Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b116c1a-fd1c-3883-9847-c4452eb03795.roa
File:                     5b116c1a-fd1c-3883-9847-c4452eb03795.roa (raw, json)
Hash identifier:          wSmpmYBYzpe+jZpFC8kU3o8ml23GtuVcSpopKWHpV1M=
Subject key identifier:   6D:46:07:07:5C:3B:79:6D:32:B9:24:36:C8:0C:23:77:13:08:D2:F9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D6515224D154F733BD3FBD640
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b116c1a-fd1c-3883-9847-c4452eb03795.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        107.167.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:22:4d:15:4f:73:3b:d3:fb:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=afb8bb09-c1fe-4c31-b514-4e17a9f932a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:b8:1b:de:9d:20:4a:58:8f:ab:6d:9c:3c:
                    ac:56:4c:36:80:d8:64:72:35:ab:57:c2:b1:13:cb:
                    89:61:03:fb:fe:8a:35:ef:57:91:30:7e:03:dc:f4:
                    f0:94:63:63:c0:d9:b1:e6:58:d6:f8:33:c7:60:aa:
                    c4:5c:3d:e2:8c:15:1d:1f:98:91:e8:de:43:5f:10:
                    c7:25:12:cb:29:2a:a4:61:2d:ed:ee:80:d6:ce:9e:
                    b2:4b:99:ad:e1:14:a1:b4:92:de:10:fb:f5:75:27:
                    7a:47:c4:03:95:5f:6d:bd:8c:d6:22:83:8e:7a:5e:
                    46:f5:ab:98:a8:0e:b4:e0:b1:14:e6:60:df:fb:b0:
                    5c:ce:c8:64:3d:72:40:08:98:9b:c9:a8:f9:24:f3:
                    18:55:2e:5c:da:fb:47:01:e4:eb:61:61:86:da:98:
                    f6:49:19:c7:8d:1d:51:85:ad:7e:c9:8b:93:8e:12:
                    a5:c9:7f:92:da:e9:23:04:2a:65:18:30:8d:9b:9b:
                    74:bb:14:0d:b2:d4:83:00:dc:12:b4:4f:2a:f7:62:
                    32:c3:2b:9f:9d:2b:00:e1:bc:7f:87:34:26:b5:60:
                    1f:c7:34:f9:48:98:d2:a7:81:40:46:00:b3:92:cf:
                    c8:9c:32:e2:e2:e8:6f:85:ff:2b:cf:da:58:ec:6c:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:07:07:5C:3B:79:6D:32:B9:24:36:C8:0C:23:77:13:08:D2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b116c1a-fd1c-3883-9847-c4452eb03795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:44:89:1f:fe:d6:58:44:b1:c3:2f:63:b4:69:6d:73:95:17:
         96:e2:5e:4b:96:be:60:97:91:41:76:c4:c4:aa:ff:35:59:e2:
         55:22:69:4b:bf:52:03:23:b3:01:57:b5:b3:c8:44:50:58:df:
         7b:85:cd:3e:c9:0b:49:68:b2:35:96:02:e2:cb:f1:8e:94:a6:
         17:f3:8f:15:88:2e:ce:55:19:94:58:18:ab:01:71:6e:e4:68:
         b2:67:c2:73:69:24:20:b0:65:56:00:7e:ff:90:05:87:8e:7c:
         19:d9:b9:01:aa:77:47:8d:64:0a:3f:6a:5d:89:98:f3:b4:ec:
         aa:f8:da:7d:fa:1e:ff:d0:ae:c4:e0:3b:62:3a:67:8d:4c:f1:
         e8:b3:80:df:4a:84:01:6d:f1:7a:31:78:08:19:0e:16:d0:4f:
         fe:88:97:be:a8:34:c3:20:80:67:ce:16:30:ce:eb:90:b5:fb:
         f2:b9:fc:cb:bb:58:77:fa:c4:25:fb:7b:40:7f:14:a2:10:3b:
         81:1e:f2:f6:64:51:cd:7f:80:70:3d:ba:da:50:cd:12:de:04:
         bd:fb:7b:6f:b0:43:6d:ed:de:88:31:7b:2f:51:56:20:7d:93:
         7d:30:01:8f:ef:54:3b:5a:62:af:27:94:de:2b:43:5a:4a:28:
         82:15:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:37 2026 by rpki-client