Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
File:                     2d96d3a5-670c-3a8a-91ab-668e000828c7.roa (raw, json)
Hash identifier:          ov36DQIOUeAJBcNAuylX3/nTPOtaq/Do2bEMK9yDt5I=
Subject key identifier:   9B:1C:51:F6:42:07:C9:B8:82:5E:CC:6B:CA:1D:89:B9:ED:7A:63:57
Certificate issuer:       /CN=eccad7f1-567f-47db-a323-ab03604703b0
Certificate serial:       010D0C9F4328584D6515081810683ACFF5BCBE80
Authority key identifier: B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     11281
IP address blocks:        204.13.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:08:18:10:68:3a:cf:f5:bc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccad7f1-567f-47db-a323-ab03604703b0
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=b792a16a-6ae4-4f26-8049-e91938482b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:6e:cc:b9:59:50:63:7e:8f:50:40:27:ac:
                    4c:4d:23:ec:19:86:1c:b3:27:67:82:8a:6f:6d:f0:
                    71:4d:dd:a6:04:66:8d:59:1e:25:ef:e4:bf:e6:2c:
                    fd:7c:6e:08:ae:85:1c:c5:7b:07:98:1e:58:ef:b4:
                    7f:b3:b5:91:fc:d6:9c:b3:33:84:f7:3e:cc:30:d0:
                    da:66:a0:9b:5a:7a:52:1b:17:9f:a1:fb:5b:b1:f4:
                    8f:61:38:15:8e:d4:b7:42:62:0e:57:7d:dc:26:0f:
                    c2:e9:ff:4a:28:2c:2d:08:49:c4:37:79:6a:ab:e5:
                    df:08:1c:9b:df:c7:7f:6f:a6:6c:de:bf:ff:38:e7:
                    08:f7:40:08:06:10:70:ce:df:03:39:ab:58:fa:d0:
                    cc:5d:02:83:e5:2e:65:bf:25:45:e8:bf:60:00:33:
                    3e:4d:1f:48:c5:93:57:ba:0a:1a:1f:c8:d2:da:5d:
                    49:75:6b:b8:cf:06:2e:83:a6:6b:10:af:14:b5:d0:
                    4c:13:d9:f0:f3:ee:68:48:9c:29:50:d4:f4:8a:63:
                    5d:e2:96:32:d9:6e:b8:74:c1:65:74:8c:6b:6a:2a:
                    af:e1:ad:75:f7:0e:ce:9c:7a:d0:ae:29:e6:a4:ca:
                    d4:55:3d:49:af:1a:0e:d6:13:fb:d9:bd:89:97:dd:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:51:F6:42:07:C9:B8:82:5E:CC:6B:CA:1D:89:B9:ED:7A:63:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/2d96d3a5-670c-3a8a-91ab-668e000828c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0/eccad7f1-567f-47db-a323-ab03604703b0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1B:6F:48:4F:18:26:14:B5:94:E1:CA:CF:61:89:B8:F3:89:73:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eccad7f1-567f-47db-a323-ab03604703b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:01:6c:38:6b:08:66:1c:08:d4:2c:e8:a0:f2:46:77:8f:
         dc:30:ce:ea:ed:f4:60:09:27:c2:9a:a9:85:23:6a:ed:0d:87:
         de:b4:cc:19:9b:23:0d:6b:d3:58:46:f1:e5:ed:30:04:3f:06:
         40:88:49:ff:1d:0e:20:5f:7a:c5:38:1d:d0:f4:e5:5c:6e:95:
         96:90:79:ca:af:4a:92:61:aa:be:65:4c:34:53:4c:db:d2:10:
         15:18:96:d7:f6:ba:01:63:4e:4b:51:21:e0:c3:ad:8f:9a:c9:
         d9:ec:10:e2:37:65:77:99:af:54:88:b1:28:97:d6:72:64:6b:
         11:e5:7d:9a:16:17:7a:eb:52:01:8b:19:29:ce:a5:15:c5:9b:
         09:13:c3:88:e0:50:30:f6:9a:32:3b:46:b6:29:d8:65:6a:58:
         07:cd:f2:6a:9c:31:8c:c0:01:a0:b1:9a:b1:c9:4e:c3:7a:3e:
         ff:b3:b1:ea:11:01:0b:52:31:1f:47:bb:8f:e3:36:7d:65:92:
         36:0e:69:90:69:1d:76:a2:fa:fd:9a:67:41:07:a9:e8:b2:cb:
         a8:d0:41:2a:56:97:78:da:77:25:fa:2e:08:75:0d:57:76:dc:
         ad:0c:51:8f:3a:7b:31:25:84:9e:3c:35:2a:4d:f1:21:ad:6b:
         e0:b6:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:15 2026 by rpki-client