Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
File:                     27630bc9-21ee-3705-9069-342020cb3901.roa (raw, json)
Hash identifier:          Ripu+bUOLUomFwGbqN80jYbax8jNeqqcti6EpnTA9l4=
Subject key identifier:   ED:3B:18:67:2C:B4:6E:5F:A3:26:B2:C1:89:ED:26:1F:1A:16:7E:27
Certificate issuer:       /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Certificate serial:       010D0C9F4328584D47C4E6A37111918820C3D100
Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     11399
IP address blocks:        137.165.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e6:a3:71:11:91:88:20:c3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=bf407307-3803-4ef0-80dc-aac74e75070d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:5b:74:27:73:4b:79:bf:23:8d:44:45:28:
                    75:4a:55:a4:79:5b:32:f3:bf:d7:9a:cc:07:37:11:
                    bd:ce:17:7f:7a:20:e6:db:07:5c:4b:2c:f2:bb:67:
                    ee:69:a0:c7:91:19:91:58:d8:77:c2:ee:12:d8:d7:
                    0f:ea:69:86:21:cf:7f:c9:5f:19:80:37:66:dd:cf:
                    4f:c0:1d:c1:0e:0f:69:6c:c9:37:ef:b7:ca:ca:0e:
                    91:48:ed:d7:61:25:26:c5:ca:5c:d9:7c:00:20:b9:
                    a5:66:47:46:42:95:62:1c:f4:f7:21:cf:9c:d5:1e:
                    25:65:f3:d7:ff:03:db:22:09:0b:15:50:a0:87:b6:
                    1c:65:21:71:a3:cb:04:40:99:62:8a:52:ec:4b:25:
                    82:ce:02:e7:ec:99:a3:05:dd:73:bb:93:f4:16:ef:
                    52:51:25:18:30:fd:a3:35:17:63:02:d0:fb:7b:df:
                    e9:bb:01:85:30:57:3a:06:90:79:17:a8:5e:b4:11:
                    14:13:f6:eb:00:e6:fa:99:47:83:ca:25:2f:01:16:
                    eb:76:16:5a:b5:58:c3:11:7b:2f:1d:9b:52:d0:1a:
                    50:b8:08:9d:27:a6:dd:65:3f:f8:74:4f:e5:4a:24:
                    b5:4a:e9:47:ce:2c:5c:b7:bb:1b:a4:98:3c:85:3f:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:18:67:2C:B4:6E:5F:A3:26:B2:C1:89:ED:26:1F:1A:16:7E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl

            X509v3 Authority Key Identifier:
                keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:86:7e:d0:9a:93:fb:57:58:81:0a:3e:ed:ac:42:1c:2b:
         dc:15:be:9c:d1:aa:6d:24:dd:8a:3b:91:9c:c3:2a:90:94:ab:
         58:96:d0:5c:5e:cf:bb:36:24:60:35:c8:13:5a:20:1a:15:31:
         e2:38:1d:92:18:e4:2f:fa:c7:9c:93:f3:45:8b:f7:ca:f0:95:
         e5:57:d2:0c:59:af:fe:a9:17:0b:56:9b:1a:5e:76:fb:5f:d2:
         4b:4e:70:02:3f:c1:f1:56:e9:68:21:f2:ef:58:76:2d:57:af:
         0b:73:26:c0:6b:79:79:4c:61:8e:10:e7:0d:df:a3:49:a4:1f:
         91:45:a0:84:e7:2a:fb:f8:28:f3:1d:f0:12:2f:02:dd:ab:d6:
         bf:6a:7c:ae:1a:3b:99:ff:32:d0:9a:5a:31:f4:fe:e4:c9:7c:
         68:f8:b8:d7:e4:de:5d:b0:87:c5:b4:70:6a:ea:65:f5:69:cc:
         23:77:1f:c7:69:a0:01:66:4e:90:ba:29:0d:fd:ef:cb:fb:13:
         c3:b0:d3:b1:7b:c3:ad:c7:d0:94:55:d9:62:20:24:c6:e8:dc:
         6d:10:3c:7b:c5:12:57:ef:88:40:79:6c:d2:4c:59:2e:89:6d:
         63:d4:15:61:ae:f1:52:a2:e8:25:52:8a:23:a1:fa:47:03:aa:
         42:7c:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:03 2026 by rpki-client