Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          XUJhrufgWV5jE7zD2C8BzSFrHr5FRQlO/omIrYPWfLQ=
Subject key identifier:   0F:4A:19:F1:61:63:93:5B:79:BC:24:A0:37:ED:F9:BF:D3:E8:3B:06
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F4328584D1F4A403FFFD1CA80BAC7F700
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:40:3f:ff:d1:ca:80:ba:c7:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=0ef17eb9-902d-47b0-a2af-469b8df12981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:40:85:f9:f7:2b:11:b7:52:01:32:33:34:
                    92:5b:cf:c5:1f:68:2a:04:6c:e0:6d:1c:42:3d:bc:
                    36:c4:cb:75:d4:5b:80:df:1f:f3:c0:48:80:92:e6:
                    fd:17:0c:32:d2:fd:6b:f1:6a:44:33:dd:72:c1:71:
                    c9:44:c9:dc:aa:17:a9:91:c4:f8:81:80:3c:88:02:
                    c6:db:ce:7b:fb:1c:1c:f5:b9:e3:25:3c:5e:ec:f1:
                    2b:bf:b4:20:2d:89:16:f5:54:26:e2:2c:00:6f:7f:
                    63:75:c4:35:19:ec:54:f4:01:95:a6:f8:91:ee:4b:
                    75:fe:07:08:91:bb:2d:ff:70:6b:04:4a:a0:5a:95:
                    df:0f:04:05:ad:ad:ff:71:c5:3a:65:3b:a0:0b:ae:
                    3b:13:0b:1b:6e:1f:dd:21:17:fc:3c:c1:f3:5d:4c:
                    67:68:1a:3a:2b:ea:45:6a:49:e1:7e:91:1e:a4:0f:
                    fc:b4:ba:31:d4:ba:e5:f7:ba:25:44:a7:10:91:ec:
                    6e:44:fb:fc:2a:10:ae:3a:6a:3c:bd:26:2d:0c:aa:
                    8b:ff:e0:9c:d4:3c:0e:ed:b0:12:68:be:7b:79:04:
                    32:77:11:5d:16:86:d5:02:a4:d9:d7:5b:ef:c8:be:
                    69:e1:e3:bc:51:14:ee:a3:27:ed:65:91:53:5b:35:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4A:19:F1:61:63:93:5B:79:BC:24:A0:37:ED:F9:BF:D3:E8:3B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:75:75:10:7a:e2:89:b3:d9:39:6a:3a:95:03:e3:17:c5:f9:
         f4:5e:9b:8f:51:9b:70:41:c7:a5:2d:44:d6:2e:04:e2:7a:b3:
         ed:0f:2a:a2:5e:aa:a9:55:b5:27:be:82:47:8a:76:f9:94:b7:
         a6:c8:69:71:2a:75:ce:28:72:e1:f7:70:50:80:e9:01:9f:74:
         c3:4a:55:e0:12:f4:dc:64:ba:bc:dd:89:2a:f5:78:23:0f:4a:
         e6:bc:a5:31:c5:64:1c:07:7a:f3:94:16:b0:3d:1f:7a:0c:35:
         98:df:e8:b1:48:63:9c:17:19:ab:16:77:45:3a:5e:b8:9a:20:
         19:7f:53:11:30:3b:d3:1c:ff:1b:3b:c7:e3:f9:97:d9:9d:42:
         6e:6d:37:d8:91:69:e1:57:64:3b:fd:3c:7b:fd:c3:aa:16:6d:
         ee:89:56:cd:5c:e3:76:3b:8b:a7:47:3e:65:58:bb:d9:03:01:
         16:1b:3a:16:6d:da:d9:c1:a1:a6:dd:d2:8e:c1:68:91:4e:ae:
         74:ec:b2:1f:a9:c1:43:3f:f6:1d:ce:db:f6:22:71:d4:dd:ed:
         d6:f6:fd:a5:62:7d:d3:76:f5:92:65:5f:60:46:04:f4:27:7a:
         ff:37:a9:6f:10:35:fc:62:d2:f8:b6:73:6c:0d:f8:89:17:6e:
         3a:bd:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:41 2026 by rpki-client