Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa
File:                     2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa (raw, json)
Hash identifier:          uJF9+j7CC2SeICGMw5VXHk+a/D0OFeHoGjPm/urpLwM=
Subject key identifier:   ED:F6:F6:96:B0:03:B0:D7:3B:C4:18:BD:5C:DF:DF:94:6F:EF:59:99
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584D5E1A6B0D790EA18826ABC711
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     19257
IP address blocks:        199.180.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6b:0d:79:0e:a1:88:26:ab:c7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=bb42dbb9-3d35-44ea-a2fc-036a7bc1f8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:2f:eb:b8:d5:60:e0:4c:5c:42:94:7d:cb:
                    25:d1:6d:30:cc:61:cb:28:50:2e:3d:de:99:77:f2:
                    63:09:ab:0a:4e:eb:6b:d6:e3:ee:16:7e:3b:cd:fb:
                    9f:52:06:d0:a3:f9:1b:d6:31:e9:ba:d3:19:b5:2d:
                    3c:ce:d3:64:7d:fa:53:53:5d:8c:f4:a0:9f:7b:7c:
                    9f:16:2a:03:55:82:37:7d:c9:40:5b:ee:ff:a5:69:
                    68:d7:5f:12:84:8f:ce:59:e3:30:f1:2c:2a:2c:00:
                    7f:47:22:06:1a:42:18:ea:ba:3e:c3:c7:30:e0:db:
                    7f:e0:31:b6:8a:62:99:53:29:93:92:be:60:f8:2a:
                    7d:b6:95:00:5f:a6:7d:03:06:18:90:05:39:cd:2f:
                    c3:81:36:fb:79:05:6a:b4:e1:58:b2:d2:c4:60:4d:
                    6a:a7:97:d9:ea:73:5e:63:a5:62:07:ac:7b:4d:d2:
                    b1:0b:90:e4:0c:82:7c:f9:f1:c2:1c:61:b6:4e:cf:
                    44:9c:48:64:8a:4a:f0:ef:df:d7:a5:a0:e3:c7:d6:
                    f8:e0:6a:53:39:a3:49:a3:05:4e:54:48:5f:b8:e5:
                    ea:94:89:a5:df:c9:a5:75:41:36:79:8b:0b:e9:ba:
                    ff:1b:da:bf:09:31:e1:ae:e1:8c:e2:bc:2b:3a:01:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F6:F6:96:B0:03:B0:D7:3B:C4:18:BD:5C:DF:DF:94:6F:EF:59:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2f0e0b1f-317b-31c3-988e-1aeb9f02f1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:04:79:fc:5a:54:d6:9c:da:55:0a:eb:8b:e8:48:69:c3:
         49:ed:43:4f:f9:28:37:fb:41:33:a7:30:ed:33:1a:e4:57:17:
         0c:9f:b7:18:c6:da:38:14:7a:73:9d:b9:20:4b:e7:9e:47:56:
         1c:35:3a:58:e5:e9:09:9d:2e:9f:5d:7b:0e:b7:cf:51:36:b1:
         22:ea:62:c3:9f:00:15:6d:c7:de:13:d7:e2:c8:b7:ac:a8:c3:
         e2:de:d7:f9:aa:39:60:f3:72:75:70:a3:8d:d1:d3:65:33:00:
         bc:8a:26:c0:4d:33:d4:8b:4e:fc:27:5b:8e:66:16:c3:d0:65:
         4b:98:da:5e:5a:f4:a4:36:56:88:d6:71:bf:5a:c3:2c:67:67:
         96:4f:e8:09:4f:77:8f:1f:93:22:5d:d7:dc:3e:f9:94:a3:7e:
         f8:b7:fe:87:a0:fd:e4:96:b6:08:2a:06:8a:6e:6d:ca:76:ad:
         d8:0f:eb:58:d8:7d:40:8e:fd:41:2f:a0:e7:d1:c5:40:be:59:
         7c:39:54:6f:62:c7:1f:7c:dc:fe:79:fa:d8:eb:4b:9d:97:ab:
         4d:98:f2:b6:e0:7c:ea:27:6b:43:b0:67:b7:cd:f3:7d:b6:00:
         65:8d:f8:4d:86:e6:0a:1a:26:99:d0:2e:8f:11:4a:99:15:60:
         de:1a:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:55 2026 by rpki-client