Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
File:                     2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa (raw, json)
Hash identifier:          koe3OP8gsyUizeu3I+4fxnGnXNiE6Xd5CsJOwLaF8Ks=
Subject key identifier:   45:94:46:00:97:4D:77:2F:AA:22:B1:E1:58:1C:D5:F6:61:E1:22:7C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBAE71A1715FF8EB55E30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        97.71.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ba:e7:1a:17:15:ff:8e:b5:5e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2e020733-e6ea-43c7-aa45-ffb47da88e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:fb:84:7c:53:4c:a2:8e:f7:68:f8:39:07:
                    15:d7:74:51:35:64:5e:a2:0c:44:15:0e:d9:d8:38:
                    39:17:35:2c:70:49:45:7b:b4:65:8d:d7:ff:c3:a5:
                    59:0f:e6:d8:ba:d4:f4:ed:93:5b:ec:7b:43:4c:cf:
                    69:94:af:b8:24:4a:47:b5:e4:4f:0e:6f:65:5d:dc:
                    fc:35:e6:81:af:8a:85:ef:ef:9e:ef:82:f7:42:12:
                    07:b2:36:2a:69:07:09:9d:90:7d:01:21:bb:f6:5b:
                    6c:2b:78:eb:15:e0:5a:17:3a:78:d8:f2:d5:29:4f:
                    99:ce:ed:e3:c3:5b:b3:16:28:e3:2f:f0:c7:db:27:
                    67:7e:67:e7:55:f6:79:2a:84:97:27:f0:b8:94:b5:
                    ac:f8:85:79:de:d1:40:f1:15:83:07:6d:46:b9:fe:
                    c9:5b:b0:f5:5d:f4:61:c3:e9:c4:d9:49:71:b7:74:
                    98:0e:e8:da:f9:f6:2e:f6:a5:10:f7:8c:ef:4c:da:
                    2f:eb:1c:32:d0:7a:1e:9e:fe:70:b2:52:e0:43:02:
                    f9:2d:8c:8b:9d:7f:b4:59:ba:0f:da:29:8b:44:3c:
                    a5:ae:5b:d2:a3:db:57:8f:79:58:b5:27:58:5b:ac:
                    6a:05:28:2c:50:65:64:c1:2d:33:8c:02:ca:a6:e1:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:46:00:97:4D:77:2F:AA:22:B1:E1:58:1C:D5:F6:61:E1:22:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:6f:d7:71:32:d1:75:a1:a7:e0:71:a9:b9:48:0f:d0:91:
         63:be:10:da:e9:d9:98:54:4c:ab:f5:a3:2b:6e:d8:96:7e:0e:
         ca:e8:a5:07:ff:3f:02:a2:4c:2b:5d:0f:f7:00:89:a5:e6:5d:
         00:15:81:92:8e:c3:39:c9:ad:de:a5:d0:56:b5:1a:0f:d5:70:
         b6:39:5f:60:fc:88:34:68:17:83:df:48:a8:cb:70:66:c0:94:
         db:12:00:3e:3d:9a:32:27:0b:af:e0:58:ea:3a:63:25:5a:26:
         af:5d:f3:d8:72:8a:6f:a1:8d:2b:c4:0f:92:16:a4:b9:bc:5c:
         ed:5e:80:aa:f2:a7:f6:18:22:fa:87:05:b3:28:f4:bd:61:a5:
         9d:0a:54:1d:2d:ed:56:f1:bc:f5:ce:fe:5c:7d:39:22:99:8e:
         b6:b7:27:27:8c:af:ac:75:39:9f:a5:9e:87:15:dc:bb:e5:f2:
         ac:8e:c9:4c:e1:bb:cf:db:4b:c5:af:1a:63:8c:09:10:03:5a:
         b4:04:b0:6d:d4:ee:55:29:e5:bd:88:f3:67:07:2d:88:2a:06:
         26:c8:75:8e:bf:fe:c9:bd:cf:3b:16:d8:0a:9e:dc:7d:1b:93:
         a7:dc:cd:49:36:b9:22:4d:68:da:a6:00:16:d6:3f:0f:c5:d2:
         11:da:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:12 2026 by rpki-client