Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa
File:                     b56b71a8-79ed-31a7-a614-507e5a48a153.roa (raw, json)
Hash identifier:          cPIhI6Cg1pUT1ca6OP6MDRWyHEgAuDl8tCZ05WE0G+o=
Subject key identifier:   FE:83:18:0B:4A:CD:46:50:49:AA:5D:85:63:9C:B0:53:AB:5D:61:47
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D5E1A61120229F64A8A8D0486
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        165.1.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:61:12:02:29:f6:4a:8a:8d:04:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=ec3cfbf5-b3a7-4525-8ff3-7ef4e330a0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:d1:7a:82:e5:7f:6f:4d:64:6a:64:3e:5d:
                    89:28:56:3a:c0:30:c9:ab:98:03:c9:ae:75:de:b7:
                    87:95:a6:d4:6a:c8:0b:e1:05:51:1f:8b:05:ad:21:
                    82:25:c6:9a:60:a8:ec:a8:f5:ef:e5:cb:a7:7f:e1:
                    b9:e0:47:04:2d:af:f4:e3:56:d0:11:4c:53:d7:64:
                    8d:aa:fc:0c:72:8c:06:80:d5:8b:83:d6:36:6b:e8:
                    9a:5b:6a:1f:e3:8a:fe:4e:6b:a0:97:04:d6:8c:9d:
                    38:d6:a6:e5:41:53:b5:d3:73:d3:57:95:ea:96:00:
                    cf:65:49:e4:db:ef:0c:3c:33:3f:44:db:93:aa:1c:
                    1a:05:2e:dc:7f:64:44:12:cd:21:e6:75:c8:ab:ba:
                    18:54:2d:86:ea:a8:bc:fc:ff:23:db:f7:fe:50:07:
                    1a:fa:66:65:0a:ba:38:bf:8d:d9:b2:a0:bb:5a:95:
                    95:63:06:8f:ea:69:1c:a9:1d:8a:ee:c1:5b:f9:99:
                    57:07:f2:70:3f:5f:e7:47:3e:70:af:2c:f8:e0:af:
                    21:47:5a:f2:83:a9:ac:4e:fe:ec:ac:b6:0d:93:69:
                    9c:b5:37:95:b6:aa:50:ee:47:4f:b2:49:9e:07:c7:
                    7d:33:1e:86:18:b0:16:bb:c4:ba:3a:69:1a:fc:c9:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:18:0B:4A:CD:46:50:49:AA:5D:85:63:9C:B0:53:AB:5D:61:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:82:5a:fa:66:21:71:8c:2a:6f:b8:f5:75:09:2c:f3:94:
         88:0c:01:cc:11:e8:69:be:6d:50:9b:d7:0a:5f:2f:a8:5c:2c:
         93:b3:30:e5:38:8f:1f:95:e8:86:13:ce:25:44:52:22:e8:a2:
         c5:bd:b4:ad:91:66:da:38:89:3a:d4:14:e7:85:52:0e:b7:cc:
         e4:9e:0f:77:1d:4e:f9:38:16:6e:d9:04:99:b0:0a:fd:ef:32:
         5b:6d:51:d6:20:87:60:62:0b:99:ed:32:ff:f4:a2:50:f3:1b:
         ca:ba:f3:0d:b7:a0:63:39:db:b2:f8:7e:78:c8:e4:d2:58:13:
         95:ba:09:68:59:c9:3f:72:60:45:99:54:9b:54:3d:e2:66:b4:
         ff:cc:8a:5e:28:80:60:35:c8:1d:01:70:97:ca:b2:d6:45:58:
         73:c1:36:ff:62:4a:18:82:04:d1:02:35:9a:13:ef:7e:80:13:
         79:0e:f2:72:d4:38:13:66:eb:ad:35:44:13:d5:91:b9:61:d3:
         2c:5c:8d:f4:5d:36:ea:fe:25:51:f6:65:d6:6d:f7:b6:44:e8:
         da:1a:f2:e1:06:e0:cf:24:33:e4:d7:22:cc:e7:57:7a:ab:f1:
         46:87:eb:7e:ee:24:33:b1:8b:30:d9:7b:e2:cd:24:9b:f6:d2:
         3a:9b:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:05 2026 by rpki-client