Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/1683a82c-2e23-38e5-9aeb-9b1d5fa1144c.roa
File:                     1683a82c-2e23-38e5-9aeb-9b1d5fa1144c.roa (raw, json)
Hash identifier:          FqXoA4OOT22hoUtgVvIXJrbraaXF3N7QL6o87DorgBo=
Subject key identifier:   8A:2B:1F:94:CA:B5:A9:FD:71:39:80:AE:99:BA:8E:77:BE:E3:C2:90
Certificate issuer:       /CN=e0601e73-c42d-43e5-87a3-8a1006e61c8b
Certificate serial:       010D0C9F4328584D07ACEC8069E40247DB5D2580
Authority key identifier: DA:98:63:A9:AB:35:E5:B8:BE:4C:65:3B:5C:BD:B6:57:A8:C3:FD:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/1683a82c-2e23-38e5-9aeb-9b1d5fa1144c.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     63005
IP address blocks:        207.192.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/e0601e73-c42d-43e5-87a3-8a1006e61c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/e0601e73-c42d-43e5-87a3-8a1006e61c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ec:80:69:e4:02:47:db:5d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0601e73-c42d-43e5-87a3-8a1006e61c8b
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=3bcaed2d-86cd-4a1a-8d52-7fe86e3fe423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:b3:ed:53:18:2a:83:dc:be:2b:0e:eb:96:
                    23:cf:60:e2:dc:1e:66:ab:89:bc:bc:51:f9:1c:06:
                    43:bb:f2:f2:62:8d:39:09:bc:b6:4d:79:ee:c4:a6:
                    99:1e:57:1f:33:bd:32:39:b5:4f:30:2e:08:b2:f4:
                    42:8d:39:12:17:44:e0:67:51:58:8f:73:99:53:a8:
                    33:84:d4:1a:ea:a2:69:79:48:4a:c8:b6:af:53:05:
                    53:02:6b:5f:ae:cb:f0:4a:f0:24:de:aa:b5:36:52:
                    e3:ff:78:ea:e5:6f:c5:76:97:50:5e:b3:2b:68:cf:
                    9c:e3:f2:29:2c:4f:cf:eb:29:b3:9e:ba:39:9e:d2:
                    5d:44:7a:d7:2a:3c:52:dc:08:a5:e9:95:3b:45:4b:
                    e6:d4:c9:3a:e3:c1:9f:ed:5c:8d:09:ae:10:1e:62:
                    a6:14:e1:cd:f4:10:70:e1:ed:c0:75:03:74:51:99:
                    cf:41:ed:48:5f:7a:34:b8:15:88:50:29:13:90:5c:
                    82:c3:9a:3b:e9:b9:6f:16:4e:46:15:d1:cf:3e:59:
                    50:f5:e9:58:2a:9b:f0:71:62:ac:d0:83:b6:6d:35:
                    dd:f8:ee:2b:78:f7:63:3f:f5:f8:6e:3f:b3:5e:c6:
                    9c:03:c8:e5:57:bd:d0:fa:48:e1:bb:89:c7:05:fa:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:1F:94:CA:B5:A9:FD:71:39:80:AE:99:BA:8E:77:BE:E3:C2:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/1683a82c-2e23-38e5-9aeb-9b1d5fa1144c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b/e0601e73-c42d-43e5-87a3-8a1006e61c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DA:98:63:A9:AB:35:E5:B8:BE:4C:65:3B:5C:BD:B6:57:A8:C3:FD:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e0601e73-c42d-43e5-87a3-8a1006e61c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.192.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:5a:0b:d9:1f:8e:2a:91:47:b3:87:c1:d6:30:56:a4:ce:
         13:2e:61:51:d5:d2:da:63:1e:74:04:b3:7e:13:b9:e7:ea:f8:
         5e:a8:ef:f0:26:7f:94:04:8a:aa:75:3b:c3:0f:8c:69:fe:1d:
         52:51:06:4b:44:ac:1f:3a:70:0d:b7:86:dc:98:de:7e:0f:e3:
         f3:f0:a0:78:46:6c:ef:99:b9:86:17:cc:90:91:d9:a4:fc:05:
         07:2b:41:fd:5a:16:e8:ef:7f:4c:d2:cb:2e:3e:af:aa:e8:10:
         f3:4c:cd:38:7c:66:3b:6c:b1:dd:e2:37:57:df:8b:57:aa:c8:
         c3:20:55:22:7a:74:02:8f:e3:48:01:de:0e:07:52:0e:8a:03:
         8d:b7:db:76:0f:01:68:bb:b0:11:3e:bb:b5:be:a3:49:29:fe:
         bb:03:f7:3e:68:fd:f7:b8:a5:6f:95:b8:c6:62:9b:ee:c3:8d:
         58:03:1d:63:8c:ee:7a:88:f8:26:b5:5a:7d:68:42:79:4b:da:
         b6:2e:38:9b:02:35:74:a8:fe:26:d5:7c:7a:27:7b:64:26:9d:
         1c:ad:86:60:ef:52:50:e5:79:43:da:9e:3a:6a:ac:1e:96:cd:
         72:a0:2b:57:bb:0e:ea:e4:08:fb:4a:48:2a:0f:2c:e1:ac:69:
         91:52:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:01 2026 by rpki-client