Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa
File:                     9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa (raw, json)
Hash identifier:          dfcLZ0TAHsIrdmG8AGBbtUz6BBV6O0Xx/WO6iqGduSU=
Subject key identifier:   C7:9F:2F:1D:27:4A:E5:5B:D9:8E:64:A7:AC:F1:D4:26:58:04:92:14
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDB81B7EF706A24EE4300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     397630
IP address blocks:        158.62.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:db:81:b7:ef:70:6a:24:ee:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=ce6bae60-4730-4974-bfca-78484bb16ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:e3:04:4b:b0:8c:1c:f5:ef:f7:8e:6a:4e:
                    86:cd:37:ba:26:7a:cf:b7:56:99:00:78:d2:40:f9:
                    77:f8:b9:4f:e9:19:6d:20:d2:de:3b:a7:a1:7a:4a:
                    82:d4:4b:fb:eb:98:99:96:da:c0:3e:f7:57:d1:2e:
                    f3:48:d0:95:62:b0:10:4f:b1:e0:2a:dc:7d:f3:6a:
                    2f:db:1c:85:68:81:1b:39:a4:fd:5f:82:81:0c:8c:
                    55:bd:a9:08:60:18:68:c1:10:ab:04:72:45:b4:5a:
                    0b:40:20:10:0e:15:54:82:17:d2:9a:37:7c:43:91:
                    df:17:74:3c:7f:eb:6b:80:9f:ce:b3:76:f0:30:1a:
                    df:72:72:4c:5f:3a:10:32:b8:0a:e2:3e:53:f5:7c:
                    30:9d:85:bb:0e:15:6a:bb:27:2b:d9:ff:18:11:3f:
                    05:9b:c0:2f:82:75:38:66:b9:7f:f1:bf:d3:80:71:
                    24:b8:b7:78:c2:6a:00:f5:f9:0f:a3:b7:b4:d2:6c:
                    25:2c:2c:71:ca:a3:ec:0c:84:bf:e3:d9:e8:35:c7:
                    cd:2f:6c:55:d2:73:c8:af:d8:5e:cc:bc:36:e0:f1:
                    b6:18:8e:f2:53:80:7d:dc:50:ab:e0:c5:b3:5a:f8:
                    cf:1f:9b:9d:cb:b5:95:45:a0:f0:2f:f5:3b:bd:d8:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:2F:1D:27:4A:E5:5B:D9:8E:64:A7:AC:F1:D4:26:58:04:92:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9fae2c8f-2a45-3aeb-af5c-f8fcc55ea18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:56:e8:94:2d:ef:2d:6b:c0:2d:12:12:37:63:cc:e0:53:4f:
         5f:16:2d:f0:d2:7a:6a:08:12:b8:2d:65:77:90:44:29:50:94:
         77:40:3d:74:b5:02:c3:ef:26:95:9d:1b:28:7d:d0:0d:13:fe:
         85:28:9b:77:e9:74:39:61:15:6c:09:31:b3:bc:58:c7:36:b5:
         d4:96:9c:e4:5c:6f:f2:c9:a0:49:a9:0a:8e:3c:cf:18:0c:65:
         2c:f7:69:6c:92:1c:8e:a5:8f:1f:3c:8b:45:fe:25:fc:f6:fa:
         1d:cc:2e:a4:5c:e1:ce:c3:15:d8:90:f5:31:6f:08:cb:38:01:
         bf:1d:aa:af:47:d7:cc:51:e3:18:ab:d8:07:99:13:0d:84:09:
         d2:24:33:26:ae:3e:eb:57:fb:8f:48:29:bb:85:1a:c8:98:0c:
         11:df:c6:9a:b5:ad:c7:de:48:42:d6:19:1b:c5:26:07:17:95:
         25:f5:3b:00:cc:44:73:08:5a:fe:6e:4b:49:ad:ec:0a:c1:ef:
         33:ee:3a:13:05:70:18:fe:db:30:f6:64:48:7a:d7:19:e8:b9:
         cc:2c:3e:22:97:27:f7:24:af:a6:3a:6b:63:2a:da:93:fb:c6:
         9a:8d:14:81:d7:14:0e:fa:51:cc:aa:58:f8:3a:11:c8:2b:45:
         46:44:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:47 2026 by rpki-client