Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa
File:                     51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa (raw, json)
Hash identifier:          AtsxL2QNQ0WBIbyactMA73b3As2KDs/O2WVXws/GyRw=
Subject key identifier:   9A:68:66:CE:FF:BC:9B:D5:72:1D:6B:F8:26:1A:F9:A2:91:9F:A8:41
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584D492A61FE9140D832A9E70480
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     1207
IP address blocks:        147.73.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:61:fe:91:40:d8:32:a9:e7:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=6db68d67-99b2-4442-ab3b-e718ddf9c7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:4c:06:47:7b:fe:1b:d4:44:55:26:a7:1a:
                    c0:92:06:02:02:32:ff:72:91:1c:71:cf:72:65:de:
                    b5:0c:2d:f8:47:e8:1c:e1:ed:ee:59:24:93:00:c7:
                    52:e2:c2:2d:94:ea:3a:77:ff:df:cf:fc:15:54:64:
                    21:32:5d:e7:02:93:4e:d0:00:f7:94:7d:41:a2:96:
                    f1:e0:70:9a:cb:94:ec:96:3c:4e:96:cb:ea:e4:d0:
                    67:5a:51:c8:f7:5b:55:1c:34:1e:72:5b:0e:10:06:
                    75:5c:32:bc:fe:ef:de:6c:92:f4:d5:79:a8:1f:4d:
                    67:46:66:05:35:c0:08:a3:8f:be:5f:50:1d:df:2c:
                    1f:b6:70:a0:ea:1f:7c:4f:33:e2:c1:75:b2:a5:08:
                    eb:68:27:27:22:e9:39:54:c0:de:5b:12:f4:ea:08:
                    39:23:89:07:a9:08:8d:38:11:6f:79:d1:ce:f2:72:
                    65:17:71:ef:c0:e7:24:7b:5e:15:ca:c7:6b:c4:64:
                    5d:a7:e2:6e:b4:f0:f8:92:aa:39:d2:bc:6c:52:cb:
                    f2:24:91:bf:fc:65:c0:3f:c2:e8:15:cf:d8:98:92:
                    d5:db:83:19:5b:5c:f7:03:26:db:29:01:81:5e:cc:
                    56:6b:33:44:45:9e:73:9a:71:8e:37:29:83:9f:80:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:68:66:CE:FF:BC:9B:D5:72:1D:6B:F8:26:1A:F9:A2:91:9F:A8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/51bb854a-405a-3171-a6f6-e0493b3fe9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:51:4c:a4:93:97:81:c7:f2:3f:49:cc:e7:32:f2:b1:53:16:
         6a:7e:2b:7f:2f:d6:65:64:ac:d4:a8:01:35:78:3f:e6:33:c1:
         ea:32:43:44:66:9d:06:93:fb:07:69:a3:c1:1b:e8:40:54:2f:
         40:b3:6f:74:c7:49:95:ad:31:11:87:6d:db:97:94:d2:ee:06:
         47:3f:23:da:75:93:c9:fb:6a:e8:f9:60:e9:b7:b3:c7:60:e7:
         ed:cf:b3:11:b5:74:ef:9f:61:b1:99:b8:f7:e8:00:ef:b2:94:
         ba:80:7a:6f:c3:9a:e2:70:69:94:86:35:ff:82:ce:c8:4c:99:
         06:32:12:c8:2a:2a:c8:c7:96:ea:95:04:c7:95:db:e3:de:51:
         02:ed:68:15:f3:cf:53:2e:27:8a:a5:b3:7f:0f:00:c0:8a:0e:
         f8:01:df:22:a5:c3:77:f9:b5:33:c2:bd:e7:02:c9:51:2f:fe:
         46:79:0f:70:28:50:24:b2:4f:85:01:80:03:89:75:eb:a1:0f:
         f9:f1:62:a5:5f:d9:a5:12:41:76:8f:20:a4:cd:d4:2d:dc:c7:
         33:95:d5:bf:75:74:be:ad:a2:c0:ff:62:56:ed:54:eb:50:df:
         c8:cd:47:9b:c0:df:9a:21:8b:36:7c:46:2e:c8:bc:57:62:ba:
         a0:ed:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:24 2026 by rpki-client