Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
File:                     8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa (raw, json)
Hash identifier:          d5DmAln+Dcl3YjAEiPbQkkWRy7KKInr6hyfU7cKKxeg=
Subject key identifier:   30:07:13:7A:A8:D9:1B:2E:A8:E6:80:83:8F:DF:76:85:E2:F7:A5:7B
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F4328584D1F4A45B35C77A6B44E432A00
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     40861
IP address blocks:        216.168.20.0/24 maxlen: 24
                          216.168.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:45:b3:5c:77:a6:b4:4e:43:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=3b1e7100-bd6e-4eff-88d0-c4e85a5f1fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:aa:f3:cf:ab:13:62:08:dd:d6:bf:9b:03:
                    64:c2:61:75:1d:d6:5c:51:88:10:37:f5:a0:79:b4:
                    87:7c:08:85:f5:51:1b:1c:b4:45:5d:84:fe:93:8c:
                    28:41:92:31:33:ea:9b:fb:81:68:ff:8d:7e:b2:54:
                    64:10:f1:e6:16:52:54:55:e0:46:33:26:cf:05:8b:
                    36:cf:4a:c1:15:bc:79:25:f5:cf:f9:9f:fa:ed:e0:
                    8f:e5:c1:7c:44:83:7d:e4:8c:0a:99:ec:50:91:38:
                    47:8f:9a:e4:b7:e4:1a:16:98:84:b5:ed:f2:75:fc:
                    04:bc:32:84:87:44:f7:db:42:21:d1:66:10:68:8e:
                    89:c3:78:5e:b8:88:94:69:dd:fe:12:18:fc:92:96:
                    8b:0e:87:f1:40:1e:b8:82:aa:c2:a5:82:6a:46:fa:
                    d5:b3:7f:af:a4:7d:b7:af:cf:3f:03:06:19:da:d3:
                    1c:13:f1:79:a2:9b:55:ae:b6:ab:0a:98:a5:8c:b1:
                    80:2a:70:e1:89:f3:7f:a3:d8:c7:74:1a:1b:b3:6f:
                    d3:16:50:d7:cd:06:40:9f:73:3b:13:1b:26:14:ce:
                    b8:1a:96:b0:dd:99:7f:b7:2e:ec:f8:36:7a:b8:1b:
                    89:a6:f0:b7:0b:54:aa:cd:2d:9f:76:9f:fe:cb:2f:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:13:7A:A8:D9:1B:2E:A8:E6:80:83:8F:DF:76:85:E2:F7:A5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/8ec73bd2-1100-3c9d-b4dd-ad5d752d8d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:9c:10:fc:cd:1a:f6:be:03:90:27:44:aa:3f:d5:d3:79:
         95:0e:fb:35:4d:6a:32:29:18:10:ec:01:da:0b:0b:45:fb:16:
         07:79:57:40:a4:8b:95:df:02:93:1f:df:0f:93:08:c7:c2:f9:
         e9:71:41:8e:5a:48:ce:60:c6:1c:34:dc:e9:21:82:fa:9f:73:
         38:1b:45:7d:a4:12:7a:b1:0b:92:36:70:57:da:1a:1b:c0:8c:
         22:dd:a4:a9:4d:cf:4d:31:43:19:a7:f3:37:a9:50:60:3d:8c:
         3a:23:a6:23:0d:92:f4:c4:20:66:dd:3a:cb:96:ad:de:7f:64:
         41:21:d9:d8:af:af:18:7d:7d:e9:3e:0f:c9:a0:26:24:e3:41:
         9a:c9:f6:0c:d1:3a:fa:bc:4d:f9:0e:35:c2:04:d2:97:9d:46:
         b9:cf:3b:34:01:e2:ae:6c:3c:a3:58:1f:37:e1:3b:d5:9b:cb:
         03:9d:0d:6c:fe:ef:60:23:11:ee:af:83:c2:1f:e6:fa:b7:25:
         93:e7:01:31:22:7e:ed:22:fd:47:c3:8d:7f:65:8c:ad:56:ec:
         54:e0:f1:06:b3:44:e0:5d:7e:aa:b5:d9:f5:50:e6:c0:d0:9d:
         a9:87:2c:50:db:cd:c8:34:e6:49:dd:4e:f0:8e:d9:f7:4f:a9:
         93:f0:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:59 2026 by rpki-client