Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6446d4c1-ea57-3d5d-9a5f-975bc2f4d67f.roa
File:                     6446d4c1-ea57-3d5d-9a5f-975bc2f4d67f.roa (raw, json)
Hash identifier:          xp2QV7gZFh3uFjjZDuj0RRejJrvTC5dRPncGCdWOhcM=
Subject key identifier:   78:BA:FB:16:C2:D5:09:55:A3:E1:48:9C:EC:09:F5:3F:BD:E4:E1:AB
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D24E037C99B99652C5DBC1570
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6446d4c1-ea57-3d5d-9a5f-975bc2f4d67f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        172.102.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:37:c9:9b:99:65:2c:5d:bc:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ce943774-d5c2-4b09-86ad-96d1c09721a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:71:1a:84:5b:6c:eb:ba:65:ef:83:e6:e8:
                    83:65:3c:7f:c0:0c:e2:40:42:3e:7b:71:07:2e:12:
                    77:ef:6f:b4:d1:01:e0:b2:bc:d3:f8:ed:8d:68:a1:
                    f4:73:73:9b:e8:55:48:31:dd:cb:c8:13:67:26:fd:
                    33:ef:f6:a1:34:15:66:b6:b8:36:b7:0d:a5:99:cd:
                    df:85:b0:b2:6a:e4:8c:cf:22:89:d9:19:18:ab:d9:
                    84:72:07:92:91:79:0f:04:30:5f:19:5a:02:32:20:
                    69:07:53:d3:0f:48:b4:39:95:20:2c:0b:48:8d:7c:
                    a6:b4:58:9e:08:fd:34:21:b0:7f:40:72:d9:78:ae:
                    2b:b0:06:33:f8:70:5c:41:65:ac:67:69:38:0d:57:
                    fb:d2:0b:9f:dd:74:23:62:ec:00:ab:e2:25:50:87:
                    6b:fd:e0:d0:d2:7d:04:26:53:59:e1:72:27:4b:c9:
                    d9:b5:a5:1b:0b:f1:43:96:43:df:61:52:86:bc:48:
                    6c:3f:a3:7b:63:2a:65:ed:eb:a2:05:cd:95:ea:8e:
                    42:ae:8f:32:53:39:3a:b8:0e:0b:1e:93:c3:e4:62:
                    1e:42:c2:db:54:a4:89:cc:7c:f8:3f:36:8c:ab:da:
                    67:ef:f9:c2:69:fa:2c:75:72:10:3a:2d:52:b8:fc:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:FB:16:C2:D5:09:55:A3:E1:48:9C:EC:09:F5:3F:BD:E4:E1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6446d4c1-ea57-3d5d-9a5f-975bc2f4d67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:96:01:02:92:99:f9:d3:b7:dd:b0:b8:24:3d:a5:20:83:cd:
         1a:10:a1:c1:ef:7a:56:29:72:63:33:13:6f:fc:1e:38:13:dc:
         9e:53:cb:f1:af:0c:e5:e5:85:d9:29:bb:32:8f:27:bd:8c:0e:
         22:9b:35:cc:9a:a7:9f:d6:47:d6:9a:0d:f6:5a:45:9b:4c:3e:
         a4:9b:7d:ba:6f:65:b5:30:ff:62:d7:df:de:69:b3:10:35:d8:
         25:ea:e6:a3:2e:96:07:e5:b0:ff:bc:f0:6e:70:90:81:59:c5:
         87:c9:4c:e9:c0:99:b8:00:0a:86:71:17:f4:f3:b9:94:74:1f:
         cd:c7:2a:8e:1d:26:05:c1:4d:a6:12:89:c0:7a:d0:e8:71:1c:
         28:7d:2d:a5:91:0d:a5:68:6c:da:88:de:3c:53:13:b6:81:bd:
         1d:24:fd:7f:3e:5f:ff:d8:b0:12:19:e3:1f:67:c4:3f:0c:8a:
         be:83:d1:1d:75:92:95:ae:ce:e1:ef:06:bb:5c:e6:d6:4d:e7:
         07:e0:ff:29:88:b2:9a:5a:e1:5c:f6:c2:78:72:50:29:79:67:
         d1:a4:33:21:b0:81:55:15:de:55:29:90:e1:9e:cb:03:91:ac:
         5a:c0:9d:4c:fd:d9:0c:5d:2d:ce:7f:d8:01:47:04:45:65:83:
         31:c5:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:22 2026 by rpki-client