Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa
File:                     7bc92fef-7d06-3b35-9040-ddc10698a56d.roa (raw, json)
Hash identifier:          UQ3RONVzUgXuIdCxgp2R5N73Y2UZ6FimmXiZMVxD4Lw=
Subject key identifier:   01:5F:56:4A:63:BF:79:81:35:AF:C5:A1:0D:9E:DE:54:E7:DE:9E:01
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584D333686EDB5132807AF221E80
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa
Signing time:             Tue 17 Mar 2026 16:17:40 +0000
ROA not before:           Tue 17 Mar 2026 16:17:40 +0000
ROA not after:            Mon 15 Jun 2026 16:17:40 +0000
asID:                     6079
IP address blocks:        144.208.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:36:86:ed:b5:13:28:07:af:22:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Mar 17 16:17:40 2026 GMT
            Not After : Jun 15 16:17:40 2026 GMT
        Subject: CN=bdb0fc8d-62d2-4beb-b185-1e30ad21192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:42:86:a1:0a:ff:3d:f2:ee:67:70:a1:a2:
                    93:cd:34:98:61:30:4c:f9:4c:57:ad:3e:0f:ff:c0:
                    b3:83:06:e9:6b:cb:6e:9e:42:b0:b1:7f:79:10:b8:
                    11:25:df:6e:91:06:17:4e:40:32:21:ef:03:14:65:
                    f6:2d:7d:0b:3a:87:3b:f6:2b:66:33:e1:60:47:21:
                    60:0e:0c:df:e0:09:c9:a7:3f:c6:e6:19:a0:11:4c:
                    eb:e6:61:e1:b1:56:4a:a0:d8:9a:39:ee:4e:51:d0:
                    e4:07:2f:ce:32:16:f6:81:12:31:8d:c1:bf:c2:a9:
                    61:75:15:43:e3:c6:39:38:28:db:5a:32:63:61:83:
                    cb:a4:80:66:55:f3:04:e6:dc:6a:cf:23:d1:88:20:
                    6e:a2:84:36:88:a3:d1:73:7e:de:d9:3c:86:f6:ad:
                    9c:e4:f2:e1:ac:6b:42:12:50:58:a6:b0:3c:3b:43:
                    5a:dd:5d:8b:cc:3a:f8:a4:7a:e2:8b:be:3f:8a:4e:
                    84:23:59:9f:0b:27:5c:5c:72:95:c5:64:f3:6e:3f:
                    3f:9d:25:0a:ec:0d:71:b9:ed:ac:d1:fa:7b:37:4d:
                    97:31:36:a0:67:e1:a1:16:ae:9d:8e:82:32:2e:cd:
                    fd:1e:97:9e:97:6e:c3:4d:79:99:2e:d5:e0:e9:ff:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:56:4A:63:BF:79:81:35:AF:C5:A1:0D:9E:DE:54:E7:DE:9E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/7bc92fef-7d06-3b35-9040-ddc10698a56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:36:02:2b:ba:f8:50:54:17:44:4d:fc:55:88:78:ed:68:ac:
         26:e4:f2:df:75:4c:4c:66:e6:42:5f:3e:fe:d8:2c:cd:1c:60:
         81:e7:df:72:75:f0:b5:86:73:4e:27:15:cf:1d:15:72:52:33:
         32:c5:87:ab:e9:fd:a4:1b:75:7e:08:67:6a:3e:75:fb:c7:60:
         c5:48:ab:37:68:a5:36:b3:ad:c2:20:f6:df:86:94:8f:2f:ab:
         90:f5:17:d8:a7:1b:c9:29:1a:04:a1:d8:97:f6:30:0b:f0:ff:
         32:d7:bb:06:d9:ca:60:53:28:b1:3e:91:69:3a:22:b1:f8:78:
         61:cc:1f:aa:f3:81:b9:51:47:d2:c0:e4:f1:87:a8:fb:f1:64:
         45:f9:1b:4e:61:7a:ae:57:18:2a:43:cd:e8:ec:7a:2b:25:c1:
         34:57:ff:65:64:c6:4b:e7:16:90:fa:8d:c1:a4:e0:15:07:05:
         0c:91:86:dc:a5:53:8d:8d:19:05:3c:76:ad:86:65:c8:7e:a1:
         a1:a5:7d:d4:71:a9:37:1a:31:1c:b4:f1:3f:79:f7:e2:35:4f:
         15:bb:45:ab:5d:d0:46:a1:99:2c:1c:b3:92:1e:9d:c1:43:12:
         44:0f:23:28:3f:6a:8e:1e:66:24:82:d3:8a:39:68:91:69:9b:
         db:21:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:18 2026 by rpki-client