Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
File:                     f12db169-8a5e-3b39-b763-848b626ee468.roa (raw, json)
Hash identifier:          w5NLbfuazH+JrXA4+b7N6Rz7Tu2sibpBify8cJbvaZY=
Subject key identifier:   1A:9D:61:CE:EE:8A:96:BF:F2:22:A9:18:13:8E:F9:B5:62:BC:FD:52
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D47C4DC7AFB75587B75A0F400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     5065
IP address blocks:        216.132.110.0/24 maxlen: 24
                          216.132.111.0/24 maxlen: 24
                          216.132.116.0/24 maxlen: 24
                          216.132.117.0/24 maxlen: 24
                          216.132.118.0/24 maxlen: 24
                          216.132.119.0/24 maxlen: 24
                          216.132.120.0/24 maxlen: 24
                          216.132.121.0/24 maxlen: 24
                          216.132.130.0/24 maxlen: 24
                          216.132.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:dc:7a:fb:75:58:7b:75:a0:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=d2a24117-f728-4238-9e84-0c0a0433a359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:6a:9a:85:51:08:5c:60:c4:f9:ad:73:32:
                    82:d7:55:42:71:4e:3b:6c:56:1b:a1:7d:42:c3:fb:
                    61:de:b9:10:cd:9c:ad:c5:57:55:55:c3:07:b3:51:
                    f8:f8:a1:b8:da:e0:e9:e8:1f:b6:4f:02:de:10:0c:
                    77:08:76:c2:82:30:46:f5:c1:4d:f1:20:13:b5:79:
                    43:0a:7a:1a:09:8b:2b:99:bf:db:ef:91:0e:20:a3:
                    b1:d2:d6:34:23:07:53:bd:c0:19:0b:1c:a2:27:2a:
                    4c:e6:2c:11:bb:70:43:53:4f:b3:34:fc:1e:80:5b:
                    8d:aa:a5:83:23:9f:ba:3c:30:f9:66:c2:f3:02:20:
                    3c:cb:a7:f5:e1:42:e3:f1:65:3e:7e:02:7b:62:f7:
                    37:ca:7d:7e:0d:0f:eb:7c:48:04:4a:fe:4f:db:f1:
                    6e:8e:cc:a9:8c:0e:71:a1:ab:49:19:c7:a4:a8:48:
                    1e:68:91:c2:15:4b:b1:a1:43:1d:a1:32:11:ad:fc:
                    90:66:0b:de:94:b3:11:84:d3:59:26:46:63:0e:66:
                    5e:63:19:86:92:3f:fe:87:8d:78:ea:39:ac:b7:40:
                    5a:3d:fd:de:ae:9c:fa:59:68:79:55:be:d1:00:19:
                    2d:9a:57:71:40:c1:7b:b8:d1:3e:5b:3f:d5:01:0c:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:61:CE:EE:8A:96:BF:F2:22:A9:18:13:8E:F9:B5:62:BC:FD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.110.0/23
                  216.132.116.0-216.132.121.255
                  216.132.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:3b:44:cb:28:41:7a:b3:dd:3c:31:67:6d:2b:3c:71:e7:
         cd:fc:31:41:60:02:06:4b:f3:9b:86:36:3e:a3:a7:11:f4:0a:
         55:61:1e:11:4a:d3:ac:93:ba:71:d6:53:3d:4d:06:a5:a9:22:
         64:4b:e5:4d:e3:26:51:ca:65:93:3d:81:a6:a0:d2:38:c2:4b:
         40:48:43:eb:4e:6b:d0:ed:39:aa:69:49:13:ee:7b:7a:39:62:
         04:0c:c9:d3:35:8f:21:7e:0d:8b:cc:9b:10:af:ba:6b:9f:71:
         b0:50:24:63:8c:9e:8e:00:4b:86:20:a8:a2:8c:a9:b6:09:17:
         39:b7:bc:bf:dc:ed:b7:74:17:68:b7:a8:57:bc:18:36:06:5e:
         5a:87:c0:b6:e4:21:ac:60:ef:13:25:5b:6f:b1:fb:e1:81:63:
         38:28:9a:f2:8d:1a:5b:58:f7:66:d1:ab:93:84:d1:63:af:a5:
         f8:c2:cc:69:bb:f4:c1:49:91:74:bf:1e:6c:dd:7d:1e:07:c1:
         cd:61:27:54:61:8e:24:61:70:14:52:91:3b:c0:ef:f6:71:59:
         56:9e:80:25:c8:49:6f:5a:6c:10:a3:5c:36:2a:21:bb:06:8a:
         cb:60:98:3e:a8:68:ff:f5:19:ce:02:37:a0:84:9a:d5:d1:4c:
         f3:69:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:32 2026 by rpki-client