Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
File:                     8211cbe9-7823-3994-9066-ce68fa110b8f.roa (raw, json)
Hash identifier:          gCWujA5i6XP3RO6vH1ZFfTvJ5o4ekAXdh66sW5GdrXU=
Subject key identifier:   A6:12:17:42:2D:18:E5:4B:96:49:C4:1E:44:A7:07:9A:FA:31:68:E3
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584D59EA53CEC36ADBEF9D3FE1C0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     30041
IP address blocks:        168.100.184.0/21 maxlen: 24
                          192.145.64.0/22 maxlen: 24
                          206.204.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:53:ce:c3:6a:db:ef:9d:3f:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=33e4de8e-ba3d-458f-a960-0e1c2b7d1b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:48:9f:6b:c7:e7:38:5b:de:b1:ad:1e:83:
                    21:97:0d:d6:e6:97:ff:45:74:0a:42:5b:10:4d:00:
                    55:62:8b:2a:b5:22:e9:5d:96:19:4a:c7:fb:5e:df:
                    ec:64:0a:06:b3:10:ae:66:f1:a7:44:89:bf:05:8c:
                    1a:a6:a9:db:d8:00:ed:c3:09:cc:55:2e:35:17:f9:
                    f4:7e:9b:51:1b:65:22:99:2c:44:58:b3:a9:37:24:
                    3e:50:04:56:f4:a3:9e:36:2e:9a:7b:1e:c4:69:bd:
                    d4:7f:79:a5:f3:dd:f5:20:9a:01:b4:9f:9a:60:a3:
                    f3:88:f3:54:58:90:19:52:0f:09:ba:f8:dc:c8:b3:
                    ae:cc:dd:f4:c7:07:9d:05:d9:9e:1d:5b:5a:78:2d:
                    0b:fa:04:8c:b5:00:64:04:44:8a:ff:40:8d:1c:05:
                    fe:0e:e7:aa:c6:9c:e3:ec:97:71:71:6d:bb:1d:98:
                    1c:d2:d0:71:f9:23:70:ee:f6:df:20:7f:f6:8f:2f:
                    1f:f2:52:fb:82:f2:52:47:d7:9b:c5:55:00:06:81:
                    74:d5:7b:81:6b:13:51:41:2b:bb:a8:52:87:0a:2f:
                    fa:fa:2b:6b:73:b5:05:04:7d:ce:b5:6a:75:5b:36:
                    90:33:28:74:56:5b:e5:1b:46:ef:24:67:38:e1:61:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:17:42:2D:18:E5:4B:96:49:C4:1E:44:A7:07:9A:FA:31:68:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8211cbe9-7823-3994-9066-ce68fa110b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.184.0/21
                  192.145.64.0/22
                  206.204.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:17:1d:32:b4:d4:c4:ab:85:89:1c:d2:16:6d:57:4f:6f:28:
         5b:29:10:18:68:68:cc:55:96:98:d5:d1:90:b1:55:48:15:5c:
         01:ed:97:93:85:a1:43:6d:94:5b:05:a7:1f:fd:f2:2d:32:78:
         b6:50:81:ba:b8:d1:e2:7d:19:92:9b:05:7a:13:a3:28:bb:6c:
         df:2d:24:7c:8e:1d:e2:48:4d:18:05:95:eb:0a:bc:27:af:93:
         d5:d6:25:7f:5b:84:14:50:34:5e:cf:05:36:7f:3a:26:9c:ce:
         a4:b1:a9:b9:90:ee:aa:ab:41:56:8a:7e:2a:23:52:84:b0:24:
         40:49:fc:4b:93:9a:58:3f:a8:3c:64:46:93:d3:92:a3:ea:47:
         f5:5d:61:b1:bb:c7:fb:84:74:31:10:16:ce:1d:6c:93:7d:8b:
         03:ee:d9:a2:52:30:30:00:b2:91:92:54:18:a6:2f:34:74:f1:
         23:22:51:ed:81:2a:bc:f4:6d:72:3a:01:df:13:4e:09:46:ce:
         84:9f:9d:f2:7e:58:da:70:ab:05:0f:df:06:13:af:f0:7b:a2:
         99:4e:9f:18:99:48:b4:f8:27:ff:eb:ad:66:69:6d:48:39:63:
         df:91:71:a1:59:6d:87:a8:e6:ba:96:3d:75:ed:61:d2:16:69:
         89:37:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:10 2026 by rpki-client