Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa
File:                     c8f39d23-491b-318d-969b-d9e7c38fba0e.roa (raw, json)
Hash identifier:          UTCJaZNMh5YzFlrLG0S7cOfcricNyPa7ROi6z5ZsfoI=
Subject key identifier:   6A:FC:CA:1F:AA:E8:5B:CD:7B:79:86:09:C1:89:C1:AD:06:17:E2:30
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D19B4B3397BFDB6D6620E2080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     60439
IP address blocks:        216.122.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b3:39:7b:fd:b6:d6:62:0e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=493f9460-e792-4969-a7a0-67a9c3946385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:88:e8:e0:37:2b:39:cc:8b:c9:74:86:cd:
                    9d:8d:61:5f:c4:95:88:a7:bc:8e:63:ee:62:7c:11:
                    dd:d3:54:39:47:9a:eb:18:c2:c9:51:5b:13:5e:e7:
                    44:06:2f:fe:c1:15:3f:a4:50:ac:52:74:cd:a7:74:
                    9e:19:a4:16:ae:de:07:35:20:e9:27:0b:e6:cc:bb:
                    ae:ac:8a:82:d7:ea:ef:85:c2:f5:f3:c0:9a:97:57:
                    5b:be:a8:00:3a:d6:2d:1b:12:be:ec:fe:6d:2e:fe:
                    a7:fe:ca:12:9e:9e:e7:2c:95:d8:c1:fe:6b:6c:d3:
                    7d:08:cb:72:e3:96:55:a7:00:72:7e:3e:44:d6:33:
                    0f:9f:20:43:3c:21:c4:df:7e:4f:11:34:e4:07:6b:
                    63:30:14:69:9a:2f:e4:85:d8:f0:10:8e:1e:e1:38:
                    db:2c:81:07:18:64:87:16:c9:d8:8f:58:60:bc:4f:
                    04:cd:ed:dc:ef:10:ab:cb:1c:1c:20:54:03:c2:68:
                    38:15:3e:a5:3b:b8:d0:a6:c9:14:e8:05:10:f0:69:
                    5e:a3:8f:10:f8:fd:c6:dc:36:0d:1b:c1:ea:19:f8:
                    78:67:ca:d3:6f:ce:6b:9d:ef:3b:50:f2:b9:78:05:
                    cb:18:70:48:66:04:87:56:10:3f:17:60:52:21:ed:
                    86:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FC:CA:1F:AA:E8:5B:CD:7B:79:86:09:C1:89:C1:AD:06:17:E2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:35:23:ac:fd:53:f5:e0:28:a8:43:41:74:6f:b9:2d:1f:8a:
         ff:5a:85:28:46:98:57:c2:b3:95:51:ba:a3:a0:a4:72:84:77:
         00:b3:13:8d:ad:70:cd:56:46:2c:8c:5c:b3:cc:ef:ba:0a:69:
         b4:55:2d:85:9d:69:0d:32:98:d0:b1:48:4f:0c:88:ba:c3:1e:
         a3:01:b8:84:1f:90:b8:8a:0c:14:53:64:30:13:fc:4c:21:6e:
         53:ae:9b:60:29:58:0d:fa:6f:73:5b:01:a7:4c:2d:e7:32:fa:
         e2:44:57:2e:72:66:6c:d0:aa:bb:a8:7b:55:0d:40:59:e7:ab:
         b0:0f:4d:22:59:40:ef:b5:7a:46:2d:d5:f6:5b:05:b9:66:df:
         db:fa:95:71:0e:3d:89:b5:4b:d3:83:de:22:7d:ec:e4:a4:f4:
         6a:48:c8:77:1c:ea:bf:0b:58:93:96:a6:5d:f7:fb:c6:a1:73:
         0a:af:01:61:a1:71:1d:ec:a8:05:50:10:ba:40:69:7f:a3:29:
         4d:0b:9b:31:6a:30:88:cb:58:be:87:f3:9f:e2:cb:91:9a:ee:
         4f:7b:4a:ac:2c:dc:25:bc:ce:df:11:12:85:e2:b8:24:e9:a2:
         95:0d:ed:92:81:01:ce:a7:48:e1:a6:1b:89:26:4a:66:22:d6:
         42:dc:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:32 2026 by rpki-client