Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/785ed4dd-e133-3675-a121-4bd56285b68c.roa
File:                     785ed4dd-e133-3675-a121-4bd56285b68c.roa (raw, json)
Hash identifier:          E34xsElhMK/FAguwSdFuXcBuGw2dchovVmjHbgjmyVs=
Subject key identifier:   F8:1A:58:0B:43:54:A7:5C:4C:0E:BF:A2:4B:90:78:DC:6B:94:E8:09
Certificate issuer:       /CN=e84a8059-d166-41ac-97fb-85a0f3e90985
Certificate serial:       010D0C9F4328584D149FFB01AA990C6A108C5B40
Authority key identifier: 4D:7A:C5:48:77:93:6F:EF:6A:87:CA:0A:3B:37:56:51:C7:54:3C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/785ed4dd-e133-3675-a121-4bd56285b68c.roa
Signing time:             Fri 06 Mar 2026 17:17:13 +0000
ROA not before:           Fri 06 Mar 2026 17:17:13 +0000
ROA not after:            Thu 04 Jun 2026 16:17:13 +0000
asID:                     393986
IP address blocks:        161.199.160.0/24 maxlen: 24
                          2602:fd76::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/e84a8059-d166-41ac-97fb-85a0f3e90985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/e84a8059-d166-41ac-97fb-85a0f3e90985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:9f:fb:01:aa:99:0c:6a:10:8c:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a8059-d166-41ac-97fb-85a0f3e90985
        Validity
            Not Before: Mar  6 17:17:13 2026 GMT
            Not After : Jun  4 16:17:13 2026 GMT
        Subject: CN=b2fa778b-ce5d-4637-a350-db2cbe94ee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:1c:27:47:b2:7a:8f:e4:0b:cc:e1:3e:b0:
                    af:a5:bd:c4:0b:49:e7:87:85:f1:99:9e:08:63:7b:
                    d9:be:eb:c6:c2:33:58:6d:3e:70:e3:56:83:3d:45:
                    ca:73:41:9c:41:5e:c4:28:4e:f7:be:06:30:73:d8:
                    38:bf:64:52:7c:d4:af:c2:20:da:74:8a:09:c7:8c:
                    05:bd:52:66:b2:fe:25:fb:b9:c2:5a:6a:f0:47:4d:
                    ae:35:d0:59:ae:ca:4d:1c:68:f3:e9:f2:8e:86:d1:
                    9a:77:ca:61:e7:17:8e:a8:9f:a4:4e:30:1e:98:e4:
                    f0:30:05:a7:18:9e:de:0a:ea:9d:cc:7c:a8:42:a5:
                    cb:1e:45:2f:97:8d:1a:fc:44:ef:c2:83:7b:26:1a:
                    83:7d:33:ca:14:8a:df:4b:90:91:0a:dc:24:9d:48:
                    42:cf:9d:e6:27:e1:da:cb:52:a9:70:41:ec:a8:be:
                    3e:f7:71:46:34:86:d3:82:8b:50:79:c6:22:e2:1a:
                    29:ca:09:13:9a:a6:ba:aa:a3:d6:ec:18:f6:27:19:
                    fe:1c:0d:da:62:19:e2:a4:c3:ac:a1:d1:5f:e0:46:
                    e0:66:27:17:88:22:61:af:ae:f9:fa:f2:f4:7e:88:
                    60:6c:47:db:25:e9:8d:37:ca:1b:47:03:5c:e4:54:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:58:0B:43:54:A7:5C:4C:0E:BF:A2:4B:90:78:DC:6B:94:E8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/785ed4dd-e133-3675-a121-4bd56285b68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/e84a8059-d166-41ac-97fb-85a0f3e90985.crl

            X509v3 Authority Key Identifier:
                keyid:4D:7A:C5:48:77:93:6F:EF:6A:87:CA:0A:3B:37:56:51:C7:54:3C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.160.0/24
                IPv6:
                  2602:fd76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:ab:61:21:f4:45:80:33:a3:9d:bd:8d:b2:31:de:26:e7:
         cb:14:8b:f2:82:25:6b:9a:1c:91:62:6a:c0:18:1d:f6:c7:86:
         71:f9:18:03:32:4c:9a:d3:d5:87:d1:57:69:cb:11:63:c2:3a:
         f9:e5:57:8e:0e:88:2d:ae:4a:f3:45:af:45:97:81:48:7a:3d:
         e9:fe:2f:9b:af:73:ba:09:fa:ee:28:33:ce:32:02:76:29:07:
         27:c4:7b:95:22:ee:b6:34:a5:05:27:50:f8:0b:b3:7c:a3:b5:
         ae:f5:24:11:68:84:ce:1b:79:02:33:fa:61:55:e8:d4:8f:73:
         7f:98:a5:ed:88:ad:9e:16:c4:26:ce:a6:2a:62:bb:b1:94:d8:
         69:ed:8a:65:c3:d3:00:8e:13:8f:28:15:a9:ee:ec:3e:23:5e:
         57:b6:69:9a:33:60:4b:cf:20:5f:e6:00:b5:d0:18:a2:e5:95:
         e9:6a:f7:9e:dd:0b:0d:97:d6:8e:9e:09:f0:b1:49:04:ef:81:
         1f:14:ea:93:96:e4:5e:fc:4a:8f:4d:b4:b9:e8:3b:06:44:51:
         73:52:e3:71:2c:27:8a:6b:dc:4f:9c:2e:0a:fd:f3:60:72:cd:
         ef:13:3b:7d:ea:34:44:8c:a5:4a:22:23:76:15:13:54:df:1b:
         8c:08:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:16 2026 by rpki-client