Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa
File:                     79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (raw, json)
Hash identifier:          3u74GTi5QzFMqVj1M1ZAJAH9yheO3NGLgdGu6AcU5dw=
Subject key identifier:   85:46:9B:DA:A1:3B:BA:8A:9D:4C:81:92:FC:EF:AA:7A:F0:16:E6:5B
Certificate issuer:       /CN=688a78fa-2d94-478e-900a-a1fec661b769
Certificate serial:       010D0C9F4328584D7B6A7A9905999B2B5C345600
Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     13649
IP address blocks:        168.245.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7a:99:05:99:9b:2b:5c:34:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=0f367e0c-a625-402d-aa43-a044f3267c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:e9:a3:76:f5:71:5d:37:73:5e:ef:30:ce:
                    58:41:58:51:c2:cf:8d:c7:3b:02:25:bd:d6:ed:77:
                    dd:80:f5:c2:52:fa:cc:c2:f8:dd:3e:36:50:5b:06:
                    b8:be:ff:8d:42:8e:cc:ee:ff:0c:4a:ed:6b:2d:ed:
                    d5:bb:ef:8c:0d:ac:92:35:e4:3e:b9:24:e9:1a:79:
                    74:1a:8b:68:50:eb:5b:b3:65:2a:d1:10:30:fe:69:
                    c7:68:e0:f5:45:60:d8:91:a1:92:3a:22:72:ad:16:
                    74:36:2f:26:ce:c8:52:55:c8:d5:ad:3b:10:ac:2b:
                    05:66:ae:c1:17:37:e2:58:c8:03:0e:45:e9:76:da:
                    cd:94:b1:2a:00:0b:4b:18:28:9e:d9:00:6a:41:34:
                    73:64:48:9a:e7:ce:c3:fb:8f:59:fd:dc:6d:ee:d0:
                    3d:b5:67:19:1d:b3:0c:37:4a:09:18:85:96:b2:e8:
                    92:7f:f4:94:28:9e:5a:76:d6:4b:22:c4:37:ff:eb:
                    4b:4b:a9:42:ea:42:71:05:69:6c:de:af:b3:93:7a:
                    a1:b7:ea:a4:a8:fa:80:4c:5a:9e:ee:2a:4d:c2:2b:
                    4c:28:ee:a2:12:09:96:2c:6e:af:56:7a:f6:b3:92:
                    f3:03:18:18:8f:4d:ce:a8:63:e8:21:b2:c2:ef:b5:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:9B:DA:A1:3B:BA:8A:9D:4C:81:92:FC:EF:AA:7A:F0:16:E6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl

            X509v3 Authority Key Identifier:
                keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:6a:f9:94:f2:ef:44:d1:60:c2:53:b8:eb:38:ea:6b:5c:
         ae:8e:d9:3a:85:4e:14:a4:a1:84:69:f6:3f:11:1c:a8:72:31:
         e6:9a:ec:dc:af:92:0f:81:9b:80:e0:ea:fa:b1:22:47:15:3d:
         b1:37:93:48:69:b5:13:75:18:ba:68:e7:ee:5b:70:9a:3e:22:
         73:bd:f1:72:37:e8:9c:59:be:37:ab:df:47:78:25:87:34:d1:
         54:62:64:7d:33:fb:2e:07:51:a0:a4:9a:e9:66:80:80:5c:41:
         f6:1f:a2:c2:eb:b1:b0:13:c7:2a:3d:f7:df:3f:d1:a6:90:13:
         e3:34:83:51:3f:c0:79:65:f4:7a:79:bd:93:e9:c1:e4:2c:43:
         54:2c:4f:30:0d:05:56:3f:56:ec:49:db:60:85:b2:18:b2:b0:
         97:81:40:d5:fa:7c:5c:2e:b4:62:74:d4:7f:21:fa:4b:dc:35:
         7b:b0:79:85:b8:eb:38:6a:6f:80:3d:06:b8:54:c6:50:bd:5f:
         38:25:0f:26:da:f0:35:77:72:04:d3:e2:8c:b7:ac:8f:d1:86:
         c1:62:8a:3b:37:b3:4d:6d:f7:d3:8d:82:4a:f7:d2:9a:81:a7:
         5c:6a:fa:57:0c:ca:f2:e7:0b:c9:45:81:0c:ee:e2:a9:fd:ee:
         f7:95:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:02 2026 by rpki-client