Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/df37432b-5ee1-31da-b99a-80cd82b36d95.roa
File:                     df37432b-5ee1-31da-b99a-80cd82b36d95.roa (raw, json)
Hash identifier:          IBhbuzh9d9FgS39nAKEWb6fYDi4EQRIHvDkmAfuLaWQ=
Subject key identifier:   BC:FD:BC:53:1A:43:84:AB:A9:3F:6B:2A:45:90:BE:23:CC:8C:F7:FB
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584D3C6B275878B2C3912F1F26BC
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/df37432b-5ee1-31da-b99a-80cd82b36d95.roa
Signing time:             Fri 20 Mar 2026 23:25:59 +0000
ROA not before:           Fri 20 Mar 2026 23:25:59 +0000
ROA not after:            Thu 18 Jun 2026 23:25:59 +0000
asID:                     6079
IP address blocks:        144.208.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3c:6b:27:58:78:b2:c3:91:2f:1f:26:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar 20 23:25:59 2026 GMT
            Not After : Jun 18 23:25:59 2026 GMT
        Subject: CN=47c10374-24f9-46c0-8cee-f5340dfe6124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:13:da:71:87:c1:a4:ff:c9:0c:39:53:3b:
                    6c:46:78:06:6f:92:a6:d8:73:68:77:c6:7e:d3:8c:
                    35:fc:44:40:cd:1c:2a:a5:e0:42:cf:0c:72:ff:89:
                    f7:a2:5f:ee:f7:24:9b:85:72:34:4b:4d:50:fd:a5:
                    1a:1b:70:a8:6c:8f:2a:44:4a:3b:2f:1f:9a:3a:10:
                    47:a8:84:db:1d:81:de:ac:4d:41:b0:92:11:a0:9e:
                    83:2b:8c:b7:a1:7a:f4:e1:e8:36:b3:18:5d:35:e6:
                    b7:68:2a:0b:6b:2a:9f:d4:24:db:52:81:17:b2:a4:
                    52:77:0f:ae:7c:de:c9:f5:c3:db:51:f7:31:8a:11:
                    14:e4:9d:b8:ed:51:24:32:a6:bc:90:df:07:b6:2f:
                    3e:5a:c2:53:92:92:1d:e0:3c:b8:86:7b:4e:69:d8:
                    f9:aa:2c:55:c0:d5:d4:ce:ca:e4:82:d2:4b:28:5c:
                    d7:82:16:47:65:7e:8d:60:e8:fa:45:00:23:71:64:
                    70:ac:f2:31:63:70:dd:14:20:70:87:49:f7:51:cd:
                    58:17:67:12:73:b4:7a:c0:5b:fa:46:26:03:cf:a6:
                    71:23:74:d8:d9:90:68:2c:3f:2d:0f:b2:4c:1c:dc:
                    f7:57:cf:8d:ad:62:1e:5c:e5:72:0e:d1:01:b4:64:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:BC:53:1A:43:84:AB:A9:3F:6B:2A:45:90:BE:23:CC:8C:F7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/df37432b-5ee1-31da-b99a-80cd82b36d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:2d:95:41:47:e1:a9:a7:70:2c:45:94:da:24:1a:32:51:
         4a:1f:b3:7f:87:fd:17:4b:30:e4:f6:06:f5:ec:be:13:bf:68:
         db:dc:0a:02:dc:5f:2a:fc:3a:d7:f7:12:c8:45:fd:85:66:1e:
         e3:8d:a7:41:f2:00:7e:81:ad:3d:cc:e0:01:30:62:3b:cf:cc:
         3f:43:f1:41:f0:c8:cc:46:b6:cc:2c:50:8c:3b:9b:0b:38:a3:
         7e:3a:c3:94:ae:39:79:1f:d7:35:29:b3:8a:dd:bf:68:f7:60:
         26:0b:37:24:7b:fd:b1:0a:f5:5a:95:54:15:c6:81:e8:af:2c:
         42:d2:30:56:9f:90:99:97:84:93:0b:40:90:31:6b:aa:5a:54:
         64:ac:f2:ce:58:d9:d8:f6:b9:42:eb:b9:b4:1c:64:91:8d:42:
         37:bd:52:75:d7:8d:67:2d:82:8b:7d:1c:9b:02:ba:c9:8a:35:
         df:4d:2e:7b:dd:f1:cc:d2:16:e7:78:53:b2:ae:e9:85:29:df:
         5d:c4:02:a3:c5:a8:10:67:7f:d2:0f:49:fc:df:fc:d8:24:7c:
         98:a3:a8:9a:c3:87:fe:72:bc:e1:3c:73:85:80:bf:1f:1c:e5:
         b3:4f:de:37:16:77:d7:93:a9:10:a1:06:0e:03:3b:e7:40:db:
         21:e7:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:00 2026 by rpki-client