Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa
File:                     038febac-a971-356a-a45e-6ac7bc0667ad.roa (raw, json)
Hash identifier:          9CzbQtxHXeauuQsKTpHYJH9dHg/3dKhhEzWQyPTIjgw=
Subject key identifier:   69:7C:66:56:8C:2D:94:78:BE:DC:FA:88:FF:9B:50:B4:A6:13:D5:53
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24DF6842A636C1A5CC76D000
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        72.22.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:68:42:a6:36:c1:a5:cc:76:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=efe44150-d87b-41a6-9c0b-51b976fec01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5c:b6:fe:b9:cc:bd:0c:be:8e:55:f6:6f:f8:
                    66:9a:b8:67:db:02:f0:05:02:62:9d:c9:83:6c:e1:
                    c0:2d:bd:cc:40:8f:2b:64:72:79:61:83:75:cc:64:
                    0c:01:04:d6:2e:c2:6a:d4:fe:30:85:4d:f9:69:86:
                    c7:0d:32:5f:cc:80:61:df:b7:b6:1e:21:98:ae:6c:
                    f9:5f:8b:d2:53:62:1d:c5:9d:a7:0c:b9:0d:18:b5:
                    e5:fe:ce:96:5f:dd:d0:60:b4:d6:38:96:3b:ed:24:
                    a3:03:81:4d:e5:14:82:7b:57:30:34:a1:45:9c:d3:
                    19:71:5f:dc:60:f1:dc:6e:94:81:15:17:f8:4f:40:
                    57:44:19:22:e3:43:f3:b3:03:4b:5b:12:4c:45:94:
                    28:d7:67:e1:88:9b:54:a4:b7:70:8e:7a:ed:64:f3:
                    9d:7a:03:f6:a5:34:83:d0:7d:e4:8d:ff:41:fd:5d:
                    9e:1c:78:40:e2:0a:e6:8e:04:f1:82:e7:d2:d4:fd:
                    25:89:c0:eb:10:7a:45:f6:26:4b:5b:5e:0a:c2:97:
                    f3:f7:13:49:d3:02:a3:d4:2e:2f:a1:07:da:5a:a9:
                    fb:fe:77:26:e6:23:24:6d:54:d7:45:23:23:e7:ab:
                    ec:b4:6a:71:92:d7:4c:d2:cf:b3:1b:e8:ce:3b:fa:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:66:56:8C:2D:94:78:BE:DC:FA:88:FF:9B:50:B4:A6:13:D5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:54:8f:95:28:05:4a:68:49:d6:f0:ea:8f:a6:da:46:49:59:
         35:52:3a:bc:35:4b:15:06:5a:73:07:00:26:5a:eb:e0:08:70:
         89:b0:3a:c8:49:5b:2d:51:2d:0b:ab:76:1d:18:eb:eb:de:22:
         15:7f:7a:39:ab:0e:03:e0:5b:d4:2f:64:1e:b1:be:fb:2b:cb:
         70:5c:64:6f:44:3b:c9:65:78:4e:2a:38:fe:4e:b4:20:25:7d:
         c9:7d:3b:fa:0b:37:c9:6e:74:83:73:35:32:7b:61:b2:be:d8:
         03:b6:9a:4f:1b:66:ed:31:33:80:de:dc:58:19:6d:bf:c7:bf:
         7c:cc:a8:58:63:bb:93:a2:53:3a:81:2e:da:6b:b1:b1:54:db:
         82:49:c0:fb:33:e2:41:bf:37:68:2a:64:7b:0b:f7:90:8b:8c:
         cd:43:00:d6:5f:f4:fa:60:f2:00:27:cf:1d:5e:73:0c:08:d7:
         41:d6:3f:84:e3:64:15:99:58:9e:50:c5:0b:87:0c:b4:6a:a9:
         61:34:1a:eb:7d:a7:8d:aa:29:cd:0f:63:3e:94:5b:9d:01:a2:
         46:93:fe:b4:73:19:bc:d1:c1:6c:cb:ac:a8:83:af:cc:23:37:
         1a:ef:ad:b4:82:ae:b4:9a:7d:69:14:a1:d3:d5:d7:fc:b4:df:
         58:40:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:59 2026 by rpki-client