Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa
File:                     9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json)
Hash identifier:          fir3bllCOGVMXOKSXHREMLN+l9zh74SzhW0fxfmDBJE=
Subject key identifier:   D1:CE:1F:55:56:A6:FF:AA:60:34:1C:F3:B9:0C:30:FD:3C:11:83:BD
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584DD78B1D3FD87DFE2C9F4EF380
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     7896
IP address blocks:        144.216.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1d:3f:d8:7d:fe:2c:9f:4e:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=2fcd05b3-7c42-4e41-a325-cddbdfe30273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:62:e0:08:b7:1d:1b:4c:24:ac:19:b8:d8:
                    83:6d:22:1c:8c:e4:1e:7b:af:07:de:10:fa:00:a9:
                    be:1c:4a:b7:72:75:c0:88:cb:8b:ad:90:dc:94:48:
                    4f:0c:7a:35:ce:5e:ce:58:f3:dd:ba:e1:42:5d:c3:
                    a8:2d:f5:68:d8:3a:8c:06:11:d8:4a:cc:57:fc:bb:
                    bc:27:a8:d6:9b:d2:78:5d:7b:28:34:59:ce:95:ce:
                    eb:ab:40:96:55:13:11:90:30:6a:59:c8:57:2e:8b:
                    18:69:69:78:ba:b7:0c:48:90:86:f2:21:cd:60:a0:
                    0c:ad:40:3d:fb:b6:a7:e0:eb:ba:2f:a7:15:a2:d3:
                    54:b9:bc:b9:eb:9e:eb:9f:d4:38:69:a6:5a:cb:ed:
                    be:cd:6e:7b:0b:1e:98:a6:c2:ec:a2:d7:84:f3:b8:
                    72:f9:09:f6:b4:e2:9d:fa:45:25:25:e0:f1:4c:41:
                    c3:f9:92:0f:7f:a2:39:04:9b:d7:c9:28:db:aa:43:
                    bf:15:d1:16:f4:84:a1:62:d7:0f:59:c8:08:55:96:
                    7c:f9:67:91:71:b5:81:9d:00:d4:23:1b:5e:7a:d9:
                    9c:95:2a:3d:96:66:b9:59:35:14:00:9b:72:47:cc:
                    a9:4c:7a:e7:14:2d:ea:2b:54:0f:b7:6b:d7:5d:61:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CE:1F:55:56:A6:FF:AA:60:34:1C:F3:B9:0C:30:FD:3C:11:83:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:ba:c4:6d:06:89:7a:33:ba:b7:12:2a:93:f9:c8:a2:c3:
         70:f0:ae:38:cb:73:28:b7:b3:0d:f5:82:4f:23:90:7f:a1:32:
         10:0d:08:90:0e:d9:19:fa:eb:6d:30:b7:34:9b:4e:28:ee:c7:
         6c:3d:93:a3:04:a8:7a:b4:0a:59:f7:a3:72:0a:c3:d5:fa:dc:
         7e:a1:72:76:90:fe:25:60:9b:58:c3:50:b6:1c:54:0e:e6:79:
         8a:91:cd:e1:be:b5:dd:94:2c:9b:99:09:0a:d0:47:91:e1:3b:
         97:cf:04:c5:fa:2e:30:5a:d5:97:9f:e2:31:57:53:18:19:bf:
         b3:b2:02:29:40:fe:33:8b:bb:6f:26:cb:6c:41:fc:70:74:5e:
         aa:80:6d:1b:bd:cc:1f:06:55:04:5a:d8:b3:58:59:b0:c2:bb:
         f2:f0:99:f8:42:96:57:20:2f:74:8e:bc:f2:60:50:46:fa:05:
         31:27:1c:25:c7:a4:9a:f7:8a:2e:ce:b3:ea:10:aa:56:17:70:
         e8:d4:b4:9a:24:7b:7e:22:8e:fb:6c:9b:7d:9b:34:25:7e:11:
         e1:e2:89:89:9d:9f:6c:69:59:70:02:12:d6:2c:fb:b1:03:2d:
         74:2c:16:04:c0:88:d3:5c:43:ea:a2:b2:a6:4e:f9:67:eb:6b:
         8b:0f:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:57 2026 by rpki-client