Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa
File:                     7a05c7f2-76ed-395d-942c-e90fa3848060.roa (raw, json)
Hash identifier:          m5FxOvyRn/7apzFUKNTK5phCBWv7mxLp7qneZJCgIAg=
Subject key identifier:   A9:71:5C:54:71:29:B7:AD:82:42:5D:51:9B:BD:26:26:2E:A3:BC:91
Certificate issuer:       /CN=cae112c4-38cb-44c3-a8df-43152814a899
Certificate serial:       010D0C9F4328584D44322F5C7EFB3A7D6861F470
Authority key identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa
Signing time:             Mon 23 Mar 2026 18:17:40 +0000
ROA not before:           Mon 23 Mar 2026 18:17:40 +0000
ROA not after:            Sun 21 Jun 2026 18:17:40 +0000
asID:                     63019
IP address blocks:        162.251.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:32:2f:5c:7e:fb:3a:7d:68:61:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae112c4-38cb-44c3-a8df-43152814a899
        Validity
            Not Before: Mar 23 18:17:40 2026 GMT
            Not After : Jun 21 18:17:40 2026 GMT
        Subject: CN=506378d8-58e1-44ba-aeab-c52938b6385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:1b:a7:ee:7f:bf:71:b7:f5:f2:5f:33:71:
                    90:1a:11:90:aa:35:ea:2e:42:5f:ef:b7:d8:c5:27:
                    37:e6:e7:9c:96:66:0a:52:04:65:9e:4b:74:ee:ff:
                    58:0e:8c:f9:9a:4c:69:01:23:f1:82:ce:6c:57:2f:
                    e5:28:82:b7:7c:fc:2d:a5:04:55:c5:6d:83:f9:3b:
                    4a:fb:9a:34:49:9d:a8:1b:ab:60:05:15:93:2c:25:
                    07:0a:fe:e0:b1:e9:85:a5:f2:02:af:32:4c:a5:b5:
                    de:07:b5:d1:ff:ca:7e:f9:69:7b:8b:21:a0:37:1d:
                    d2:9b:4a:10:4c:f1:05:94:19:83:27:fd:84:97:df:
                    43:c8:72:1d:64:0d:bd:b2:f9:e1:fa:61:5e:45:db:
                    b7:9b:ac:e3:70:fb:44:bb:99:1a:8d:63:dd:fa:33:
                    96:4d:e0:b0:08:41:99:13:f7:eb:d5:28:67:17:bd:
                    73:33:68:d5:6b:46:ca:9d:90:3a:03:90:8b:45:e8:
                    74:f0:33:36:bc:e2:20:e9:b1:01:fa:76:6a:20:ce:
                    19:14:eb:40:72:da:5c:a6:60:71:0c:35:cf:2c:ff:
                    7c:dc:16:a3:b5:f4:ed:98:79:9d:b9:03:73:02:4e:
                    a7:62:d3:f8:e8:ff:2a:3c:a5:c1:90:b3:8e:72:86:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:5C:54:71:29:B7:AD:82:42:5D:51:9B:BD:26:26:2E:A3:BC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/7a05c7f2-76ed-395d-942c-e90fa3848060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:28:61:27:27:fb:cb:ea:74:d1:46:c4:27:22:de:b0:dd:
         b8:87:c7:3b:6b:29:ed:ff:02:e4:fc:6e:c8:1f:57:d8:87:d2:
         87:58:40:3a:30:ee:ac:39:06:d4:15:ba:f6:91:86:7c:2b:7c:
         73:7a:e5:c7:1e:4c:93:85:86:d2:26:81:c0:cc:e6:33:e0:e8:
         5d:2b:aa:79:52:2a:da:b3:96:80:61:58:8d:ab:98:28:15:dc:
         04:94:b7:9a:e3:44:7e:9d:93:8d:3d:e4:f1:c0:96:6d:f5:21:
         46:e4:46:39:e3:69:a9:55:28:76:54:50:c0:9d:c8:1c:2b:ec:
         b2:55:f4:95:a5:20:58:15:f8:94:29:f2:ae:02:ca:03:bf:a5:
         b6:f6:0e:91:3b:c6:53:11:cf:f7:84:82:0b:8b:69:5b:24:0d:
         76:8f:e9:3c:fc:21:72:df:37:93:d1:42:de:87:e1:29:7c:da:
         7a:33:f1:7b:11:1a:d7:2d:69:a4:e3:09:9d:73:ea:b0:30:dd:
         ca:6f:41:56:61:e3:e9:15:3f:86:39:87:c0:b4:7f:67:93:f8:
         f6:6e:68:58:fc:20:09:52:e0:13:a4:cf:aa:b2:ed:12:78:ce:
         6b:d0:f8:8e:f0:14:4c:be:27:18:cb:3c:b7:cf:7c:f0:73:5d:
         1a:d1:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:55 2026 by rpki-client