Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/58bba6a8-042a-3789-a15e-d369fa51d61c.roa
File:                     58bba6a8-042a-3789-a15e-d369fa51d61c.roa (raw, json)
Hash identifier:          zFvrEIO+l8VXIwpCY4zeSQ9iWjKzfjiP/VT13S/2yeo=
Subject key identifier:   27:87:B6:46:3C:C0:38:C2:12:A1:FA:D1:B2:C1:71:D3:19:D7:AA:C0
Certificate issuer:       /CN=17b8f820-eb53-4e70-8747-af198fc70622
Certificate serial:       010D0C9F4328584D0E745A6B6BE8828598CD2100
Authority key identifier: 96:A3:70:79:60:EF:D9:81:A6:C1:FC:AF:90:7E:20:F8:8C:00:F1:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/58bba6a8-042a-3789-a15e-d369fa51d61c.roa
Signing time:             Wed 04 Mar 2026 12:17:20 +0000
ROA not before:           Wed 04 Mar 2026 12:17:20 +0000
ROA not after:            Tue 02 Jun 2026 11:17:20 +0000
asID:                     15113
IP address blocks:        205.157.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/17b8f820-eb53-4e70-8747-af198fc70622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/17b8f820-eb53-4e70-8747-af198fc70622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:74:5a:6b:6b:e8:82:85:98:cd:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8f820-eb53-4e70-8747-af198fc70622
        Validity
            Not Before: Mar  4 12:17:20 2026 GMT
            Not After : Jun  2 11:17:20 2026 GMT
        Subject: CN=f04b98e3-a9e7-44f4-bbd2-b8fff785b272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:a0:8c:87:61:3d:7c:ce:84:cc:87:c4:bb:
                    97:de:58:9b:b1:ca:e3:27:78:e9:31:b7:71:db:c4:
                    39:6a:3a:05:b8:5f:bf:1e:b0:ed:05:c1:64:e7:ef:
                    92:3e:4d:d4:2d:ab:1f:83:0b:a4:d4:31:95:78:b3:
                    5b:44:c9:f7:e4:bd:b7:f6:88:6b:2e:83:bc:d6:7b:
                    03:88:18:92:0b:45:1b:c8:b8:ae:2d:5a:88:60:78:
                    c0:f2:6f:53:4f:73:32:9c:fd:38:86:e3:f5:86:97:
                    b6:3b:70:a4:43:5e:de:cf:20:7e:d2:79:ad:87:47:
                    1f:6c:4d:f4:d4:dc:7a:64:7a:2c:6e:4d:05:05:a8:
                    ff:14:c8:a0:48:41:88:da:76:0c:11:2b:0b:cf:c5:
                    e2:96:97:33:d1:5b:cd:34:11:5e:3d:a2:5d:31:19:
                    77:1f:65:75:e5:16:02:4f:c6:1c:f8:dc:b5:76:3c:
                    99:63:ad:16:e2:68:18:59:4c:5c:aa:3b:fa:5d:6c:
                    04:ff:06:a1:28:44:17:42:b3:d5:7e:dc:70:bf:d0:
                    9c:b5:b6:ae:43:ca:35:5c:48:59:9c:ab:bd:fd:42:
                    52:fc:de:9a:56:61:92:3d:2e:46:6d:1f:7d:66:5c:
                    af:42:be:36:db:04:61:d1:33:7a:8d:73:93:b1:a7:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:B6:46:3C:C0:38:C2:12:A1:FA:D1:B2:C1:71:D3:19:D7:AA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/58bba6a8-042a-3789-a15e-d369fa51d61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622/17b8f820-eb53-4e70-8747-af198fc70622.crl

            X509v3 Authority Key Identifier:
                keyid:96:A3:70:79:60:EF:D9:81:A6:C1:FC:AF:90:7E:20:F8:8C:00:F1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/17b8f820-eb53-4e70-8747-af198fc70622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:bc:3d:45:cf:96:6e:06:ed:9f:7a:ee:b5:10:37:0c:38:
         3c:81:74:82:6a:e6:44:54:c5:bb:e1:cf:b3:0a:a4:99:73:88:
         83:c0:ab:0c:fb:49:c1:68:21:11:08:c1:5e:ef:a2:81:83:e3:
         2d:5e:55:a9:9c:83:36:41:98:19:ad:d7:a5:6c:4f:ea:83:33:
         62:36:25:d6:49:5c:3f:c6:e4:d4:5f:66:68:ff:b5:8b:2d:74:
         98:79:f1:40:8b:26:ee:0b:ed:30:d4:bd:98:27:07:fa:ec:ac:
         96:3c:7c:9f:70:aa:cc:a0:ce:99:b1:a5:55:45:a2:42:5d:67:
         fc:f2:28:17:89:b0:15:b2:70:c7:4c:05:a8:ae:40:3e:74:7a:
         93:d8:98:c3:db:f5:6f:cb:8f:ae:c4:0f:16:7b:9a:bb:db:d0:
         7d:3f:ea:c6:64:61:c6:b6:ed:52:d7:53:9c:a4:8d:af:9d:0f:
         ca:6f:4b:4d:08:e5:5f:5a:aa:95:87:77:cf:08:ef:56:65:c4:
         4c:bb:9c:4a:08:1a:93:af:52:7e:39:1e:d2:3e:65:c5:cb:07:
         6e:16:3c:3c:41:df:42:71:ef:65:f7:97:a8:62:d2:6c:70:40:
         a6:24:36:15:ca:df:03:df:38:71:57:81:b7:ef:2a:65:0e:8f:
         54:84:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:15 2026 by rpki-client