Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
File:                     cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa (raw, json)
Hash identifier:          dkJl8UGNHKzb3K2fKz/LgSszHLcu+UKuUbReYn0N7Zs=
Subject key identifier:   17:2D:71:AA:D6:C3:62:92:76:C5:F3:83:76:0F:88:AD:C4:15:7A:DF
Certificate issuer:       /CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
Certificate serial:       010D0C9F4328584D5234FC9CD1EFEB1177AAE300
Authority key identifier: 47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
Signing time:             Sat 28 Mar 2026 18:44:37 +0000
ROA not before:           Sat 28 Mar 2026 18:44:37 +0000
ROA not after:            Thu 04 Jun 2026 13:08:33 +0000
asID:                     14618
IP address blocks:        159.220.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fc:9c:d1:ef:eb:11:77:aa:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
        Validity
            Not Before: Mar 28 18:44:37 2026 GMT
            Not After : Jun  4 13:08:33 2026 GMT
        Subject: CN=822d419a-4443-422a-9efe-1a3d5f77e40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:50:0e:dc:dd:2e:4b:65:2f:bc:2c:b2:00:
                    fd:c8:40:7e:0a:75:f3:f0:1c:68:e7:08:0b:9e:81:
                    b6:7d:21:5b:0c:ab:c9:a5:7b:2e:0c:c5:09:55:80:
                    e4:e6:f8:97:4d:1b:22:93:6c:2d:a9:30:d4:bd:4b:
                    70:32:6c:ea:1f:18:9c:de:32:85:15:5c:52:8a:ee:
                    5c:86:c3:48:d9:d5:26:8b:75:83:4f:31:83:db:d9:
                    57:2e:b7:fd:21:28:28:33:d3:cc:ee:ca:2d:70:35:
                    82:87:30:18:eb:af:22:5d:dc:18:b4:6c:01:a8:9c:
                    a1:3a:5e:a8:fc:01:76:e3:27:ed:8f:9d:4b:74:37:
                    91:10:08:9a:46:7f:d9:9e:06:7a:40:f5:bc:fe:e5:
                    81:f4:d8:2e:0a:db:fa:d7:f6:0e:30:e9:34:4a:52:
                    4f:25:8e:52:e4:a4:ac:ac:f9:25:f4:7a:7b:dd:9d:
                    44:eb:1b:b3:a5:74:9e:be:ae:23:5b:e6:60:3f:9d:
                    bb:74:2f:24:cd:dd:b5:b8:07:96:37:83:f0:36:27:
                    80:b4:29:23:bd:25:15:15:53:62:38:7d:d6:97:a9:
                    dc:e8:50:e9:39:2e:3f:d7:2d:11:72:4a:8a:8c:25:
                    2d:47:d0:a9:40:d7:3c:71:ee:f0:e6:fb:c4:a0:cc:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2D:71:AA:D6:C3:62:92:76:C5:F3:83:76:0F:88:AD:C4:15:7A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl

            X509v3 Authority Key Identifier:
                keyid:47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.220.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:99:57:51:db:b0:b7:23:4a:a6:50:60:29:0f:eb:80:d5:
         7a:01:c0:78:b7:b5:fc:29:0d:26:95:5e:bf:3f:22:66:de:f5:
         33:97:05:f4:b4:59:d7:f6:df:a4:2a:3f:4e:74:22:cb:b9:a3:
         e3:bd:d9:e4:01:10:4e:52:17:0f:b2:84:3b:a6:5d:07:5a:19:
         31:90:cd:7b:64:88:23:05:8b:cc:6b:e4:ae:f3:a3:74:71:85:
         b3:55:2c:ad:83:a5:5f:53:0f:ce:3c:52:e8:24:71:0c:55:84:
         8d:e8:48:c1:a6:57:1d:f7:c4:fb:01:d2:4f:46:f7:6e:82:65:
         87:63:63:af:8d:81:6a:3c:d9:3e:ac:c6:e1:43:76:d2:c0:b3:
         af:74:60:55:f4:3e:a1:ee:e0:58:da:e2:16:93:09:54:ed:66:
         2d:21:e5:cc:f6:52:a4:45:f8:a0:3e:ec:81:67:34:95:cb:a8:
         ac:d9:fe:af:24:d0:4f:2e:19:1a:bf:d2:6f:da:c6:c5:a2:2f:
         d0:e6:42:08:25:97:ad:78:bf:6d:81:51:fd:9b:e5:00:d2:bd:
         3b:c7:ef:45:05:a1:90:12:68:a0:05:8c:1f:c3:f1:ae:d6:ac:
         ac:d5:e7:57:00:16:0a:01:ae:b4:1b:dc:41:f1:bb:a3:35:d4:
         43:6b:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:54 2026 by rpki-client