Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/8e1f7b6a-c5cf-351c-82e5-5ba6532be635.roa
File:                     8e1f7b6a-c5cf-351c-82e5-5ba6532be635.roa (raw, json)
Hash identifier:          MeV2N1LOie4bLkIcAsEEuJlmY5Q7TfYXPnLVHXLyySs=
Subject key identifier:   41:6E:96:5E:88:6B:27:11:C7:11:62:0F:11:9F:06:B4:6F:D8:71:C1
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584D1A5202D24CF730188DD9FAC0
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/8e1f7b6a-c5cf-351c-82e5-5ba6532be635.roa
Signing time:             Sun 08 Mar 2026 18:17:50 +0000
ROA not before:           Sun 08 Mar 2026 18:17:50 +0000
ROA not after:            Sat 06 Jun 2026 18:17:50 +0000
asID:                     55002
IP address blocks:        208.79.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1a:52:02:d2:4c:f7:30:18:8d:d9:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: Mar  8 18:17:50 2026 GMT
            Not After : Jun  6 18:17:50 2026 GMT
        Subject: CN=3986afe1-27be-4657-ac34-1b9f4e20b9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:b2:b1:00:e9:c6:80:59:e4:29:a8:3d:10:
                    17:fa:bf:1f:24:b2:73:c3:6d:34:10:f4:79:65:93:
                    5f:98:6c:51:90:51:aa:43:5f:86:6d:57:3d:de:92:
                    e4:b2:c3:88:2c:4c:7c:e4:26:ba:53:32:11:b3:c3:
                    da:fb:9d:d5:eb:19:81:77:8f:18:93:01:85:fb:d2:
                    a2:46:fd:15:d6:80:39:60:da:2b:b1:36:cd:e1:7c:
                    1b:16:e8:43:11:19:4c:79:b5:09:ac:9c:86:ba:fc:
                    04:56:8a:61:57:c2:f7:24:eb:9d:56:29:74:23:ba:
                    be:f5:65:f4:30:7c:7b:33:e3:68:7c:1e:8b:6e:e6:
                    f3:19:49:2a:0f:3d:aa:e7:4c:5f:22:f0:d7:e5:d3:
                    8e:4d:8a:e4:00:dd:cc:93:6e:d9:a0:14:ac:46:b6:
                    5f:75:7e:02:0b:2e:d2:1e:03:33:21:8a:2d:81:a6:
                    06:7e:0c:0b:33:ef:89:55:9e:7b:68:4d:33:83:47:
                    67:f6:95:a6:37:14:63:76:b2:7b:d2:08:10:d4:05:
                    20:00:05:6f:7c:29:9f:74:40:90:b1:b8:44:29:51:
                    ef:e7:85:f3:2b:e0:08:8b:f9:4e:f4:32:62:55:7c:
                    9e:6f:50:08:97:4a:de:b6:e8:0f:df:1f:bf:11:15:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:96:5E:88:6B:27:11:C7:11:62:0F:11:9F:06:B4:6F:D8:71:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/8e1f7b6a-c5cf-351c-82e5-5ba6532be635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:12:47:c4:f6:90:af:48:ad:dc:f9:75:88:9a:c6:48:1a:48:
         8e:2a:f9:31:ff:f1:bc:36:42:08:47:57:c5:5e:89:ce:81:24:
         6e:8d:45:2a:ab:42:1f:a8:43:7f:d9:a1:20:17:1d:21:e7:4a:
         e0:a2:b4:75:06:77:1a:a2:7b:86:30:a6:7c:d9:44:89:24:3e:
         49:af:89:e5:19:49:9c:48:17:75:26:f3:07:49:ed:22:e4:e4:
         04:d6:12:70:91:79:17:56:75:98:30:95:15:30:c7:72:30:7b:
         da:43:00:7c:bf:6b:f7:7b:d2:21:b0:76:47:97:8e:37:82:41:
         0f:8b:6f:6a:12:ba:47:a8:45:f8:5e:d7:5c:14:25:77:f6:26:
         15:14:64:ec:a8:83:94:0e:9f:6e:23:78:d0:18:7f:f9:0d:33:
         16:ca:2a:c7:1c:1d:08:1d:75:4d:84:e7:6d:e0:7b:09:40:96:
         9e:10:74:17:08:05:bd:bf:3c:02:20:03:da:70:eb:ef:a0:74:
         8c:b1:5d:55:00:c2:b2:7a:f2:50:90:46:50:ca:e0:7a:9d:77:
         57:67:f6:aa:87:a4:7f:9c:3b:ca:83:10:43:e6:4b:ae:70:07:
         e6:a3:1f:73:f8:0b:f9:99:72:4b:b3:04:9c:1b:92:17:d9:4b:
         2e:e4:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:32 2026 by rpki-client