Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa
File:                     a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa (raw, json)
Hash identifier:          fYBm1tH7MhAMGNPH54AeH270X8l8oHaV/iiaYoAeCa8=
Subject key identifier:   DE:84:58:50:61:84:16:15:A7:5C:EC:1B:6F:F3:30:76:EB:BE:93:2C
Certificate issuer:       /CN=bc061f95-a504-48f1-88f1-fae53628511e
Certificate serial:       010D0C9F4328584D19B4D5843AF955D3F9588000
Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     398885
IP address blocks:        204.107.12.0/24 maxlen: 24
                          204.107.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d5:84:3a:f9:55:d3:f9:58:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=9ce4dcda-2d8f-4dda-b04c-fc8c9e019bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:7a:03:2c:7a:36:61:8f:72:dc:37:86:ab:
                    95:29:80:68:0b:f1:50:95:fa:7b:16:68:ed:a4:af:
                    d4:8c:44:26:70:a2:e8:8e:4c:07:97:6e:7a:07:69:
                    34:ed:a5:ed:e0:a6:9b:7d:54:bb:1b:69:b2:0a:8e:
                    ef:a3:31:a7:99:c8:01:b8:b0:a9:8f:ac:49:12:54:
                    b1:09:a8:eb:94:81:60:1b:13:6a:a9:44:d9:fc:68:
                    38:03:c0:bc:85:8e:bb:fb:68:7c:c1:93:b3:d5:c6:
                    cb:3d:47:e0:84:07:93:82:e5:ea:7f:39:f5:79:89:
                    81:15:d1:56:c2:85:1f:47:06:33:49:5b:f3:81:cc:
                    26:77:46:63:05:8c:5f:17:50:d5:7f:dd:5e:01:f0:
                    96:86:d2:50:2f:e8:89:11:06:54:82:45:88:89:b8:
                    58:8b:d3:5c:55:38:66:b5:fb:0d:58:d8:2a:8f:7b:
                    ba:3c:42:0e:87:dd:a8:31:bd:c1:ba:1b:94:77:51:
                    50:72:6e:5a:5a:80:4a:2b:b7:41:c8:a0:f7:6d:1e:
                    f1:ff:e5:a0:e1:61:a0:c5:d4:59:78:39:92:29:20:
                    7c:72:f7:d1:4b:b6:18:43:0a:f2:f6:61:9e:3e:be:
                    c4:00:48:4e:4e:e8:73:b8:c4:73:bd:69:0e:57:f1:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:58:50:61:84:16:15:A7:5C:EC:1B:6F:F3:30:76:EB:BE:93:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl

            X509v3 Authority Key Identifier:
                keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:3e:b2:8c:6f:0e:b0:96:ee:3b:e2:dd:40:4c:16:85:de:
         d7:9a:ee:75:73:73:64:df:0a:38:64:9c:d8:70:82:07:c0:e4:
         2d:a2:f8:0f:20:ce:30:04:d4:7c:a4:9c:64:7c:14:b6:73:b4:
         6c:fb:c1:d2:55:51:b7:aa:49:3f:08:42:36:83:f7:e5:8b:92:
         8a:c4:0a:2f:1b:3d:2d:64:90:97:c6:ca:1a:cf:5f:94:4f:c0:
         12:0a:60:54:ab:ba:10:04:07:6d:4f:18:96:a1:cc:5f:2d:0a:
         03:06:66:9a:e4:ba:e3:e5:1e:2a:87:32:5b:8f:90:bf:ca:39:
         b4:9c:d3:e2:a4:2d:aa:82:80:6e:8d:62:fa:7b:80:6f:83:94:
         07:6d:eb:e1:02:48:50:ea:c1:6a:02:9e:08:2e:a1:9a:02:0e:
         bf:5a:9b:d5:8d:d0:71:13:d7:6d:21:6f:ac:f9:46:ac:81:9b:
         28:7c:ba:07:33:5d:85:54:6b:e6:f1:e7:fc:24:da:59:b9:2d:
         37:0b:71:c5:af:e9:c3:99:e4:56:20:29:01:77:f7:ba:c4:9d:
         31:0b:55:6f:36:68:9a:3a:59:45:3c:53:c9:14:97:c5:b4:b9:
         f9:24:bb:63:3e:e1:81:5d:8d:e0:6a:56:75:ce:a8:c4:28:0a:
         32:74:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:57 2026 by rpki-client