Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc771ce9-0640-3a8d-9e9c-471ad0096715.roa
File:                     dc771ce9-0640-3a8d-9e9c-471ad0096715.roa (raw, json)
Hash identifier:          OMysRJ7NbaQbcmeE5LYlz8Bzy7CtFlKzPLNHpAmtq+I=
Subject key identifier:   BA:C6:EA:7D:36:BF:97:E5:E0:2D:3E:F1:F2:9D:8F:54:49:7B:1E:6B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB27729AE7B75443232CC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc771ce9-0640-3a8d-9e9c-471ad0096715.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        108.167.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:27:72:9a:e7:b7:54:43:23:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=96d24579-851e-4aef-b910-a6cd1fd6b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:96:80:8c:63:ca:1c:e5:75:4f:0b:21:f8:
                    d2:64:fa:7e:ed:87:d3:25:4e:28:92:cf:2c:7f:9c:
                    4d:63:54:d8:65:8f:1f:73:ce:b9:a1:6b:13:7a:9e:
                    bd:31:f3:33:d5:68:ed:ea:e5:c1:1c:34:18:df:09:
                    fd:29:a6:15:8a:7e:ce:f5:07:44:07:3e:72:7f:54:
                    01:f5:bd:a4:39:18:97:78:e8:0c:d9:7c:06:f8:01:
                    d9:ba:e4:13:67:42:a0:58:15:04:31:42:66:d4:bc:
                    b2:0a:a5:c3:49:f9:fe:c7:4a:cb:70:29:4d:7b:3b:
                    55:90:56:2b:0e:8b:17:34:56:ce:12:ae:ca:e7:7d:
                    fd:0f:b8:67:e7:2b:49:f7:1a:2a:3e:02:b5:90:c3:
                    5a:93:55:38:64:75:5f:96:39:cc:e4:c4:ea:5a:02:
                    97:d5:69:8d:c1:f3:69:32:09:f7:1a:8f:29:3c:93:
                    5e:93:f9:f3:00:a6:09:44:9d:2f:e5:43:00:0a:32:
                    11:4e:8f:ba:1c:01:e7:b9:a1:58:25:50:75:88:b4:
                    9b:6f:b2:e2:9e:13:21:16:3e:d6:54:a7:10:17:d0:
                    70:3b:b0:f9:ba:a9:99:66:78:4e:48:a9:1e:0e:e7:
                    83:12:07:df:27:39:52:0d:c6:5e:2f:db:bc:b2:8a:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:EA:7D:36:BF:97:E5:E0:2D:3E:F1:F2:9D:8F:54:49:7B:1E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc771ce9-0640-3a8d-9e9c-471ad0096715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.167.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:aa:6d:fc:a9:64:09:67:e7:b6:22:a1:4b:a2:83:31:c4:
         b5:57:d9:6e:89:d6:4d:f0:94:15:66:dd:e2:33:7f:09:45:b1:
         b4:86:a1:02:ca:13:d0:ea:c1:8f:8f:48:45:a2:00:dd:3c:eb:
         e0:e7:de:d8:61:60:fa:54:4e:4a:0a:09:e5:e0:da:33:33:71:
         24:66:52:39:7c:43:3d:89:e3:e7:bc:5d:9e:fe:18:b1:6e:33:
         4f:55:1f:33:87:47:15:ee:19:0a:b0:3e:18:b7:f5:1b:e8:b9:
         a7:56:64:80:de:8f:42:47:e1:79:b4:70:a5:6f:3b:2a:db:8c:
         4a:5b:8c:8d:32:c1:9b:67:ff:97:7a:fd:f1:78:cf:ca:bf:7a:
         c0:bc:2f:6b:da:7d:60:23:89:49:07:a6:87:7f:5b:a6:6c:21:
         ff:d2:d7:c4:ef:66:f3:1c:5b:9a:fc:5f:70:52:f9:fc:b1:e0:
         55:92:56:96:09:3e:5b:d7:a8:fe:ee:1d:44:26:a8:0e:db:83:
         2e:ba:cd:b6:ae:ae:86:48:46:d7:90:87:bf:83:14:09:c9:8a:
         05:bd:b9:86:dc:d3:df:3b:ab:49:1f:e7:34:d0:34:ca:c7:9f:
         58:e5:fc:ac:22:0f:a0:4f:cf:10:c4:9f:48:4c:23:15:dc:6e:
         b5:0a:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:15 2026 by rpki-client