Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8f843940-4975-3123-945b-1e93c1892088.roa
File:                     8f843940-4975-3123-945b-1e93c1892088.roa (raw, json)
Hash identifier:          kWePObVtycoGxIhA8FE55Dg6/J+pjchYvOjvnaGi46w=
Subject key identifier:   E2:DA:E4:02:46:16:4B:B5:8B:63:7B:3E:EC:AF:34:A4:E6:52:48:84
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584D567F471001AEBF4D61524600
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8f843940-4975-3123-945b-1e93c1892088.roa
Signing time:             Mon 30 Mar 2026 07:37:32 +0000
ROA not before:           Mon 30 Mar 2026 07:37:32 +0000
ROA not after:            Sun 28 Jun 2026 07:37:32 +0000
asID:                     3271
IP address blocks:        169.145.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:56:7f:47:10:01:ae:bf:4d:61:52:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Mar 30 07:37:32 2026 GMT
            Not After : Jun 28 07:37:32 2026 GMT
        Subject: CN=7715f980-61f9-42d8-935c-dc2d827daf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:64:d1:c9:f7:b2:c2:d9:0f:9f:e7:5b:1f:
                    70:82:30:4f:d9:c2:cd:39:70:01:75:73:77:ff:75:
                    32:bf:b8:91:39:89:a7:ef:19:e9:47:1e:32:de:d5:
                    de:cc:d9:b7:05:ed:0d:0e:94:42:bc:67:fc:26:f7:
                    10:6c:c5:32:79:21:8b:42:c8:8d:08:65:5b:30:a5:
                    79:06:5f:aa:a2:2b:66:99:0b:15:b0:5e:db:e7:f0:
                    5b:bb:42:72:79:34:f4:fd:b1:37:cb:f8:70:65:f0:
                    8d:6f:93:00:7a:37:42:4b:75:16:12:40:ee:d1:27:
                    f4:11:a0:28:db:47:1a:b2:46:a6:47:e6:40:1c:ed:
                    26:83:f6:80:be:53:6b:9a:99:e8:68:a9:a1:36:d5:
                    15:1b:eb:92:20:7f:b6:0c:aa:cc:9b:cd:ff:dc:74:
                    77:8c:73:f3:a5:6f:63:93:61:2f:03:c6:5d:08:a9:
                    6b:ca:28:54:b2:15:77:fc:41:e7:ff:0d:4f:56:97:
                    bc:3b:ef:68:08:5c:34:bd:dd:ca:24:b9:78:95:97:
                    45:70:51:37:47:53:cb:0a:bc:28:5c:95:90:5e:26:
                    b8:0e:3d:87:b2:fc:6e:40:af:9e:b6:8a:3e:7b:9d:
                    70:62:bc:3d:e2:f9:73:96:07:14:05:55:db:da:ee:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:E4:02:46:16:4B:B5:8B:63:7B:3E:EC:AF:34:A4:E6:52:48:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/8f843940-4975-3123-945b-1e93c1892088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:24:fc:e2:ab:08:d5:02:c0:dd:24:fd:29:49:b5:e1:89:
         3f:6a:a3:43:7c:2c:f9:2b:1b:4d:d3:1b:a5:38:7a:cc:ff:1e:
         07:b6:0f:3c:27:f7:7c:35:30:f8:73:e3:42:c9:03:d1:14:4f:
         4a:4d:4c:65:d7:fe:7c:f0:e8:ac:d7:ff:80:8b:34:c0:d9:85:
         85:8c:d8:36:e2:4b:5c:61:3c:96:6f:ae:60:d6:4b:0e:39:52:
         b7:de:0a:d0:c7:c5:35:c1:41:f2:ae:e0:1b:73:98:86:63:ad:
         ce:0e:a6:2b:ea:8c:e9:27:cf:2f:79:59:24:fc:29:25:7f:fc:
         ee:85:ea:69:b1:2c:bb:6f:ec:c3:b3:15:3b:03:d4:8a:f8:04:
         d8:5b:44:fa:7a:da:b8:55:a1:c0:b3:88:17:c5:ed:c0:90:f2:
         e1:84:2a:37:a2:9f:58:29:a3:d9:6c:00:7b:cc:83:63:87:ef:
         f7:ed:97:f4:5c:f3:ef:5e:90:6d:13:01:4a:23:8a:cc:64:5d:
         ef:96:f8:89:25:11:f8:bb:5f:65:91:18:56:11:33:47:dc:7f:
         13:9f:60:43:49:e4:38:de:85:19:3b:8e:90:a1:9a:f5:61:9f:
         d1:b2:b0:cd:9b:0c:98:bb:e5:f4:bf:d5:9f:43:df:61:95:7f:
         4b:ab:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:39 2026 by rpki-client