Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
File:                     59a8d12c-2901-3f55-9792-58f7dfe71557.roa (raw, json)
Hash identifier:          j1Ey00qTPPihITjDRGmT7RkKaQ4uB1s3+QNC/mGK3+0=
Subject key identifier:   A9:B3:F7:ED:97:C2:FF:DA:7B:52:AF:F3:02:E8:1C:DB:5D:2A:21:E2
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F4328584D492A6DD45D957FF41F5C33C0
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        155.72.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6d:d4:5d:95:7f:f4:1f:5c:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=8ff8480c-fee9-4c5c-abee-8a884f5ef2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:1f:ea:f8:df:65:aa:d0:13:a5:d7:e4:ad:
                    a0:ed:3d:e6:1a:a9:fe:77:f1:2e:6b:f3:f3:a8:7f:
                    fb:33:9a:2f:e5:22:8f:e7:72:42:c8:fd:26:01:cd:
                    32:36:8d:71:d2:4f:8d:8e:31:b9:29:6b:dc:78:c1:
                    c0:20:91:cc:d5:9f:26:ac:18:ca:ee:73:28:e1:f8:
                    d1:92:21:a1:7c:46:b6:46:b3:8d:72:8b:23:eb:98:
                    d3:67:7c:d4:96:72:42:96:d4:87:4d:4c:99:d6:a2:
                    e7:cc:99:25:dd:cb:0c:a3:3a:30:f5:df:87:d2:74:
                    d0:52:7d:c0:35:05:29:9e:7a:13:3d:2c:e4:41:2c:
                    24:c8:2d:f6:7b:b9:9a:56:ee:cc:0a:56:5a:e2:16:
                    1a:ba:ec:3e:cc:5b:5c:dc:96:78:b7:40:71:02:3f:
                    d9:7f:fa:81:cb:aa:8b:31:87:e7:78:11:e9:54:f7:
                    d6:11:0e:5d:b0:c9:c1:c3:b1:86:ca:b7:c7:1f:3a:
                    e5:ca:e2:4d:0b:60:95:9f:d2:29:f1:28:d9:51:51:
                    31:aa:36:8e:1f:fa:0f:1c:0d:f2:66:22:5c:73:4e:
                    5b:0f:79:33:89:b0:c0:46:67:f1:7c:ac:80:91:e7:
                    34:cb:44:20:1d:e2:d3:42:48:03:5a:02:b0:db:df:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:F7:ED:97:C2:FF:DA:7B:52:AF:F3:02:E8:1C:DB:5D:2A:21:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:5a:ff:5a:dc:14:80:26:e8:95:19:03:69:16:36:c0:5b:
         a8:91:ef:be:b7:85:ac:f7:29:65:fc:03:23:1d:a3:b1:e7:dd:
         3c:67:85:79:cd:fe:43:14:3f:fe:d7:ee:f6:0d:69:f2:dc:bc:
         60:35:e2:82:78:3b:05:fe:8e:92:30:1d:c7:20:34:1d:9b:02:
         af:4c:bc:d9:d9:7e:86:f7:fe:3e:c9:9f:ff:30:c9:87:ec:c5:
         d2:f5:d7:2c:13:f6:f5:34:e4:1f:39:fb:4e:f6:d4:33:ec:ea:
         7c:69:e2:4a:17:11:6b:c1:d7:07:89:e6:b1:74:b8:52:16:f3:
         cc:61:d9:d7:71:48:4b:ee:e6:93:c4:9e:39:7e:55:a7:c3:be:
         c9:47:8f:54:6b:db:86:a2:f1:0f:dc:98:cd:90:b6:db:76:67:
         27:94:58:f0:93:1e:10:16:20:5d:7b:5a:7e:6d:f0:c9:57:60:
         5b:7a:26:05:4b:1c:27:b5:48:af:a1:45:02:69:a7:ea:4c:d5:
         ce:60:77:6b:ec:48:b3:a2:5b:ae:44:6e:28:ff:a8:9f:4c:82:
         24:a4:73:31:60:4a:1d:6a:2e:74:9b:27:a0:36:d5:14:32:82:
         84:bb:c5:04:62:18:c2:7b:e2:ca:66:9b:13:5a:37:03:95:f1:
         42:69:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:08 2026 by rpki-client