Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
File:                     2c883102-0a5b-37cd-a9ed-16c74a21870f.roa (raw, json)
Hash identifier:          vhFydYOCmuvFSwcqeDc4+CWypWJ+gIGPBzr1GWBSa4I=
Subject key identifier:   21:5A:11:28:DD:BD:CA:34:14:8F:BB:E2:CF:BA:B5:CB:E9:22:45:FC
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584D869555B52CBB23894D0F8A80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     2572
IP address blocks:        207.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:55:b5:2c:bb:23:89:4d:0f:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=0b83bd3e-83b3-42bc-80a1-d072ed13c914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:45:8d:ec:69:23:5b:dd:3e:68:0a:a6:c9:
                    9e:c1:cf:ee:e1:bf:c2:78:dd:6d:28:05:24:7e:09:
                    f0:ec:9e:c0:4b:87:33:80:3f:2c:fe:09:99:a0:a1:
                    62:21:41:db:87:1a:e1:82:be:c5:21:0d:d3:df:d1:
                    2d:79:f5:c2:6c:91:a9:63:e0:08:2f:29:90:b8:0e:
                    03:3a:a9:5f:07:56:b7:44:2b:da:4e:cd:ef:43:f9:
                    f5:38:0d:20:61:1e:41:12:87:4e:5f:21:2d:d2:a8:
                    30:6a:d3:eb:9a:d4:5b:45:53:4d:03:c4:c4:dd:85:
                    21:38:e3:4e:61:53:d5:e1:8f:e0:5b:0d:62:fe:be:
                    75:3a:7c:a9:79:24:89:d2:43:52:6a:4f:24:d1:c3:
                    36:c7:81:f3:04:d2:73:d4:25:82:b7:f8:08:67:53:
                    47:4b:12:7d:d2:c5:68:72:a2:6c:99:22:5a:ed:d3:
                    72:9b:d0:b2:48:eb:d0:47:bc:5d:c4:b4:4c:1c:7f:
                    09:ad:18:1a:95:f1:73:9a:cc:8d:1f:64:7e:47:8f:
                    46:27:68:c9:66:a4:29:f1:e3:3b:ea:85:c5:d6:14:
                    ed:43:01:99:23:07:87:73:0c:ce:01:42:b9:3c:22:
                    4e:52:4f:7c:6b:6c:08:82:09:48:c2:a1:a4:d1:99:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:11:28:DD:BD:CA:34:14:8F:BB:E2:CF:BA:B5:CB:E9:22:45:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/2c883102-0a5b-37cd-a9ed-16c74a21870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:78:c8:53:cf:7a:b4:ab:78:25:82:97:3e:0c:f1:ae:c9:
         f2:0f:ba:c4:ab:20:63:b0:36:cb:4c:b0:1a:95:95:4e:e3:fe:
         bd:eb:fc:06:04:96:a7:93:e6:b3:e8:c2:fb:2a:60:bb:04:4c:
         58:cc:35:91:21:f3:1b:16:f5:be:dc:0f:93:eb:12:96:a4:a3:
         eb:0b:17:39:90:46:8d:a3:a9:74:d1:34:c2:0d:8e:28:7c:de:
         9d:53:ee:fe:9a:85:50:f4:0c:0b:e1:46:9d:90:67:16:10:3a:
         4a:ca:28:fd:ed:b7:cc:f2:ce:87:0f:a2:b1:ac:e8:5e:6b:77:
         16:34:4b:89:75:fd:83:d5:2b:0f:5f:30:b3:c1:b1:f7:c2:d5:
         af:c8:c7:e8:06:70:21:93:86:87:ca:27:5e:45:b8:25:fd:87:
         34:00:af:75:42:db:58:1e:86:c6:94:88:71:24:99:48:56:a4:
         9c:2d:01:6f:43:e9:0b:5d:9a:83:45:f8:f8:f2:41:41:c3:0b:
         e4:14:63:28:88:f4:8c:3f:82:d7:f1:d4:d4:bb:aa:d7:c3:ee:
         1a:46:cb:e8:55:07:2a:a4:71:43:96:f6:e2:30:8a:48:39:65:
         5b:77:00:01:5b:a4:90:f1:30:84:73:ca:37:84:4b:d6:0f:cf:
         8d:6b:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:25 2026 by rpki-client