Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa
File:                     3925ee21-557f-30f9-94cf-08e3240595ed.roa (raw, json)
Hash identifier:          y88LQganE/y+O7dlHK9dWoSOv7sF5jjT+cHI6t5zxms=
Subject key identifier:   65:45:97:C2:27:DD:68:2C:A8:E9:29:12:A1:2E:B1:49:AE:C5:2D:6A
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328584D75D520C349ABEF512E3D1D80
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     48678
IP address blocks:        192.101.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:20:c3:49:ab:ef:51:2e:3d:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3f58f12b-0d0b-464b-8164-368cbbd7fd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:94:ec:24:8f:ec:4e:2e:55:7a:dd:e7:d4:
                    f3:6d:2f:39:9a:87:c2:02:db:cc:42:32:af:96:37:
                    b1:c6:21:3e:db:2a:af:f1:8e:a6:6c:a3:da:2f:83:
                    87:9f:95:73:45:c5:91:b8:e8:71:dd:ba:cc:c0:0c:
                    13:51:3e:eb:75:0d:db:1a:f9:86:af:0e:94:5d:94:
                    7b:ee:b6:80:ab:09:40:fc:0e:e8:3b:82:3d:4a:33:
                    a8:0d:1b:29:7d:15:c9:73:b8:4c:3f:42:57:8f:7d:
                    1b:b3:5d:97:99:72:70:29:08:eb:8a:d5:b3:d6:f3:
                    22:0a:dc:5c:ed:94:f0:eb:b7:3d:4f:0d:00:80:ab:
                    77:44:1a:c4:07:5c:33:e2:83:d0:12:4e:28:b7:6a:
                    a9:cf:89:5c:fb:b8:5e:ea:49:50:d4:30:ca:ce:90:
                    c2:f0:2e:c4:fc:21:2f:c7:ea:c2:fd:f0:6e:5f:b4:
                    87:39:9b:fe:91:01:dc:57:21:c1:0c:f4:06:5b:f8:
                    39:01:a6:1a:61:86:bd:ca:c9:c6:01:dd:bc:b3:56:
                    cd:05:37:79:c3:ff:ca:77:db:b3:85:b0:81:a8:5c:
                    5b:20:07:79:71:9f:62:2f:87:fa:2f:3b:8c:1a:4b:
                    6d:24:e5:f8:13:bf:2d:91:97:c2:c5:56:75:56:f1:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:45:97:C2:27:DD:68:2C:A8:E9:29:12:A1:2E:B1:49:AE:C5:2D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:af:ac:9b:fc:4b:36:14:10:e1:c4:7e:2e:ea:d0:be:e9:
         3d:95:3f:82:5f:3b:54:01:0c:3d:80:99:50:d2:b2:9a:d7:f6:
         1e:9b:b3:86:17:b3:2b:1d:84:80:d1:3c:1f:53:35:c1:89:49:
         48:f0:98:52:ad:b9:2f:e3:32:7d:66:3e:4d:a5:00:a6:68:7d:
         37:91:15:dc:7d:08:ce:03:6e:7f:46:5b:49:79:3d:9b:78:18:
         5a:46:5c:07:cf:8a:97:ad:5d:d8:a3:c3:d7:63:17:f4:29:8a:
         87:98:0e:60:b6:6e:09:40:79:a1:8c:f3:8e:da:83:1d:4a:8b:
         ac:57:ac:1e:56:86:e9:ca:17:fa:9d:fc:86:8c:84:7b:4d:9d:
         91:9e:21:06:d0:89:95:fd:47:69:69:99:75:b4:aa:9b:d8:be:
         7d:af:f4:cd:84:fe:f5:9f:57:43:b6:d5:5a:a6:d2:b0:cd:c5:
         e0:24:78:61:bf:29:8b:5f:45:f2:ea:9e:15:86:08:fe:7c:c7:
         2f:b3:85:74:cd:4f:5d:d4:39:4b:8c:62:e5:7e:81:c2:ff:e3:
         e5:1b:44:3e:bc:ce:57:1e:e5:ec:ca:1e:cb:f8:15:f9:fc:6b:
         40:80:48:9f:e1:b7:54:9f:27:af:29:71:2f:f8:fa:ee:82:31:
         e8:46:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:44 2026 by rpki-client