Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa
File:                     15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa (raw, json)
Hash identifier:          2geh8BZ2vle1VyWvEvOGG0Kw55Q1ddrSHoP8u6eb9xs=
Subject key identifier:   62:CA:AA:14:5E:E7:20:56:84:EB:0B:96:4A:8C:13:01:71:49:D6:EB
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4E2605A76754CA3871BECC00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa
Signing time:             Fri 27 Mar 2026 07:51:14 +0000
ROA not before:           Fri 27 Mar 2026 07:51:14 +0000
ROA not after:            Thu 25 Jun 2026 07:51:14 +0000
asID:                     21549
IP address blocks:        138.207.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:26:05:a7:67:54:ca:38:71:be:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 27 07:51:14 2026 GMT
            Not After : Jun 25 07:51:14 2026 GMT
        Subject: CN=584b070d-a6dd-43d4-8590-7e1b7a459e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:1b:45:a8:0a:77:d3:ed:c1:5d:e8:aa:aa:
                    33:3d:4f:c3:cc:62:54:06:7b:d1:1e:78:74:60:15:
                    fe:75:1d:ba:6c:b2:6d:42:59:6f:80:d8:92:86:d2:
                    e3:f4:88:af:9e:e4:b0:65:07:40:48:f1:b7:9c:8b:
                    07:bf:b2:c3:4a:cd:f4:c7:4f:ca:fa:31:00:eb:40:
                    fd:fa:38:7d:73:da:7b:c9:70:7c:57:f7:2f:86:34:
                    88:3e:2a:31:23:63:42:d4:04:ac:ed:33:27:ef:8a:
                    9f:d5:7e:3c:81:8f:d8:bf:df:c1:d7:34:25:57:bc:
                    02:d8:0c:67:16:ac:68:e7:25:30:10:81:af:b3:c9:
                    e2:d1:d5:1c:1f:11:bd:d0:fa:58:24:f3:02:17:28:
                    f3:8a:62:d8:d4:fc:cc:75:bc:c7:6f:03:94:da:27:
                    d4:3a:0e:dd:52:c2:f0:cc:7d:02:0c:33:ab:56:6d:
                    e8:b8:a6:11:26:09:ab:88:0e:f1:c1:fc:b8:d3:95:
                    a3:b4:35:a3:32:1b:f3:81:81:60:80:67:5c:69:c6:
                    b1:aa:c3:3f:f0:69:13:61:7e:de:90:3b:4b:08:e8:
                    c6:81:3f:80:2a:6e:25:c2:00:6e:62:cb:00:65:59:
                    1e:c1:73:06:ff:e2:5d:db:01:25:c1:72:0a:16:83:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:AA:14:5E:E7:20:56:84:EB:0B:96:4A:8C:13:01:71:49:D6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:51:d5:51:6c:2b:25:2b:54:0d:9f:d1:ca:e6:18:f2:68:57:
         ca:84:a7:6b:24:5e:c9:b1:c3:f7:ec:35:ff:25:bb:27:11:8d:
         a5:f3:a6:43:7a:2c:92:b1:8d:4a:8e:af:0d:eb:19:d7:a5:76:
         99:18:14:ce:cf:bb:d6:25:24:3c:95:42:7b:05:e5:0d:e1:d6:
         12:81:ba:cf:be:fc:a7:f7:63:a0:f6:b8:80:9c:24:d4:70:84:
         4f:e3:ac:7f:bc:14:c9:40:5a:02:fa:43:c4:0e:c5:72:48:8c:
         c1:f4:f0:40:e5:a0:0c:83:da:22:7f:c1:23:d2:92:6c:ac:5a:
         fe:6f:09:9d:89:80:8f:dd:4a:7d:67:18:c1:5f:be:07:39:06:
         7f:25:02:49:27:41:0e:e5:ae:c8:11:30:af:72:db:77:f2:7f:
         9e:d4:11:8d:8c:c2:56:be:2b:12:2a:1f:09:33:85:ef:d6:c7:
         ce:a4:04:71:5b:6b:47:56:28:fb:68:e6:e3:4a:e3:c4:42:2b:
         c4:9c:80:cc:b7:0a:21:08:2e:2f:fc:44:09:42:95:31:3c:69:
         a0:f3:a4:0f:3b:f3:77:ee:92:c6:2c:49:29:38:4b:19:49:dd:
         6d:20:b4:8e:e9:b0:10:d3:a4:29:22:2a:d4:81:ec:e0:7d:73:
         09:81:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:18 2026 by rpki-client