Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/18a345c5-eb41-317e-b9ae-f123d76c4778.roa
File:                     18a345c5-eb41-317e-b9ae-f123d76c4778.roa (raw, json)
Hash identifier:          AxvOo6CnSo5GO7xfAIm6yJhnxqng3e3DhhMpQlq5ZIM=
Subject key identifier:   06:F1:66:F1:66:48:BC:2A:1A:75:F8:27:E6:27:5A:15:AC:E7:A3:75
Certificate issuer:       /CN=fb545837-dc13-4101-916f-b5207537624f
Certificate serial:       010D0C9F4328584D7328548BA3F14B445D430880
Authority key identifier: 1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/18a345c5-eb41-317e-b9ae-f123d76c4778.roa
Signing time:             Thu 09 Apr 2026 14:00:48 +0000
ROA not before:           Thu 09 Apr 2026 14:00:48 +0000
ROA not after:            Wed 08 Jul 2026 14:00:48 +0000
asID:                     53586
IP address blocks:        199.27.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:28:54:8b:a3:f1:4b:44:5d:43:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb545837-dc13-4101-916f-b5207537624f
        Validity
            Not Before: Apr  9 14:00:48 2026 GMT
            Not After : Jul  8 14:00:48 2026 GMT
        Subject: CN=1b9eef2d-ae81-495f-b7e5-f584926077d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:e3:7d:30:30:21:6f:72:1e:06:ba:b4:91:
                    fc:1e:29:08:3c:4c:26:d5:6c:57:49:20:ad:a7:d7:
                    d4:5e:83:aa:78:be:39:f6:25:b2:02:1d:eb:ff:ba:
                    c8:d9:c0:38:0f:34:86:d2:22:3a:dc:c4:fa:de:5d:
                    16:26:82:7c:39:00:c0:9d:b6:15:22:9e:e3:e4:c1:
                    92:42:93:b7:71:cd:49:9b:d0:37:c0:c6:4a:72:cf:
                    7d:be:1a:c6:5e:68:9f:16:d8:88:ac:e4:e1:9a:df:
                    35:51:05:1c:35:a2:a1:29:58:96:0f:c1:c6:40:f6:
                    f9:c9:64:05:92:05:dd:1a:7a:c1:40:0f:17:ae:db:
                    c2:73:0d:49:dc:ea:7b:30:f1:e3:7e:b4:a5:38:e4:
                    c7:1f:90:33:0e:85:94:36:4a:d9:f9:4b:90:25:bf:
                    05:63:d5:5e:26:9b:ab:bb:1e:74:7f:3a:d8:af:e7:
                    0f:f5:e1:1a:0e:f1:76:c5:3b:07:d3:af:90:74:85:
                    99:32:72:92:38:3e:20:d4:d6:5d:8d:05:9b:b7:ce:
                    33:bd:87:7c:63:84:05:8d:43:2e:bc:d3:6c:00:ac:
                    72:9e:06:56:0b:cc:7e:1a:75:3a:7a:56:e2:3a:48:
                    eb:7a:99:20:69:3a:9e:f4:fa:1e:bb:0e:65:04:21:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F1:66:F1:66:48:BC:2A:1A:75:F8:27:E6:27:5A:15:AC:E7:A3:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/18a345c5-eb41-317e-b9ae-f123d76c4778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:f1:71:3f:01:26:97:f1:ae:ff:cb:6d:70:ea:ef:0d:f4:
         c8:3d:86:79:e0:27:be:c3:1a:d4:fe:c7:4d:15:fb:2d:08:d1:
         c3:a7:e0:e2:9e:78:53:8f:2f:3f:92:1b:24:52:c5:e1:7d:88:
         3f:b4:6f:a1:0b:fc:73:09:32:ab:72:86:07:e3:08:67:e2:61:
         18:7b:99:32:9f:38:24:68:21:07:7e:70:92:60:40:1c:bf:76:
         46:fb:07:a4:50:db:79:9c:f2:66:d2:cf:d0:f2:c5:56:37:69:
         bf:3e:26:cd:c3:5c:13:9a:5c:8e:79:0b:85:8f:5f:b0:b0:6b:
         ee:80:ef:c6:5f:73:c3:10:31:72:c0:ad:23:f0:f1:ff:8e:c0:
         d4:01:ea:22:4f:fc:5d:35:1f:8c:98:2b:2c:9d:8b:3f:66:0f:
         95:73:20:40:50:de:b2:d6:e2:91:06:b5:ae:c9:db:bf:b4:17:
         45:d2:e0:97:ae:fe:88:e5:9f:f7:d7:0e:67:ea:5d:e7:e0:1e:
         6f:1c:de:1a:7f:60:e9:90:4d:f1:da:38:88:61:e4:76:fd:d9:
         ba:77:a2:45:cd:8e:32:77:c2:ea:2f:63:32:d2:41:16:f7:96:
         3b:07:b4:8c:7d:1b:cc:7e:4c:9e:02:13:9a:7f:8d:ab:ca:24:
         26:1f:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:53 2026 by rpki-client