Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
File:                     4db02882-9972-309e-8162-dbdd8d5ea807.roa (raw, json)
Hash identifier:          ehgx6yUawAKnTG2lp0Vz0K9mkgzCmtQbjeoNDzSh6LE=
Subject key identifier:   3A:FE:EA:31:0F:D1:6C:65:62:1B:77:80:C1:9B:BF:8D:12:9B:45:2A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D67DFCF1C9C6038D67A08F080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16696
IP address blocks:        216.120.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:cf:1c:9c:60:38:d6:7a:08:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=0a56912b-9345-4d5d-8c06-40b1df2aa0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4e:58:cf:b0:68:2f:22:5b:44:49:7e:8b:bf:
                    4a:58:9f:fb:8a:3a:78:3c:75:cf:8b:ed:d8:f8:1a:
                    7e:e3:10:93:f1:8c:48:c6:88:60:63:d7:a1:1f:3b:
                    30:71:c4:ab:7b:fb:fb:1e:3a:3b:31:63:34:52:da:
                    95:c5:77:da:ab:50:59:ba:c9:f0:01:fa:48:3b:d6:
                    61:3a:73:3a:2b:3f:89:be:78:6f:73:04:44:fa:e1:
                    b2:e3:c5:25:0e:a1:38:81:2c:2c:77:ee:0b:f4:db:
                    ca:22:0d:f0:e6:4b:bb:e3:be:8e:77:89:3a:f8:d9:
                    f9:ac:7f:ef:bc:55:2c:37:21:a8:59:b6:96:b5:72:
                    8a:87:fc:50:cc:c8:98:e7:5e:9b:c5:d6:00:d2:0a:
                    ec:77:60:90:92:4b:76:30:3d:6e:43:4b:c9:8d:a2:
                    f6:7c:1e:24:35:89:34:bf:46:67:9a:7f:ff:6c:38:
                    33:23:0b:ea:72:5b:4b:e6:ff:8f:4f:f3:49:a7:f3:
                    0b:bb:ac:3b:c8:1e:5c:4a:55:9c:cf:74:99:65:cd:
                    06:c6:e5:fb:b0:21:eb:b9:6a:ef:c0:e6:cb:6e:4b:
                    65:91:5b:76:32:4c:e7:fb:20:6c:11:d1:f5:c5:c5:
                    56:1e:75:6e:d7:64:a8:77:51:8b:7d:16:fe:11:ca:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:EA:31:0F:D1:6C:65:62:1B:77:80:C1:9B:BF:8D:12:9B:45:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:c8:f1:5b:e6:47:79:db:30:a3:8b:36:66:46:39:4e:b9:
         e8:b7:ee:a5:28:8a:c4:f1:5b:a1:99:52:40:be:95:38:fc:67:
         86:5a:43:e6:85:4b:45:7b:f1:6e:51:e5:fe:cd:14:b6:27:62:
         2e:75:ca:a0:32:59:a0:a9:e1:d2:5e:f8:a0:c5:70:c2:e5:18:
         42:a4:89:12:c7:55:4f:92:5f:06:58:59:f5:af:34:10:ea:c6:
         2c:dd:cf:55:ae:1d:51:72:f8:92:ce:26:5c:4f:87:9e:58:7b:
         2c:84:41:7e:e7:69:04:3d:58:59:35:c4:de:07:86:4b:27:68:
         19:ab:07:cd:70:d6:7d:d0:0d:fe:21:39:f7:87:68:56:b7:9e:
         b0:d6:d6:61:7d:56:82:65:26:99:df:68:e9:0d:22:c5:b8:a8:
         62:ac:fd:f8:92:49:7b:11:eb:32:76:56:31:4e:0e:54:ac:c3:
         8d:a4:66:26:30:35:28:f5:12:2d:41:a7:9c:c5:91:cb:e7:e2:
         78:ae:7e:2a:00:0e:51:3f:4c:f6:be:f8:1b:e6:92:bb:c0:52:
         2c:10:3b:d3:e9:53:6b:b6:07:37:7f:5b:b1:c5:9b:82:cf:ce:
         eb:40:94:06:1f:4e:d4:1e:ec:57:26:f3:42:f2:70:a6:db:d2:
         1b:24:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:24 2026 by rpki-client