Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26228c2b-13e6-399a-91bb-52d0d224ef47.roa
File:                     26228c2b-13e6-399a-91bb-52d0d224ef47.roa (raw, json)
Hash identifier:          FrnGviEgRWSxVJPDAo0AAdTE5vuJUUrjSbF4YAF+4R4=
Subject key identifier:   37:50:D3:30:1E:79:4C:03:89:1E:68:56:71:62:A5:6A:B7:DE:B8:FC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D2A74F1913688DCF81E9DB840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26228c2b-13e6-399a-91bb-52d0d224ef47.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        150.48.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f1:91:36:88:dc:f8:1e:9d:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=3d95e0b3-4aa9-41f1-9e23-3952fd4bfd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:25:c3:14:44:fb:9b:35:88:46:3e:46:0d:
                    d4:c1:14:2d:81:31:31:4f:6e:9a:4e:46:e8:bd:1f:
                    40:be:15:18:c2:51:f1:de:9c:57:0e:38:30:d5:e9:
                    60:e8:e9:36:37:ac:40:89:01:b1:df:82:e3:8e:f6:
                    f1:21:80:a5:59:59:b1:fa:2c:98:4c:56:5f:05:99:
                    93:d0:6d:cf:b9:f9:63:af:8a:e9:ca:99:2e:a2:4a:
                    47:e4:61:79:0b:e3:86:8a:92:7b:70:da:91:f6:d2:
                    b7:d2:6d:33:3b:1c:5c:80:f4:6b:54:97:e6:fc:c2:
                    c5:d9:df:10:2a:77:25:a3:c1:c4:26:73:6a:cd:3b:
                    fd:22:1e:23:9c:6f:48:a6:9f:42:08:76:c5:74:da:
                    53:72:6c:1a:72:07:52:6e:c7:52:d4:f2:e5:cb:10:
                    9c:17:77:6d:60:98:19:12:ec:3e:ee:57:b4:45:da:
                    c2:29:b9:79:ef:c1:21:d9:24:4f:4e:44:ab:9a:5e:
                    1c:36:61:14:f4:9e:b2:e3:43:72:7a:2b:02:36:97:
                    01:b3:77:e9:69:42:f3:44:3c:1b:36:9a:26:48:6d:
                    a8:7e:0d:f5:e7:a8:b6:10:d3:bb:fe:ed:1b:77:c1:
                    7e:55:dd:02:ac:a4:2c:4a:1f:78:cc:09:2c:ed:29:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:D3:30:1E:79:4C:03:89:1E:68:56:71:62:A5:6A:B7:DE:B8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26228c2b-13e6-399a-91bb-52d0d224ef47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:db:31:7a:95:06:ee:7d:4b:98:e0:ed:87:9c:7e:20:a1:81:
         cb:f3:58:63:5a:23:32:28:71:64:5b:b5:cb:28:7c:0a:67:d3:
         60:6f:06:79:b3:6c:42:9b:65:86:b3:59:6b:60:2b:47:86:46:
         b5:1e:5c:dd:14:77:54:8c:d8:1f:32:93:43:c4:e5:12:06:bb:
         7d:5c:ab:c9:6f:07:cc:b8:76:77:2f:2d:de:03:0c:75:d1:86:
         c2:d5:e3:b0:e6:39:06:93:f1:7e:39:66:b4:ae:1f:e4:4e:cd:
         73:e4:e2:fe:01:cd:3a:d0:67:9d:41:c6:ec:6f:b7:76:8b:5e:
         f9:36:af:d1:cf:e0:23:33:f8:a6:e3:53:ca:ac:18:5e:2f:ec:
         fb:bc:54:d6:6c:8e:e1:c5:b0:e4:76:7f:ca:4c:7d:9d:06:5c:
         7b:a7:19:2c:9e:eb:6c:77:26:22:58:34:10:0b:26:1e:b3:a5:
         5c:02:9c:52:91:66:4c:b3:cd:d8:f7:42:40:04:36:97:88:ce:
         06:97:d0:54:7f:e9:6b:65:ab:8c:e4:65:a8:0d:92:86:c7:19:
         a8:43:59:e3:ed:96:db:4e:e6:0e:68:01:2a:ee:08:b3:df:2d:
         06:54:7d:9c:c1:e1:41:18:6c:fd:42:30:22:ba:74:e8:1d:f1:
         93:b8:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:29 2026 by rpki-client