Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/eb548bde-3b77-3daf-a6de-e0262066492e.roa
File:                     eb548bde-3b77-3daf-a6de-e0262066492e.roa (raw, json)
Hash identifier:          VF6nqWMH9y7hwHlaahFFr+rMv9/0uiy1v+Fy3bj7S94=
Subject key identifier:   4B:94:54:07:60:62:FE:9E:70:29:1A:2D:E8:49:2F:24:73:A2:BA:88
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584D143D231F98C397724F37CD00
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/eb548bde-3b77-3daf-a6de-e0262066492e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     54004
IP address blocks:        173.0.100.0/24 maxlen: 24
                          173.0.101.0/24 maxlen: 24
                          173.0.103.0/24 maxlen: 24
                          173.0.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:23:1f:98:c3:97:72:4f:37:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=ee6f31a9-21df-4f8d-b29b-ae703435770f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:74:a4:d4:b3:4f:60:72:5d:3e:78:3d:94:
                    dc:2b:49:91:52:2a:ea:01:95:7d:0e:b7:b2:69:6a:
                    a4:0d:b6:06:b9:a8:44:70:96:33:9a:3c:0f:3a:af:
                    6c:9c:91:87:35:4c:a9:46:5e:94:56:39:2e:31:5a:
                    60:ab:a9:48:15:c8:08:7b:ca:80:cc:bd:57:bc:fa:
                    2d:c8:e4:d8:72:9e:04:40:3e:54:c1:7e:eb:71:6c:
                    1e:03:d9:58:ce:87:e5:79:15:fc:68:67:6b:d5:15:
                    7c:1c:dc:51:0b:68:56:1a:43:59:83:2f:63:62:85:
                    f9:a1:cb:c2:58:6e:9e:dc:9d:a6:09:70:32:5b:a3:
                    7b:c7:be:15:f2:02:39:19:9e:c7:cd:94:46:7e:3e:
                    ce:b4:f5:9c:2a:ca:aa:29:e2:c6:44:5c:7f:1d:5b:
                    2c:fb:ad:6c:53:83:9f:f3:cb:46:05:06:fd:a4:eb:
                    a5:f7:9b:7a:20:bb:2f:38:a4:9e:08:07:be:88:4d:
                    23:ad:08:ae:6c:51:80:e0:de:e6:95:a2:74:16:2d:
                    7c:e2:d3:8c:80:00:5f:37:35:52:a7:23:21:e9:c5:
                    be:61:ec:64:8f:64:d1:f4:1a:e5:4f:94:d0:29:f8:
                    9d:7b:eb:7d:f6:c7:b5:ad:28:84:1a:47:7e:2b:8e:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:54:07:60:62:FE:9E:70:29:1A:2D:E8:49:2F:24:73:A2:BA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/eb548bde-3b77-3daf-a6de-e0262066492e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.100.0/23
                  173.0.103.0/24
                  173.0.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9c:6d:a2:16:17:77:0e:43:82:8a:3c:49:88:1b:dc:cc:22:
         f7:7b:3e:96:38:b4:63:c0:70:de:7e:b7:6e:66:61:9e:4e:81:
         fa:69:9a:0a:28:c0:c4:7d:32:8a:7c:91:01:da:f0:c5:54:98:
         45:89:4a:a8:56:d2:79:6d:1d:dd:a4:bb:9a:20:b0:08:a5:cb:
         33:f1:5c:86:2e:60:53:1b:b9:6e:c4:e8:c0:b3:e3:c9:fe:36:
         e4:ca:26:8a:9f:f4:93:9f:47:34:21:b9:44:a0:ed:4d:1d:09:
         62:a8:d8:38:4c:db:5e:ba:e9:07:41:5d:bb:74:68:f0:72:51:
         71:17:1f:e0:b6:81:fb:b8:df:4e:da:c3:f7:ac:57:85:bf:55:
         7d:93:61:75:c7:32:51:8b:a9:f5:8c:30:81:b0:8e:f1:d2:f8:
         0e:9b:10:58:71:17:51:8e:bb:9a:b7:62:09:ec:37:81:eb:f3:
         4b:49:49:92:58:df:9b:df:4d:c7:76:26:df:18:b9:34:60:37:
         95:f4:44:4d:92:19:55:c3:d4:00:bd:29:57:a9:fb:db:93:a4:
         05:7f:eb:01:da:1b:ba:e9:e9:f6:14:db:14:48:06:d4:9b:be:
         83:f9:0a:bc:83:18:8f:51:be:95:3c:69:ae:72:a8:ca:c3:3d:
         ce:22:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:40 2026 by rpki-client