Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/60e5534e-bfc1-3ad8-a203-ca649e0648b7.roa
File:                     60e5534e-bfc1-3ad8-a203-ca649e0648b7.roa (raw, json)
Hash identifier:          FQQaYrZ1Yfoi2spFeugH6PnoFKDSyJJ9YJmNNRHeUCU=
Subject key identifier:   B5:18:BB:21:E0:1D:BC:7A:AD:6B:C9:A9:D7:84:F8:C4:45:FA:C8:92
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584D3E0005DE900AD1BAE5D967B0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/60e5534e-bfc1-3ad8-a203-ca649e0648b7.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     32381
IP address blocks:        207.126.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:05:de:90:0a:d1:ba:e5:d9:67:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=40d0edb8-a027-4b2f-a7b2-2ce226920e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:2d:50:f0:f0:fe:de:38:64:61:63:1d:7f:
                    05:a5:5b:61:4a:36:9a:94:6b:f6:4e:8c:34:a7:ef:
                    ae:30:5e:0f:84:6e:78:30:f4:0e:03:6e:61:e1:84:
                    2f:d3:69:33:a3:99:52:0c:20:4b:2f:38:d1:af:90:
                    f7:c6:65:dd:6b:89:89:83:0e:26:75:19:76:f2:a1:
                    df:6a:4b:07:ae:24:8b:db:81:bf:57:a1:06:84:1c:
                    b9:67:c1:d3:b5:f0:a6:0e:db:74:b8:fd:2d:21:9b:
                    b0:94:0c:0f:a7:e8:9c:21:94:ae:25:fa:5d:e7:3e:
                    9a:cd:a9:04:4c:ed:e8:73:01:80:aa:89:1d:ad:ea:
                    2a:b5:22:71:e0:9a:a8:ac:90:26:88:8a:8a:03:31:
                    ba:a6:b6:ce:a2:42:e7:07:cc:31:5a:78:c5:46:48:
                    fc:9c:62:2d:47:97:1c:cd:a0:22:99:88:76:6b:c5:
                    60:89:19:ea:57:aa:c1:56:1b:0b:f0:2c:63:f4:bf:
                    1d:27:42:99:b0:02:01:97:8b:70:d4:10:f9:63:ab:
                    b3:ac:62:8d:08:f5:8c:1b:65:95:93:87:de:7c:03:
                    0a:6e:48:26:ed:8b:7f:b1:d7:6e:97:6f:6d:02:1a:
                    96:7f:b9:34:7c:38:70:ac:c2:bd:f5:0b:6f:ae:4a:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:BB:21:E0:1D:BC:7A:AD:6B:C9:A9:D7:84:F8:C4:45:FA:C8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/60e5534e-bfc1-3ad8-a203-ca649e0648b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:44:09:aa:4f:28:59:5b:ac:e1:b1:bc:57:29:5d:e5:02:
         fa:91:8c:ea:ec:10:ce:ff:37:66:33:15:27:24:86:8e:0c:13:
         dd:0a:a0:9d:77:d0:43:ea:25:28:7b:a7:fa:bd:cd:4d:38:27:
         91:0c:ab:73:c7:78:da:20:30:78:b9:49:41:10:75:b1:d0:4e:
         0b:68:a3:35:68:46:99:c5:f0:65:a4:4c:be:d2:d3:f4:c4:dc:
         09:ce:39:48:ef:84:f4:1a:ac:a2:18:98:c0:61:1b:1b:b7:26:
         b6:32:4b:13:55:86:80:ec:82:39:32:e1:bd:f5:b9:87:21:24:
         03:fa:88:22:0d:2a:fb:21:e3:72:01:08:72:85:5b:81:07:e8:
         49:c9:85:83:7c:12:bf:cb:0a:9b:94:f8:bc:d7:e2:a7:6c:86:
         33:1c:86:ca:2b:b6:f5:13:de:c8:7a:73:75:61:c7:52:99:e2:
         9c:25:14:95:06:c6:63:a8:70:30:5c:75:65:60:d7:af:f5:87:
         ad:01:e8:57:fa:0e:a2:ca:39:c9:70:ba:6f:d3:bb:13:04:29:
         8b:bd:cd:5b:2e:92:e6:ea:45:2c:48:90:1d:e7:44:ed:e6:cd:
         fc:67:41:f0:a9:34:c7:85:b6:85:b7:d6:60:dc:8d:ee:af:a9:
         47:0e:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:16 2026 by rpki-client