Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/7ea8dd10-06e6-3260-a586-14104a971716.roa
File:                     7ea8dd10-06e6-3260-a586-14104a971716.roa (raw, json)
Hash identifier:          xrk22mgO4dnTAD0Iey6+VQYW3I//Rs1Fy0oGM7w4uwY=
Subject key identifier:   3C:A5:F8:23:18:64:77:C5:25:97:8F:12:9C:30:9B:48:5A:4C:7A:09
Certificate issuer:       /CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
Certificate serial:       010D0C9F4328584D1B1A18DF8389729AD1CF7D90
Authority key identifier: B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/7ea8dd10-06e6-3260-a586-14104a971716.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     18013
IP address blocks:        162.251.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:18:df:83:89:72:9a:d1:cf:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=0d33190b-4918-4e27-8374-6d3460f6a642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:af:7d:bb:6f:a1:3f:41:88:42:5c:f3:c4:
                    a0:18:7b:c7:af:fd:e5:4f:1c:f0:f8:51:c6:a1:40:
                    9b:59:78:98:1c:71:f6:45:c7:7a:05:08:f2:e0:9b:
                    5a:c4:9c:85:34:fc:f0:ab:40:c8:49:ec:72:42:8d:
                    ad:4b:c3:d5:dc:c7:08:e3:ed:fa:d5:8b:c1:2a:e4:
                    6a:e4:fa:66:e8:96:70:dd:2b:38:ed:86:b4:9e:b9:
                    8c:d7:57:05:34:a3:01:0f:de:3f:af:ec:3c:fc:90:
                    e5:f0:bd:63:90:8a:8b:97:81:9c:6b:57:04:fe:66:
                    68:69:e6:29:e7:d0:aa:0e:d2:47:ea:a6:29:99:39:
                    55:26:cc:28:bd:a0:13:bf:39:ae:af:80:aa:f4:5a:
                    4a:06:fd:7e:7d:2f:f4:d7:84:bd:24:7b:f6:25:cf:
                    2e:c0:c5:e2:3f:57:f6:6e:e8:ef:31:02:43:8f:8e:
                    11:a4:a0:fc:b6:a5:6f:ec:7d:ad:ad:97:19:a2:f7:
                    ef:c9:c7:b1:55:5f:7f:a1:65:ab:f5:5b:33:b8:0d:
                    1e:02:60:da:4f:e8:6f:41:31:6d:e6:74:74:40:5d:
                    e5:98:8a:29:51:3d:46:fa:79:39:0b:19:67:5c:c2:
                    72:d6:a2:83:03:a4:2d:86:bf:1d:6e:5c:cf:f0:fe:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A5:F8:23:18:64:77:C5:25:97:8F:12:9C:30:9B:48:5A:4C:7A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/7ea8dd10-06e6-3260-a586-14104a971716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:31:95:a0:33:c0:f2:aa:5f:f0:53:64:73:12:d5:60:da:86:
         fb:06:4b:e2:a7:30:61:ec:5a:a0:ed:cc:79:88:5c:c4:2c:bd:
         29:51:02:b6:e0:42:cf:b4:77:e2:d8:bd:e8:56:f0:8f:c0:32:
         ae:1d:f0:d1:58:c6:b5:37:15:da:d7:32:b9:02:bf:e8:4b:5a:
         e8:1c:d3:cf:d2:c3:5f:f2:35:20:c2:35:fd:0a:5e:68:29:c7:
         83:03:11:ad:4a:66:48:11:46:31:79:36:06:cd:b2:fb:60:91:
         7b:ed:6f:27:cd:0c:05:40:02:6e:7e:da:ac:66:86:7a:45:8c:
         d6:01:d7:d2:ef:28:09:85:f7:69:fd:fb:f9:ea:95:95:ff:a7:
         8a:13:24:fe:62:86:cd:cc:6c:2c:ff:7b:1b:75:cb:e4:9e:7f:
         b3:84:d4:0f:cd:31:ac:77:34:3a:77:4c:88:7c:8c:6c:2a:29:
         19:80:bf:21:68:20:8f:75:a4:21:d0:2f:62:09:a1:a4:f0:83:
         6f:c8:53:81:05:98:d8:06:a0:4c:4d:1e:1d:38:f5:27:8a:89:
         88:61:43:4f:9e:d7:96:01:c5:46:f0:89:03:bf:77:64:25:60:
         69:f1:29:46:91:21:31:d0:c9:a8:9d:fa:b5:0a:51:ce:5c:22:
         92:0a:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:19 2026 by rpki-client