Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa
File:                     51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa (raw, json)
Hash identifier:          E+5UnNuwMvLKsk86+u9yZ/o1R42WnokiIvDLzjy4I8o=
Subject key identifier:   37:14:3F:C1:57:AD:97:FE:37:EA:38:1B:C6:EB:E7:47:CE:AD:C5:23
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584D3DFFAC109FAB2418003869C0
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     3300
IP address blocks:        209.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ac:10:9f:ab:24:18:00:38:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b37afa8e-64db-4cfe-9021-00dcc604b1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4a:c1:fe:88:6a:2f:21:62:1b:b3:20:04:3e:
                    81:dc:1d:5e:c7:37:d1:5f:a9:30:21:0c:d8:3f:c5:
                    75:f6:dc:89:fb:66:eb:ab:54:ec:1a:0a:a8:02:45:
                    20:ef:02:84:3c:75:99:b9:44:5c:ff:48:6d:40:ee:
                    44:68:46:5b:5e:2a:8a:f1:b8:17:e2:79:12:47:13:
                    68:54:fd:23:55:ca:3b:19:4f:b4:68:ac:20:13:0d:
                    79:8b:f4:5e:42:e5:c3:2d:df:80:ed:2d:4c:c5:58:
                    28:5d:ea:0b:8f:5d:b3:07:fa:df:0b:b6:db:64:bd:
                    80:fe:6b:56:5a:97:89:a7:c5:41:0d:4f:c0:16:30:
                    7d:d5:42:9c:06:99:f9:68:bf:29:fd:b7:58:9f:d5:
                    be:1d:f9:d1:8b:c5:b8:73:d3:10:ff:de:15:55:07:
                    4a:01:43:1a:96:2f:f1:6b:ba:e1:d9:e6:8b:e9:fb:
                    c0:13:f9:e2:0a:ed:28:fe:62:8e:9e:62:e8:63:8e:
                    9a:fb:31:7e:5c:3a:f0:1f:db:6b:43:97:86:40:00:
                    ca:bb:18:83:ee:2a:80:bc:6d:b7:96:5b:1c:23:c3:
                    05:9f:bf:2f:cb:79:b7:0f:94:47:bf:41:d7:c1:82:
                    5f:69:36:3f:80:e3:3b:6f:86:28:c7:b3:60:a7:f8:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:3F:C1:57:AD:97:FE:37:EA:38:1B:C6:EB:E7:47:CE:AD:C5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/51bfd589-fe73-3d74-98a8-9d4c036c13ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:52:ee:95:d8:dc:c0:5a:cc:79:fa:56:73:80:4d:0e:6c:fe:
         6a:5d:a7:a9:df:0b:33:26:d0:ff:21:86:0d:11:76:f7:8e:76:
         1c:05:a9:52:32:d0:88:38:23:bf:b6:36:7f:5a:c2:f5:59:b0:
         5a:10:bd:21:aa:81:d9:dd:cc:60:50:65:5b:09:49:fd:d2:e5:
         54:80:3a:df:69:ac:03:c4:12:a2:e5:26:b1:a6:cf:c4:2a:4e:
         b3:c7:bb:18:db:90:75:93:c5:b7:c2:1f:67:cb:17:99:f3:2d:
         ef:51:67:0c:bb:fa:1c:23:ef:77:22:dc:9c:5c:f2:1c:80:c8:
         41:4a:fa:d5:01:d1:4c:e8:32:5e:de:38:4f:a5:e4:da:6d:ca:
         6b:14:e4:f4:b4:80:a6:93:86:ef:da:04:2d:50:30:39:38:a6:
         8a:25:12:c9:a8:ec:fe:07:9d:a0:9c:31:d6:3d:09:65:e2:e8:
         93:55:f4:21:fe:18:92:be:70:04:12:ce:52:83:1a:0e:41:b6:
         df:b9:9f:4b:31:94:b4:f9:43:bc:84:5e:cc:f6:26:b4:28:35:
         be:c6:d6:ba:da:bc:b6:20:c0:0b:f0:29:3b:71:3a:37:68:b7:
         6b:53:e1:a9:9b:1b:c4:fa:81:94:8b:0b:33:09:25:c5:e8:35:
         9a:34:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:38 2026 by rpki-client