Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
File:                     b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa (raw, json)
Hash identifier:          bXwDlLuGIrxq3/R++yte4LS47/H2pm8lgUU7wpRvABI=
Subject key identifier:   0A:94:86:57:DA:70:5E:F1:89:DB:18:AD:4C:3E:AA:7F:64:AC:66:45
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584D492A6B12873FC38D3A624990
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6b:12:87:3f:c3:8d:3a:62:49:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=885befca-8a12-4014-bc32-dc9d64afcd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:32:e5:f6:c7:f6:77:7a:97:23:44:fe:59:
                    6a:fa:61:f0:3b:b4:1d:54:b7:11:72:0b:7b:36:70:
                    b0:f7:4d:49:3a:86:fd:16:db:3f:4d:bd:94:85:55:
                    c6:92:99:2e:78:81:2e:f0:0c:6e:f4:b0:73:93:0a:
                    b1:ed:af:8b:ec:c1:0e:c8:5e:05:52:93:dc:2b:c1:
                    29:ba:da:39:51:89:c2:9f:fb:b5:39:3e:cb:e7:74:
                    d9:6f:b1:42:01:57:ed:2c:65:85:a6:28:ce:0a:55:
                    81:85:b0:08:b7:43:32:5c:e1:c7:70:cf:5e:7b:df:
                    ed:ca:91:08:29:d2:a9:56:d7:91:1e:7e:5b:03:83:
                    a2:f5:69:15:99:68:1d:11:3e:07:63:2f:2d:5a:13:
                    28:8f:f6:3d:8f:95:a9:e1:13:3c:80:ed:51:44:ab:
                    84:ba:db:52:c0:13:a9:76:a8:12:de:f8:22:dd:b0:
                    6e:73:71:46:3a:8b:0b:b2:03:85:16:7d:74:66:a9:
                    0b:e6:75:22:31:77:20:7a:8a:60:18:e8:f3:ea:76:
                    6a:36:09:b5:04:3d:9d:bc:82:90:29:af:cc:6d:66:
                    7c:14:af:cf:ee:6d:4a:36:d6:4b:52:78:b6:c8:e9:
                    f1:8b:2c:ab:b1:44:b1:6b:a1:54:ef:e5:c6:5d:28:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:86:57:DA:70:5E:F1:89:DB:18:AD:4C:3E:AA:7F:64:AC:66:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0b:4c:e1:62:57:f8:c4:3e:bb:45:4b:e7:30:60:bc:a3:11:
         68:9c:73:2a:a0:88:0e:2e:60:69:d3:8f:a4:10:88:69:07:da:
         1a:28:f1:0e:6e:02:89:5c:b4:ef:69:0d:fe:4a:04:e7:7e:43:
         53:fb:62:0f:8d:fa:fe:48:e0:55:a6:0b:51:c4:91:dd:44:4e:
         a6:06:ea:49:af:51:f3:35:e3:8f:cc:92:a0:40:6f:bb:89:3d:
         e6:e5:6f:bc:b6:f6:fc:84:1e:58:03:b9:57:12:be:e7:03:d7:
         9b:dc:24:32:73:03:38:09:a3:05:c7:f9:6f:12:2c:c1:4e:fe:
         e7:2c:60:10:dc:3e:43:f6:7f:dd:b5:d3:ba:c1:8f:48:c3:b9:
         00:82:a3:a3:68:56:dc:2d:c1:8f:eb:60:8c:63:2a:3a:a7:80:
         ee:3f:49:75:3e:c1:f1:f7:3c:fe:e2:0e:39:75:66:c9:e1:85:
         fc:48:2c:9e:20:ad:63:fb:79:99:83:91:f4:b2:39:cf:d4:3a:
         1e:8f:6d:56:81:dc:ba:f4:7a:14:77:d1:b9:60:9a:70:95:24:
         32:1d:53:39:43:2d:47:58:89:0a:68:df:9c:95:dd:d0:94:dd:
         86:75:91:d9:17:e1:0f:e3:e9:03:b2:22:e0:a1:a2:94:a5:8e:
         60:00:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:47 2026 by rpki-client