Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
File:                     383db263-dfa3-378b-9465-6691c04a9ccd.roa (raw, json)
Hash identifier:          yalb7/+e0+4C5Ei1q6Jtoc78AdbAuYhnjYHcnetgSb0=
Subject key identifier:   F1:B0:47:42:F9:16:54:A9:A9:46:07:A3:AF:E6:D9:86:66:F6:B9:02
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584CB6B722C64E9AD68C4B71DC40
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        159.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:22:c6:4e:9a:d6:8c:4b:71:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=8ccf43cc-d841-4443-a877-0fd046092d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:8b:77:1e:0c:be:be:20:02:e6:0e:ee:0d:
                    a1:89:63:ce:70:bf:15:ba:f7:54:a3:43:eb:6c:c3:
                    85:8e:70:97:2c:44:92:6b:5d:62:9a:03:fd:9a:bc:
                    de:25:98:47:79:ba:ca:ae:65:19:f0:aa:c6:7f:14:
                    66:cc:54:ec:ed:4b:45:84:05:83:6f:52:a3:c6:53:
                    30:f6:f4:40:84:93:2d:46:db:99:3f:3b:78:f5:47:
                    81:ad:2a:d3:8e:3b:50:a2:f7:26:98:7d:42:73:b2:
                    75:a6:d8:71:61:a1:2a:85:2e:29:a8:e8:b3:be:de:
                    83:54:3f:6b:90:79:ae:e9:ba:41:06:47:a2:5d:05:
                    91:0e:03:5a:14:26:d2:d3:21:8f:37:0a:8c:31:5c:
                    0b:b2:97:12:20:d6:c5:11:0c:34:72:93:9f:86:c4:
                    9d:2a:ba:c5:0e:b3:ec:22:fa:19:23:82:3e:7d:c6:
                    45:de:88:4a:c6:63:88:bb:51:90:79:5f:37:19:67:
                    03:2f:f7:14:63:b3:ae:4c:aa:e2:c9:95:cd:b5:2c:
                    8c:3a:7a:84:7e:d1:b1:07:a9:e8:dc:34:2a:90:ae:
                    e0:11:12:a8:92:e1:2a:df:fe:66:fc:f6:79:a3:18:
                    7d:e3:d2:24:de:4a:8e:7a:42:c5:41:d5:26:ba:b2:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B0:47:42:F9:16:54:A9:A9:46:07:A3:AF:E6:D9:86:66:F6:B9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:86:a4:8c:5b:29:b9:a5:81:86:65:58:bf:5e:64:79:e2:
         e2:16:b9:5e:1d:51:4e:bf:3b:70:a0:a4:f5:32:a6:88:e9:f2:
         c9:b0:ea:b7:70:2a:db:98:73:56:79:54:a7:97:71:69:55:15:
         43:d2:84:de:c9:87:ca:ad:3e:f8:4b:57:b7:94:48:d0:38:bd:
         99:e9:03:12:3c:2b:c8:24:4b:72:05:1a:32:fe:f7:34:86:37:
         3c:f7:48:f0:99:10:98:18:44:ca:b8:03:51:64:14:5a:08:e7:
         3b:55:4a:74:03:87:60:a8:f1:d8:eb:60:24:49:80:f3:54:e1:
         d4:7e:ac:63:36:17:6e:4f:24:b5:3e:85:f3:21:36:b2:00:20:
         fd:6a:70:a6:db:97:05:ab:1f:cb:32:7a:83:cf:87:43:0c:f8:
         06:a2:43:60:88:c4:0a:26:d5:3b:df:5e:f2:79:d0:e9:66:9b:
         a0:71:85:aa:89:12:71:6a:80:81:06:9e:40:a3:b9:57:a6:1f:
         d2:94:68:ac:bf:43:21:f2:47:3b:b2:fe:f4:87:2c:19:9f:40:
         f0:b4:e1:9b:ae:0e:1a:56:6e:fe:3f:f2:65:f6:75:38:4e:af:
         ee:ef:f7:c9:95:e4:17:3e:19:01:8b:97:f9:e6:7c:e9:91:98:
         46:91:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:41 2026 by rpki-client