Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dbacf2ee-4d8b-359b-b29a-8544bf076862.roa
File:                     dbacf2ee-4d8b-359b-b29a-8544bf076862.roa (raw, json)
Hash identifier:          EOiyvPZyAJfqjsSjKis/96M1NzF5JI8qj4Hr4Mtor0c=
Subject key identifier:   15:C9:66:C8:E5:CC:D9:5B:46:B7:E1:59:D3:0C:0A:AE:5A:5D:FF:C0
Certificate issuer:       /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial:       010D0C9F4328584D38B0992BF187CA1A4A52E600
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dbacf2ee-4d8b-359b-b29a-8544bf076862.roa
Signing time:             Thu 19 Mar 2026 15:22:40 +0000
ROA not before:           Thu 19 Mar 2026 15:22:40 +0000
ROA not after:            Wed 17 Jun 2026 15:22:40 +0000
asID:                     12119
IP address blocks:        167.254.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:b0:99:2b:f1:87:ca:1a:4a:52:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
        Validity
            Not Before: Mar 19 15:22:40 2026 GMT
            Not After : Jun 17 15:22:40 2026 GMT
        Subject: CN=054b8aa9-45d7-48d1-98f5-baf6c908faa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:cd:d6:12:6c:ea:b2:3e:bd:55:ab:84:dd:
                    cc:1d:87:a5:b5:b0:a8:5d:94:3f:c0:d3:0d:2b:a8:
                    5c:f5:1b:3b:e5:9e:93:ee:ec:36:98:8c:61:59:57:
                    e8:13:25:e6:ed:d1:b0:df:bc:f8:c6:45:ad:e9:56:
                    3f:6d:37:59:12:a6:6e:d3:ca:40:05:b0:a6:3d:51:
                    17:48:a7:4b:09:50:1f:25:58:df:8d:31:2b:9e:60:
                    b3:79:dd:fe:b0:20:78:39:3a:e7:18:2a:be:be:0b:
                    21:63:9f:2e:77:98:29:0b:90:89:5c:06:2e:1b:7d:
                    90:56:fb:fe:74:54:a2:7d:69:32:8a:8f:ec:7a:c7:
                    62:74:e1:7f:81:e3:99:c9:93:1f:1a:db:b9:fe:87:
                    d7:46:a1:7d:01:3b:e4:58:f3:3c:ee:b0:51:d3:f7:
                    3b:e0:d0:42:c7:aa:92:7f:72:5a:b9:2d:12:39:a9:
                    35:ba:ed:66:17:b7:5c:45:ad:6c:c0:dc:23:aa:97:
                    79:7b:77:0d:50:1e:96:26:7f:7e:52:a6:94:72:60:
                    d1:84:3f:62:f8:75:c7:db:4a:23:1b:07:0d:77:9a:
                    7a:5e:b2:3b:be:66:b2:c5:85:1c:8b:10:2c:94:86:
                    c1:62:9e:ee:c5:28:a4:f4:2a:a5:42:37:97:ac:67:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C9:66:C8:E5:CC:D9:5B:46:B7:E1:59:D3:0C:0A:AE:5A:5D:FF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dbacf2ee-4d8b-359b-b29a-8544bf076862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl

            X509v3 Authority Key Identifier:
                keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:94:e1:5a:d8:9e:25:49:65:a4:02:b0:18:d1:48:3b:50:
         f2:23:b8:05:87:04:84:ef:e1:09:2c:a1:25:58:46:db:04:b4:
         05:34:ff:94:ce:aa:a2:91:a7:b7:3d:59:62:89:40:c6:be:05:
         c7:3d:2a:e0:1b:16:00:74:99:98:9e:d7:28:49:b3:32:48:85:
         e6:bd:b4:c8:43:f9:02:0d:7a:70:23:20:59:d0:c2:64:70:6f:
         e7:10:dd:d2:29:aa:4d:41:04:b3:d9:37:52:fd:dd:9d:a7:92:
         7f:8d:12:e2:ec:a0:fb:8a:5b:e1:99:b9:d1:3c:21:48:5a:3c:
         ad:63:a9:d4:fc:b0:a4:4f:d8:87:e8:64:13:9f:5c:dd:56:0a:
         83:cf:80:dc:44:57:82:a1:1e:e3:8b:04:37:cb:81:6d:12:f7:
         b5:e7:39:f1:1a:5b:2a:7e:e2:5a:aa:a1:9d:fb:b6:7f:cd:8a:
         42:9e:22:b7:42:20:23:d9:b3:2f:83:87:43:51:f0:92:be:3b:
         18:8b:35:ef:ec:0e:8e:a4:2c:bc:2c:a0:60:33:57:e8:44:b0:
         42:b2:b6:55:fa:a6:ac:f3:a5:df:a7:8a:d9:52:58:5d:f0:66:
         08:5e:2b:b3:9c:11:73:dd:81:16:73:b6:0f:be:ff:f9:f5:4f:
         4b:ce:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:48 2026 by rpki-client