Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
File:                     fb067586-180b-31bb-9e56-5603dfecf409.roa (raw, json)
Hash identifier:          AZH0pAvoY/tBs+K2shawSl616bKbAzhJsbRNJ9PjrGo=
Subject key identifier:   9B:38:1C:53:AA:D2:26:81:BE:77:A3:EF:A0:63:52:A8:5D:AE:1C:25
Certificate issuer:       /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial:       010D0C9F4328584D300A32DA645907E71FA5D9C0
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     401408
IP address blocks:        216.181.130.0/24 maxlen: 24
                          2602:f7c8::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:32:da:64:59:07:e7:1f:a5:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=382f8f69-9158-4330-8d72-f285443aab83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:14:98:33:74:7f:20:8c:35:bd:fe:80:1a:
                    77:50:95:f0:68:fa:4f:0a:f0:97:93:d5:a1:6a:71:
                    5a:be:5a:1f:30:de:16:0e:d2:9f:44:b8:d6:50:c0:
                    02:bc:ca:69:44:5d:d7:66:a4:6e:a0:53:74:26:b2:
                    10:f6:d6:ac:7a:db:3c:95:2d:e8:3d:ca:09:02:d7:
                    3b:97:38:1a:3c:f3:59:a9:bf:97:6a:3a:3b:15:86:
                    1c:65:0b:88:a7:a4:c1:e5:63:0a:a6:f9:25:c3:57:
                    b1:5b:16:a0:cc:88:c0:41:85:00:1f:82:f8:71:c1:
                    82:e9:18:62:e6:19:30:c9:1f:3c:9d:03:a2:1d:b3:
                    e1:b3:bd:a4:6b:be:7e:5c:cc:bc:25:09:37:3d:f4:
                    1f:6f:cf:16:12:53:cc:35:0a:4c:d1:52:c0:87:cf:
                    ea:46:ec:01:d8:a0:21:30:61:d1:ae:3f:24:63:6e:
                    c1:ed:48:55:73:ac:2d:2e:c6:70:b4:e3:45:f3:3f:
                    d2:0d:67:a4:07:f8:e5:38:ab:39:62:fe:a8:6b:9f:
                    62:fb:b8:d9:99:fe:86:70:60:d1:13:ca:08:e7:2f:
                    31:86:a6:cb:66:da:c4:c9:ac:94:9a:d4:03:61:f4:
                    2a:08:fd:3b:7b:ef:6f:fa:0e:f2:d3:33:4e:2a:9b:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:1C:53:AA:D2:26:81:BE:77:A3:EF:A0:63:52:A8:5D:AE:1C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl

            X509v3 Authority Key Identifier:
                keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.130.0/24
                IPv6:
                  2602:f7c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:b0:91:24:1d:db:62:3f:4f:b2:25:40:f4:e6:a7:47:af:
         7e:7e:19:23:8d:68:14:75:c6:f6:4a:b3:f8:56:25:0a:44:1e:
         ee:fa:9c:b4:73:91:e2:98:09:fc:b9:05:fd:e7:bc:ed:98:75:
         61:ec:cc:7f:df:f9:62:ee:88:d4:85:76:b2:f6:5f:c5:18:b0:
         10:ac:b4:58:ed:49:15:62:a8:85:a3:ca:7a:28:ca:48:1c:5d:
         36:b1:f3:e3:0b:83:45:eb:bb:9c:71:2c:f2:3f:6b:2c:17:49:
         4b:8f:84:f3:04:8b:08:b0:2d:06:56:53:23:01:38:a2:29:39:
         a6:fb:89:2c:19:6a:2e:48:bd:bf:c4:cb:26:d7:2e:bc:20:b7:
         59:83:59:b4:66:87:29:d4:fc:40:33:2a:ba:c2:91:8a:64:a3:
         2e:7f:e3:6d:68:d5:46:d6:1a:27:99:b7:92:47:02:53:a9:57:
         bf:30:8f:44:d8:e6:0d:8b:47:37:33:17:b3:12:ee:33:3c:74:
         64:25:6e:1c:36:43:42:13:fd:6a:c0:76:8c:50:be:bc:6c:1c:
         c1:95:51:bf:ad:1b:bb:4b:4a:e5:8d:77:ce:a5:0b:54:06:31:
         7f:92:f5:dd:49:56:91:4d:8e:0b:a8:9e:8e:d6:13:b0:ed:32:
         ea:45:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:04 2026 by rpki-client