Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa
File:                     afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa (raw, json)
Hash identifier:          6oL8jswBF0pZwvRm4hgIF39iiHa/GWog7MZnpGpc2pY=
Subject key identifier:   BD:1B:0C:D4:2E:4D:A9:47:2D:78:92:F3:09:C3:36:C0:D0:63:8B:27
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F4328584D44FA38BB2088A58708D18D00
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     11051
IP address blocks:        205.207.255.0/24 maxlen: 24
                          2620:13e:500a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:38:bb:20:88:a5:87:08:d1:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=dfba91cf-2641-4df4-a7ab-506ba0b5ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:c5:b6:1a:74:be:26:2a:ea:64:b6:87:91:
                    f3:a4:13:0e:85:62:09:81:31:f8:33:02:b9:46:1b:
                    0a:ec:69:00:15:73:ed:d2:70:be:fc:46:91:59:fa:
                    34:70:b6:36:0b:17:31:a9:98:bc:ab:2d:bc:9e:fc:
                    12:e4:a5:ea:9e:7a:cb:24:88:7c:e1:13:59:36:9e:
                    59:14:18:09:23:55:b4:5f:c8:e8:1b:37:6f:47:bb:
                    c7:89:21:3c:f2:9f:dc:de:eb:94:54:09:76:d3:d0:
                    26:ad:c1:61:bb:86:de:54:72:64:c8:88:f5:c7:5b:
                    ed:22:f5:3a:61:4a:d8:50:b4:b3:ed:d0:ad:74:28:
                    72:ac:54:f8:36:93:2f:23:49:a8:8d:66:a3:2b:92:
                    39:e2:cd:d5:64:2f:ca:63:d0:e4:6b:ae:0f:fd:d3:
                    4e:e2:ce:56:5d:2d:e9:83:d6:51:c2:e7:b9:c9:bb:
                    63:f4:63:3d:65:b1:e0:d3:59:ce:d4:d0:1a:04:46:
                    01:7f:e1:05:28:8b:5a:94:5c:ee:18:df:1f:50:1c:
                    4c:da:60:12:9c:ae:3c:44:9a:9c:6e:eb:18:a8:5c:
                    df:04:86:3e:06:26:dd:70:52:65:bd:b7:19:26:e1:
                    0e:32:59:82:21:b2:19:cc:00:b8:3a:d9:d4:2e:44:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1B:0C:D4:2E:4D:A9:47:2D:78:92:F3:09:C3:36:C0:D0:63:8B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.255.0/24
                IPv6:
                  2620:13e:500a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:3f:35:16:63:fa:12:e6:e1:0e:8c:a0:4e:4c:b9:db:d4:
         75:05:52:45:5b:b9:53:cd:d9:94:ed:7d:27:a8:5d:be:29:16:
         18:89:df:b7:15:00:8f:ee:1a:1b:20:a3:04:88:a5:02:08:a6:
         02:77:8e:6b:b6:5f:a8:0d:a7:cc:1d:82:ab:a5:a9:3f:56:b2:
         72:38:72:e9:e6:55:87:9b:9e:ba:c7:f7:93:df:12:f4:7d:d1:
         36:af:1f:53:5c:ec:2f:85:ac:a6:ba:3f:c3:60:82:e4:fa:71:
         8b:b1:b6:38:de:28:94:2e:b5:d4:b1:61:1a:b9:7b:a7:3d:9f:
         3a:db:29:56:a4:75:6f:08:c6:fd:c6:0c:c8:65:64:6d:9f:cb:
         37:9f:9c:6f:5a:db:57:6f:ed:f6:43:b0:b4:70:72:8c:f7:9f:
         73:4b:21:79:32:24:38:e1:a0:e1:1e:11:c1:0a:53:f3:1c:ae:
         c5:00:ae:50:15:0f:c2:6e:0d:ae:a1:98:94:6f:43:32:4d:a1:
         73:03:f2:ba:a9:21:10:bc:82:fd:90:7b:24:37:e4:ed:eb:eb:
         16:a8:f0:3f:14:cc:36:3a:64:85:a4:30:9d:73:20:bb:df:be:
         9b:18:2e:b2:76:a2:f0:7c:32:50:a6:37:c3:af:87:36:97:60:
         05:da:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:53 2026 by rpki-client