Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa
File:                     ebd76a09-c746-3e90-b835-0218552a1e60.roa (raw, json)
Hash identifier:          n4SzyJggH6T4kOdl+6hrCQ6lo7Au7M5FPWZRS0idjYY=
Subject key identifier:   24:00:17:B9:D9:15:C4:EE:FA:69:2C:3E:41:93:79:97:D9:AB:2C:A4
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584C7D7C61209EAD9469123A1670
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     27313
IP address blocks:        204.79.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:61:20:9e:ad:94:69:12:3a:16:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=930b0174-8d6a-43fa-b99c-5e3991575e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:70:bc:01:9c:65:d4:a2:5b:e1:3e:f4:b5:
                    aa:c3:c7:ad:ef:cf:8d:97:a1:16:fd:f2:d4:47:48:
                    c7:cf:18:b1:93:68:6f:99:9f:f2:f8:18:bd:32:89:
                    1a:f9:fe:ca:b1:bc:a9:8f:74:63:d0:d5:5f:f0:2a:
                    1f:3c:8d:22:43:38:f0:14:ea:30:1e:42:2b:3c:ef:
                    95:3a:b3:af:86:8f:90:09:a8:0d:7b:5e:79:1b:c2:
                    24:f0:c7:90:63:05:7f:46:27:01:56:1d:b4:61:08:
                    a3:98:cd:2c:63:41:d7:f3:d3:c0:ea:46:05:30:4f:
                    28:b0:67:87:5c:98:c2:d8:13:cb:d4:ea:97:10:9e:
                    fd:31:27:bf:a4:db:33:39:fd:4f:68:0a:e3:76:af:
                    50:28:f6:cf:9d:bf:d7:02:44:fa:80:ae:a0:76:61:
                    b6:09:c5:c9:b7:57:55:43:b3:13:50:39:21:57:24:
                    6e:73:7c:d1:24:f7:5d:da:34:f7:75:d8:a7:a7:8a:
                    88:bd:63:0a:32:e2:c2:7b:17:94:e6:17:44:57:9a:
                    d6:92:6a:67:4e:b3:2d:3f:72:0f:d5:52:ae:d3:9f:
                    15:d9:eb:2e:6a:d5:40:f9:ac:bf:08:4a:e0:fe:a1:
                    85:d3:42:8c:a9:0c:c7:f6:fd:81:b7:94:19:1f:16:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:17:B9:D9:15:C4:EE:FA:69:2C:3E:41:93:79:97:D9:AB:2C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:ab:37:0e:0d:cb:e2:9a:4d:8a:96:88:dc:31:c5:b3:78:
         a1:42:97:12:66:cf:af:aa:dc:e5:72:ea:f0:39:59:30:7c:e7:
         2b:b8:4b:a4:31:8d:5f:55:89:29:08:bb:c7:9d:90:f8:51:b8:
         a3:57:4e:33:ec:2e:6c:9f:40:bd:5b:f7:d5:70:ac:de:ce:33:
         30:09:a7:6f:6c:4e:26:a3:f2:04:1a:5d:83:26:ec:7b:03:fd:
         c7:dd:53:cb:a9:86:d4:31:fe:88:96:ab:83:f7:bf:c0:52:96:
         75:9c:a4:55:3d:0d:c6:9e:ac:88:f3:2a:cd:c7:c9:c5:bf:d7:
         7d:c7:4e:fb:bc:ec:fd:d7:c9:ce:d8:3a:8f:6c:81:32:59:f1:
         53:fa:9d:79:bd:bd:ca:7a:5e:00:bc:ce:12:73:df:b0:12:4d:
         14:ab:71:04:5a:37:47:fe:d2:2a:23:03:8b:36:8a:59:0f:e6:
         d5:b2:9b:26:57:1c:24:56:8d:f0:eb:fd:14:b0:54:62:54:d5:
         1b:e3:30:b5:57:5b:4d:e3:a7:34:67:c1:38:08:61:8a:e4:f2:
         08:94:c7:de:62:94:1c:16:cd:53:ab:c4:35:d2:6b:e8:c9:4b:
         79:13:0b:ac:30:f8:a3:33:c9:20:22:cb:a0:48:9f:5b:f0:7b:
         ac:f1:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:25 2026 by rpki-client