Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
File:                     fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa (raw, json)
Hash identifier:          K1zZ9tGoIeQ+6S3mRWV4/lkhis9AAeOUzKMjcmMCtsU=
Subject key identifier:   F7:02:D0:AF:76:FB:E5:51:E2:DF:53:2D:B8:E1:AE:25:4F:62:C6:B5
Certificate issuer:       /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Certificate serial:       010D0C9F4328584DEF45E23F9A17B6F360E4DB80
Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     16509
IP address blocks:        149.48.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e2:3f:9a:17:b6:f3:60:e4:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=ba93db22-a887-45c7-bfc7-53f0642bf98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:63:b9:e9:1e:08:ee:04:d8:ec:c7:11:bc:
                    a7:38:2d:7e:42:2d:a7:96:f2:5d:62:f8:9e:f4:5b:
                    7a:48:8c:e0:cc:38:09:80:84:3f:f0:8b:62:03:c1:
                    e1:ed:1f:14:b2:1e:5f:e8:c4:4f:70:31:df:94:5f:
                    70:d1:cf:f4:07:70:1c:7c:60:8d:0d:e1:4d:eb:2c:
                    c6:24:57:c4:da:51:91:af:52:1b:98:02:23:b1:b2:
                    ac:42:78:a2:c2:0e:d3:59:db:0e:cb:e3:2c:53:79:
                    09:f9:57:1c:ea:8e:98:ae:07:84:7d:88:88:8f:35:
                    ed:b7:0f:db:18:3b:75:3d:6d:1d:03:2b:76:6c:02:
                    a2:04:4d:b3:14:db:46:4f:d0:97:98:2f:14:83:01:
                    01:96:7c:21:88:24:f5:57:9a:41:2f:75:f8:61:ce:
                    3b:37:26:cb:ed:19:66:ca:d3:f5:e0:0e:5f:05:fc:
                    f9:48:e0:d0:2a:2a:9a:74:e5:23:9d:85:3f:53:98:
                    52:5f:42:74:4d:9f:a2:35:c3:c7:d7:59:74:d5:88:
                    33:76:57:46:d8:8f:77:3e:aa:af:b9:86:4e:c1:7d:
                    15:26:28:dc:09:94:67:38:c0:32:28:42:5a:ae:d2:
                    d5:72:37:17:a4:6c:ea:fe:3c:79:ae:76:de:c9:c2:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:D0:AF:76:FB:E5:51:E2:DF:53:2D:B8:E1:AE:25:4F:62:C6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.48.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:6a:a0:cf:dc:58:07:ce:6a:47:12:9c:86:e3:f0:b1:c2:
         89:9d:bf:25:76:ab:53:a2:31:32:0a:0f:a5:37:64:72:31:b6:
         4f:77:70:b6:b7:16:73:49:94:ab:a1:bb:a6:7c:98:b3:1b:3f:
         fb:0b:c9:9d:f8:bb:71:0b:e4:c6:2e:93:cd:64:34:87:37:7a:
         da:65:92:9f:31:8d:81:ad:34:f5:1b:a7:4f:0e:db:47:f5:8c:
         1b:88:4f:fe:0c:30:37:72:40:0c:bd:9d:52:1e:d8:9d:ca:f0:
         9a:52:65:d0:64:84:13:2b:df:c8:72:e0:df:b0:4c:27:4f:ed:
         f6:b3:8d:93:50:b8:62:7a:c9:7a:38:8c:af:77:c4:ca:5e:1f:
         87:04:a1:41:84:d3:5d:01:c0:3a:9f:ba:78:94:c7:f5:ac:ea:
         51:df:d8:d2:04:e9:85:2e:fc:3c:ae:a4:85:71:92:3b:12:f0:
         ef:ed:4b:ca:6c:52:71:dc:0a:05:25:42:f5:30:68:25:04:bc:
         4a:de:41:bc:2a:fe:8e:5a:86:6a:1d:1e:79:71:86:29:1c:48:
         dd:ac:f2:1a:c6:67:ec:06:da:2d:e8:32:b6:b9:67:8d:42:8a:
         35:f6:23:b1:02:78:fc:0a:90:96:6e:f5:06:c4:8f:c0:70:05:
         e5:c8:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:15 2026 by rpki-client