Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa
File:                     720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa (raw, json)
Hash identifier:          8Bq+e+RyivCVml7Es+fOc6uf/lqVU2kl4AiC/1pgK38=
Subject key identifier:   C8:87:1A:38:18:B5:15:19:C0:9F:19:D9:DD:42:D5:99:55:15:5A:0B
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584D75D541D31BF91FBB66374680
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     32837
IP address blocks:        216.59.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:41:d3:1b:f9:1f:bb:66:37:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=063ce90d-27a7-44b5-adaf-8ebeedcbca89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:2d:44:72:7d:1e:29:3f:b3:23:ab:9c:e3:
                    70:37:1b:4c:6a:8b:94:f3:05:55:f0:cf:63:7f:c1:
                    d9:66:93:4b:28:55:75:8f:05:ce:91:bd:de:60:09:
                    fb:9a:2e:b8:73:a8:f5:2c:1f:37:17:a3:a0:67:d6:
                    49:7e:b3:76:af:5a:49:9b:db:ac:f9:48:05:ed:24:
                    89:d1:72:00:8c:f2:d8:f3:71:58:d2:f2:26:ef:3d:
                    1c:f3:2a:ab:a7:b3:63:3e:7e:f1:db:28:fb:0d:33:
                    59:ba:3f:2b:5f:04:01:6a:44:1e:91:de:b8:d0:82:
                    3d:11:a8:ca:8d:70:49:40:ec:95:ba:b6:68:73:89:
                    2c:5d:5d:ca:99:76:30:36:87:63:95:7a:1a:95:fc:
                    b3:4f:10:ac:96:d2:74:0e:4c:84:f1:65:39:52:b4:
                    c3:69:91:a8:12:06:f3:79:36:51:ae:01:6b:52:c3:
                    0e:e0:21:f9:34:58:6e:cf:10:c7:7c:a8:56:f2:8f:
                    b9:12:25:cd:09:ae:f6:d0:02:88:4d:79:84:58:62:
                    e9:dd:c0:2a:8f:b0:bc:25:22:38:c1:32:c2:a3:74:
                    dd:d3:c0:03:50:73:1f:38:e7:0e:8c:66:ec:57:a7:
                    56:cd:44:7c:ae:6b:24:73:3a:4a:f0:a4:b0:db:a2:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:87:1A:38:18:B5:15:19:C0:9F:19:D9:DD:42:D5:99:55:15:5A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:aa:13:b2:70:af:aa:cb:3a:63:fc:c2:70:99:10:f4:6f:
         a2:d1:ac:d4:09:6b:f6:09:e5:0a:89:dc:9e:13:2d:26:23:b5:
         7d:d7:4c:93:e2:bb:85:d1:06:59:c4:4b:62:e1:63:11:2b:53:
         99:01:f2:a8:fc:03:a0:c5:f8:b4:08:37:f4:27:21:33:bb:af:
         b5:de:99:10:60:dd:e4:23:72:28:89:87:cf:58:fb:0c:a0:72:
         50:1d:33:97:d6:2d:af:13:3f:17:e2:17:50:76:f5:cd:56:31:
         b3:12:82:eb:46:80:c9:19:c9:0b:d5:dc:df:54:71:21:07:4e:
         94:9e:17:bd:52:52:d9:17:1d:f5:4b:61:49:05:19:32:93:00:
         70:5d:1d:e0:ca:82:b1:ae:2a:ce:7a:70:eb:25:73:52:0f:fe:
         3c:b1:7a:a4:18:cc:03:60:64:f9:d4:e2:69:91:95:db:c1:0b:
         8e:7b:16:1a:1f:d8:e9:00:70:7d:cc:dd:c6:41:df:97:90:01:
         9e:2b:d8:f5:aa:25:c3:74:cf:4a:bd:f1:d9:6a:09:b3:01:65:
         d7:54:23:ad:90:b8:f5:c5:d5:c0:e7:5d:c1:91:58:20:58:cd:
         61:a0:9b:63:a6:84:bc:9d:63:c1:78:16:30:ef:35:b7:51:c1:
         21:53:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:50 2026 by rpki-client