a:
                    78:d7:aa:8a:6b:04:12:8b:c0:6e:b1:66:d3:52:9c:
                    f0:a4:d0:22:54:fc:4c:07:f1:cc:f3:45:0a:cb:97:
                    b6:77:a6:f4:a6:30:da:a2:58:4b:68:a7:2a:5e:bd:
                    9c:4b:69:c4:ee:a1:b1:cd:9f:c9:0b:f3:d1:be:76:
                    30:47:4b:38:02:f8:ad:81:9a:fd:37:4f:b4:5f:d7:
                    95:a9:8c:a2:35:57:3f:0a:4e:cf:83:16:80:a1:67:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:7C:2F:B9:81:AD:8E:B2:48:42:E6:16:A7:3C:3D:F5:5E:32:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/f61fa011-e974-3191-aa36-283dc1318cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c/5b076036-1f3e-4d42-8131-88102906b87c.crl

            X509v3 Authority Key Identifier:
                keyid:B6:ED:18:34:F6:79:F5:63:3A:3A:39:2C:17:E2:67:12:27:F9:A9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b076036-1f3e-4d42-8131-88102906b87c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:cd:2c:78:85:4d:8e:ef:31:d7:f8:15:4e:7f:eb:cf:39:
         07:36:b2:dc:c0:1c:22:83:cb:59:f5:14:14:ee:72:01:ac:70:
         c7:5d:46:71:f9:5c:f3:cb:b5:5b:f3:76:0c:09:90:1a:17:cd:
         ff:e6:ab:d3:bc:7a:42:d3:18:32:a1:a6:88:b9:81:7c:c0:4c:
         d0:b6:40:43:f8:b2:4f:ef:23:0d:c5:52:42:84:fa:07:bc:2d:
         02:42:60:c8:e4:f4:66:12:a2:75:7b:b9:23:09:82:13:aa:d8:
         be:b3:8c:ec:7b:88:83:50:dd:08:f8:83:c3:e7:1a:82:fe:91:
         1b:d3:70:34:3c:20:34:f8:b7:42:7c:26:9f:d1:6d:d2:9f:70:
         d4:05:fb:31:a5:78:cc:d6:85:aa:29:94:1c:72:1e:28:1a:16:
         eb:a7:89:de:89:ad:4a:0d:cd:70:89:ff:fc:18:ca:8a:8e:a9:
         86:d7:12:f4:c6:e5:e0:83:3d:5a:69:55:c6:59:ef:e0:dd:52:
         8e:ef:50:c8:1a:8a:75:dd:63:20:31:4e:b1:6a:bb:b7:91:2a:
         0c:80:77:73:b7:ad:99:7d:c5:d1:5c:a9:1a:2d:cc:a1:89:0c:
         95:73:7d:d5:25:1b:0b:88:94:6b:04:5e:49:64:e0:b6:5e:ba:
         24:e0:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:56 2026 by rpki-client