Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa
File:                     b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa (raw, json)
Hash identifier:          DFuyWVZ0FA174QUd6G207ivPgHVsPtKNs92PrcsTUdo=
Subject key identifier:   A6:3D:8D:59:E4:0B:8D:F8:5C:AE:C1:F1:51:FA:9A:40:B2:A0:BC:50
Certificate issuer:       /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Certificate serial:       010D0C9F4328584D492A5E1ABBF5BD67DB03A480
Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        208.71.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:5e:1a:bb:f5:bd:67:db:03:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=9c1a7cac-480c-4b13-b354-43ab6d1e5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:e2:a3:06:9d:86:83:db:7b:64:06:b8:ed:
                    c2:dd:9d:08:dd:88:73:bc:73:68:5e:f2:61:0f:5c:
                    33:96:a4:00:24:28:27:fc:1f:19:81:11:09:85:23:
                    ed:11:92:ea:77:1d:0d:08:a5:ad:bf:5e:93:49:e4:
                    b5:26:d4:2b:d5:a2:2e:dc:72:f1:f1:8c:66:11:c8:
                    3e:30:48:50:e3:a3:5c:55:a0:da:08:f2:4d:05:24:
                    f4:63:64:23:8d:2f:32:4c:b1:0f:6d:06:5b:c1:a7:
                    b6:c0:ed:55:5e:28:aa:6a:63:de:4f:10:c3:1b:52:
                    9b:40:21:de:a9:3b:00:76:4f:59:3c:6d:a5:45:1d:
                    e4:3e:18:e1:75:b1:20:4f:08:e7:24:44:43:7f:ab:
                    49:6c:ed:88:7f:00:76:9d:8e:bb:17:a2:c0:f3:2f:
                    60:61:25:89:98:4e:21:f2:b0:b4:8f:9f:0c:c2:f1:
                    ea:d2:6f:65:89:47:c4:0d:25:04:62:8c:61:eb:d0:
                    cc:91:35:16:9c:c3:4c:31:8c:2a:b5:2b:99:f0:cc:
                    66:f3:68:5b:90:d1:f0:60:b3:a3:ad:cc:21:57:b1:
                    47:76:b1:39:ff:da:b8:b4:af:1b:13:e0:5e:f7:55:
                    a5:68:06:82:ff:5d:0e:6b:77:da:91:48:31:f2:cc:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:8D:59:E4:0B:8D:F8:5C:AE:C1:F1:51:FA:9A:40:B2:A0:BC:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl

            X509v3 Authority Key Identifier:
                keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:ad:9b:8d:aa:18:26:88:b7:01:95:10:a6:2e:ff:53:8d:5d:
         e5:1a:b8:39:73:5c:0e:ab:a1:46:27:a6:20:7e:71:63:f0:91:
         71:99:bb:6c:bc:6a:82:84:6f:bd:e1:e2:f7:64:d4:ac:fe:b5:
         e3:30:6c:bd:a5:42:70:ae:12:f5:0a:9d:21:94:23:f1:7b:33:
         93:0f:7f:dc:a6:e9:34:38:8b:e8:ee:8e:fa:4f:07:18:6b:c4:
         22:2b:28:5b:20:07:ec:b1:44:7c:7a:ca:98:e4:87:f7:40:e3:
         d7:f2:30:51:1e:d2:8e:e9:a2:02:1c:a2:db:22:1d:b4:83:6f:
         59:57:34:29:a4:d0:0d:a6:1c:6d:4f:4e:6b:6e:24:67:15:37:
         b2:f5:9f:e1:f9:ab:d7:39:76:a5:80:cd:e0:32:0d:ef:32:75:
         a4:f1:65:a5:8e:b1:04:9d:39:cf:77:6d:34:ed:03:ab:43:be:
         81:98:fa:e5:aa:55:16:1b:f0:a8:0f:77:a4:fd:d3:48:5b:e0:
         8f:c9:ee:c6:ad:52:0c:bd:f3:88:6c:91:62:07:e5:94:6f:0d:
         cd:f1:e8:0c:0f:3c:11:b3:b1:be:ad:4c:70:d7:a5:9f:f8:59:
         5a:84:fe:e8:21:85:05:6d:2f:6a:cd:d4:4d:2f:74:25:c5:2c:
         16:f7:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:29 2026 by rpki-client