Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa
File:                     b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa (raw, json)
Hash identifier:          ZyBbIpS0Io6dXYETjailXclXjHGIXMILUannG0ez2nA=
Subject key identifier:   52:86:FB:42:9D:6C:73:61:ED:E3:6A:8D:EA:5A:72:85:03:F5:5E:77
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9E8CC52D04CB28524F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     36103
IP address blocks:        216.218.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9e:8c:c5:2d:04:cb:28:52:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=eb93eb90-3014-4559-820a-6238db5057e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:74:f3:d9:20:e1:2e:0c:83:1d:83:e6:42:
                    a8:40:15:cd:22:a8:b1:41:f7:5e:7d:79:fb:d5:a5:
                    21:0f:55:c7:62:20:f1:8a:bb:35:10:7c:2a:7d:5f:
                    2c:11:ee:e8:86:31:9a:56:dc:b9:a0:0a:65:fe:c0:
                    6c:42:53:cf:f7:26:d9:f6:a2:59:b3:09:32:73:6b:
                    65:b8:e0:d0:81:32:8d:1d:d9:8d:47:17:92:71:73:
                    79:c1:d7:91:74:b0:12:22:bb:e3:db:6d:e8:b2:e1:
                    c0:72:94:21:35:64:63:99:ef:5c:40:ab:b1:73:28:
                    90:a7:4f:b3:6e:70:6a:6b:54:a1:af:6c:27:0b:59:
                    9f:42:48:42:a1:54:87:b4:2c:c8:17:13:90:d3:6e:
                    b5:2a:89:21:32:5c:d8:ad:e9:e3:af:37:11:c4:53:
                    42:63:76:34:40:f3:10:ab:0d:ba:7f:65:ba:ea:38:
                    4d:e2:e8:97:a2:18:c3:35:c0:eb:b3:43:b8:24:f2:
                    cb:19:2d:94:c5:6f:5e:db:75:99:f6:6a:e4:7a:e8:
                    f6:a2:17:55:13:f1:9f:98:67:36:a6:19:63:ee:b0:
                    19:a1:be:ef:b9:56:06:cc:c7:ae:cb:c7:c6:2f:27:
                    f0:e6:86:be:c7:cb:df:5c:f0:86:77:b6:c7:9d:df:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:86:FB:42:9D:6C:73:61:ED:E3:6A:8D:EA:5A:72:85:03:F5:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:f3:53:6d:96:7f:0a:3e:29:6c:de:fd:73:3a:29:4d:9d:
         8a:71:a8:67:54:5f:91:51:05:a2:11:c0:b6:66:17:2b:67:d8:
         c8:cb:a2:a9:26:3d:ce:9f:16:e2:7b:6f:88:b8:9e:a8:ab:41:
         0a:0c:e6:8d:4b:36:72:d6:e2:81:e3:0d:35:35:2d:12:ae:26:
         ca:00:55:a8:15:ce:29:a8:1d:6e:ce:7f:5c:09:89:40:e6:da:
         65:6a:67:97:35:10:1c:64:5e:5b:50:9c:8f:0f:f5:2c:76:04:
         b3:88:d3:43:c6:22:62:c7:b5:40:bb:3a:9f:47:41:82:5c:4c:
         09:c3:39:f7:49:9c:80:76:83:e5:b1:d3:54:26:b1:3a:ce:25:
         74:41:91:ef:6e:43:b0:dc:4c:b1:6d:f8:2b:b2:d3:94:dc:3d:
         97:66:5b:e0:90:f2:40:71:83:9c:11:59:05:9e:4a:71:d9:0f:
         67:f7:f1:98:eb:6e:db:c2:a3:17:4b:32:dd:60:15:0f:11:a3:
         9a:71:fc:3a:81:da:7b:ae:ae:49:7e:ce:63:f0:bd:1b:0b:77:
         bb:bf:de:95:7b:ab:2c:82:22:cd:0e:c6:81:9c:76:2b:ad:4e:
         d2:8c:d2:d9:a9:a6:97:69:3f:aa:53:ab:7f:ba:e7:f4:dc:d8:
         61:6f:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:23 2026 by rpki-client