Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9e6a9731-2afb-37e3-93f6-4f4c8259c79b.roa
File:                     9e6a9731-2afb-37e3-93f6-4f4c8259c79b.roa (raw, json)
Hash identifier:          BkS6RNpdxV/7cXTaJyodAa0r0hTfL4H9dYnYh5mXbnQ=
Subject key identifier:   47:AA:D2:D5:10:46:69:16:18:22:A8:D6:FD:43:9F:EB:EB:80:5C:3D
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584D74701C29B7CF21F43F7E5B00
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9e6a9731-2afb-37e3-93f6-4f4c8259c79b.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     14041
IP address blocks:        216.38.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:1c:29:b7:cf:21:f4:3f:7e:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=37074de8-7821-41eb-ad13-cccdeb3704f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:8c:e9:40:ad:ed:38:42:ac:f4:e5:cc:7f:
                    92:bc:97:d3:e8:f6:34:12:84:2a:d1:56:1e:bf:5f:
                    a6:1a:42:9a:51:d7:b8:04:2d:a9:c7:f5:e5:67:ae:
                    57:e0:98:80:56:b5:76:c7:6d:6e:da:bb:7e:15:39:
                    a8:12:41:33:8c:26:a3:5b:c9:6d:a4:dc:bd:6e:e6:
                    39:7e:25:31:dc:49:d2:cc:31:55:4c:b7:6a:ff:2e:
                    80:b7:a3:6d:38:0a:10:d7:35:52:48:bd:2d:e0:33:
                    c0:e3:f6:c0:22:ac:8e:50:c6:94:d9:c1:62:c2:d6:
                    d2:c9:31:10:4a:59:10:0c:eb:ab:3a:29:d6:3c:f1:
                    1c:13:ee:59:49:63:4a:f5:83:5b:03:9d:f9:70:bc:
                    cf:90:9d:24:32:45:44:8d:3b:a3:f9:44:1e:f9:c0:
                    d5:69:4d:81:38:f9:21:85:90:1e:27:ce:e5:7b:81:
                    d7:33:d9:97:b5:e1:05:87:59:c8:a8:58:42:5b:71:
                    c1:ea:20:47:97:78:1e:ec:4d:4f:14:dd:b7:65:fd:
                    1e:da:70:52:0f:25:0b:d1:a5:67:11:6b:51:41:2b:
                    5b:36:93:a5:2c:88:00:b4:47:e0:03:cd:a4:c8:38:
                    71:6b:b2:aa:f2:96:76:11:b8:74:fb:32:67:fd:9f:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AA:D2:D5:10:46:69:16:18:22:A8:D6:FD:43:9F:EB:EB:80:5C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9e6a9731-2afb-37e3-93f6-4f4c8259c79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:a5:c5:0d:08:76:0b:c0:63:cb:dc:4d:21:e0:47:e8:d5:a3:
         5b:50:54:66:d3:78:dd:6c:91:bb:c6:10:df:03:03:c2:1c:d0:
         29:98:01:64:d6:3e:1d:ef:74:63:9c:05:4e:1d:4f:1f:3d:b4:
         e1:d9:c6:f7:24:0d:3a:dc:19:9c:83:5d:82:c3:c6:2f:a5:36:
         a8:96:a6:ab:49:4c:2b:3a:2d:81:4e:e2:3f:4f:09:a6:0d:2a:
         5e:79:da:ee:37:14:58:ea:7a:6c:dc:4e:e2:82:05:ab:a6:f4:
         8f:86:5d:9a:e7:b7:be:60:5b:10:d3:81:7b:bb:73:1b:33:af:
         4c:87:12:05:7b:a8:28:95:00:2f:d7:45:11:66:db:ec:cd:e3:
         0c:ef:54:52:ec:c8:06:0a:09:db:86:61:e3:15:11:9f:bd:dc:
         d0:46:1c:38:47:06:42:eb:85:65:1d:13:5a:a4:f4:06:42:be:
         3a:b9:00:92:bb:ba:85:1d:e3:fc:83:2a:e3:d2:31:38:2b:bb:
         3c:e0:01:be:8b:cf:70:7a:6a:e6:34:f5:17:9a:b4:b7:a9:56:
         ae:b0:33:9e:64:45:f7:23:8a:71:94:64:72:8d:f7:bd:27:f4:
         80:8f:ce:7c:ef:48:e2:62:17:04:33:4b:5d:67:48:4e:b8:35:
         a9:d4:de:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cBwpt88h9D9+WwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl
ZGZiMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MzcwNzRkZTgtNzgyMS00MWViLWFkMTMtY2NjZGViMzcwNGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyuM6UCt7ThCrPTlzH+SvJfT6PY0EoQq0VYe
v1+mGkKaUde4BC2px/XlZ65X4JiAVrV2x21u2rt+FTmoEkEzjCajW8ltpNy9buY5
fiUx3EnSzDFVTLdq/y6At6NtOAoQ1zVSSL0t4DPA4/bAIqyOUMaU2cFiwtbSyTEQ
SlkQDOurOinWPPEcE+5ZSWNK9YNbA535cLzPkJ0kMkVEjTuj+UQe+cDVaU2BOPkh
hZAeJ87le4HXM9mXteEFh1nIqFhCW3HB6iBHl3ge7E1PFN23Zf0e2nBSDyUL0aVn
EWtRQStbNpOlLIgAtEfgA82kyDhxa7Kq8pZ2Ebh0+zJn/Z9scwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeq0tUQRmkWGCKo1v1Dn+vrgFw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4
MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvOWU2YTk3MzEtMmFmYi0z
N2UzLTkzZjYtNGY0YzgyNTljNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz
MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj
ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx
YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN6lxQ0IdgvAY8vcTSHgR+jVo1tQVGbTeN1skbvGEN8DA8Ic0CmYAWTW
Ph3vdGOcBU4dTx89tOHZxvckDTrcGZyDXYLDxi+lNqiWpqtJTCs6LYFO4j9PCaYN
Kl552u43FFjqemzcTuKCBaum9I+GXZrnt75gWxDTgXu7cxszr0yHEgV7qCiVAC/X
RRFm2+zN4wzvVFLsyAYKCduGYeMVEZ+93NBGHDhHBkLrhWUdE1qk9AZCvjq5AJK7
uoUd4/yDKuPSMTgruzzgAb6Lz3B6auY09ReatLepVq6wM55kRfcjinGUZHKN970n
9ICPznzvSOJiFwQzS11nSE64NanU3nM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:26 2026 by rpki-client