Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          cqpdAv8qbH4/1EhY2ze67qlcmzRByBSqg6m3vc7pnQg=
Subject key identifier:   04:99:BC:0D:E2:F1:FB:BF:AC:B8:62:71:3D:2F:16:2F:18:D2:97:5A
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F4328584E0005DE40F5C9288EC8DE5680
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:de:40:f5:c9:28:8e:c8:de:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=1cedec58-cd3e-4a5c-8377-3d718f724693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:cd:4e:9e:58:42:d3:b2:83:23:1d:48:54:
                    d3:12:eb:23:b1:15:c3:68:08:fa:b0:dc:2a:0c:31:
                    9f:7d:9c:b8:8f:2a:7d:c4:49:a5:97:0d:7e:f3:70:
                    39:79:66:9e:fe:5b:73:5c:51:7a:fb:a9:14:94:78:
                    63:da:5d:1a:dc:00:62:e7:56:e8:6a:49:0b:3b:40:
                    9d:21:0e:6c:15:bc:cf:15:aa:c6:71:93:f0:86:69:
                    77:4c:98:da:1a:c8:0a:34:55:c9:d2:95:cc:e4:80:
                    5d:be:89:92:59:75:f2:f1:17:35:05:49:a5:ff:76:
                    ea:51:1f:19:84:b6:cb:e1:ef:8b:dc:4e:53:89:3f:
                    85:f7:45:fe:bb:bf:3b:bd:af:c1:fe:b2:ca:3f:76:
                    75:d1:d3:37:5f:5a:83:7a:65:82:da:d0:eb:83:2c:
                    ae:bb:eb:f4:62:44:ae:90:4a:dc:12:dc:24:dd:86:
                    d3:35:16:37:c4:cb:4a:af:19:59:f0:a8:f5:5c:23:
                    cb:c0:ad:30:81:9a:d5:f4:73:31:6a:4c:56:fe:a1:
                    ba:77:64:23:c1:08:e0:f9:43:c1:ac:08:db:ab:44:
                    37:47:c1:c6:62:88:a0:f2:75:94:5d:11:b3:5b:2f:
                    69:1c:b6:ca:f3:62:cf:12:22:ca:b0:75:a1:84:77:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:99:BC:0D:E2:F1:FB:BF:AC:B8:62:71:3D:2F:16:2F:18:D2:97:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:2b:25:80:da:c4:97:d0:95:4a:c2:0f:03:5a:52:63:60:
         28:bb:ec:c1:73:63:f4:3c:a2:c5:c1:bc:67:7c:ee:46:94:3a:
         71:88:46:79:e1:25:bc:7d:86:bc:c7:c6:d7:c0:91:2c:19:4e:
         20:6f:7f:14:5e:a7:3d:94:9a:17:4e:c4:bb:df:d8:d4:e1:ec:
         4c:be:6e:9f:75:31:05:de:bc:f3:db:1e:c1:87:a5:39:03:1e:
         30:22:ff:76:6a:0d:31:88:15:f2:39:5b:ed:49:62:8f:bd:1e:
         5a:44:69:50:03:97:bd:0d:ae:09:69:cf:db:44:25:fe:22:a5:
         e3:77:e2:64:0e:f0:f0:28:07:b0:e2:ea:48:00:97:c9:43:52:
         de:67:f4:73:25:56:f9:0e:56:0d:f3:37:1e:c5:1a:52:44:54:
         4d:e6:12:95:ce:39:9e:69:0c:72:f6:37:b5:13:56:97:8e:da:
         df:f2:54:e8:b5:96:a5:c6:5e:26:2b:0f:fb:fa:af:bd:ec:76:
         63:2d:e2:26:7b:5c:91:10:4a:d9:7e:1c:a3:eb:eb:72:0a:0c:
         49:87:47:54:36:72:23:95:1a:4d:ae:92:25:b2:80:42:94:b7:
         88:ea:dd:be:80:60:8f:ce:fe:37:c1:0b:49:10:51:53:cc:90:
         95:fa:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:46 2026 by rpki-client