Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa
File:                     0d5fd5be-09f5-304a-8661-d325182ea2a1.roa (raw, json)
Hash identifier:          QSXFVsH/e5EtCQuE474SyoYjTUBklYhbxaG2xMVuEnQ=
Subject key identifier:   BF:3B:8C:10:C7:68:62:FA:97:9D:A3:F6:9D:B6:8D:71:F6:F8:A2:A5
Certificate issuer:       /CN=2e6abdd9-4ebf-401b-b031-b7fe672633df
Certificate serial:       010D0C9F4328584D6AAA601147B8729B7C145940
Authority key identifier: EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     19108
IP address blocks:        216.117.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:60:11:47:b8:72:9b:7c:14:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6abdd9-4ebf-401b-b031-b7fe672633df
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=59cdec25-2b68-459f-b1c5-7ecf2d3088c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:0d:af:0f:97:8f:9e:52:f3:96:58:6a:01:
                    1b:1c:3a:80:a9:2f:6c:11:b6:2d:dd:5f:64:e6:03:
                    4d:23:db:6c:87:30:71:a2:cf:9a:02:db:92:a6:b5:
                    a1:a9:d0:04:c5:9d:47:0d:16:4d:b2:1c:3c:ee:d5:
                    9c:8c:19:cb:06:fd:71:bd:4f:ea:ff:85:54:7e:1b:
                    18:c9:32:8f:2c:da:7f:2b:9d:48:87:bc:55:82:8a:
                    ad:d6:b9:3a:6a:53:45:68:21:e3:4e:41:41:e9:77:
                    e9:a9:e2:26:54:14:ab:6c:25:a1:73:d4:c5:4b:fb:
                    36:01:2d:13:a8:99:82:f4:dc:1c:e9:c4:39:bb:21:
                    74:08:6a:fb:0b:da:9f:ae:1f:52:3e:b8:03:08:94:
                    ef:be:73:1a:35:8f:7d:94:cb:61:dc:ec:3b:7e:32:
                    bf:09:ef:88:12:fe:98:d7:17:d2:3f:df:61:30:66:
                    6f:f9:23:b7:e2:1e:8e:6a:a0:37:9b:64:4e:b7:1a:
                    3d:9d:c8:d6:f8:a1:1f:02:ef:32:40:d1:ea:61:9f:
                    cb:9a:8e:09:f4:dd:e1:da:90:e6:6c:81:0e:58:04:
                    ed:f1:f4:38:62:01:4c:19:b8:ad:b2:e5:e8:48:6a:
                    05:0d:73:cb:c6:73:fa:b6:58:6d:e2:86:87:65:2d:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3B:8C:10:C7:68:62:FA:97:9D:A3:F6:9D:B6:8D:71:F6:F8:A2:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/0d5fd5be-09f5-304a-8661-d325182ea2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df/2e6abdd9-4ebf-401b-b031-b7fe672633df.crl

            X509v3 Authority Key Identifier:
                keyid:EE:58:09:12:A4:23:D2:EE:D6:51:C8:90:79:A8:93:60:C8:67:E8:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e6abdd9-4ebf-401b-b031-b7fe672633df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.117.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:54:cd:69:8d:03:8d:c2:cd:74:2c:76:af:1e:27:e1:49:
         1b:87:ca:e0:7f:4f:9e:7c:9d:80:f6:b4:f9:e6:c0:95:c7:12:
         f2:77:cd:cf:8c:1c:eb:5c:9a:9d:5b:cf:a5:09:e5:79:f0:f3:
         fe:99:e1:4e:f6:53:d9:1d:88:24:88:48:e2:1c:3f:0d:ec:c4:
         05:49:9b:33:5d:ac:7e:d5:a4:da:5f:e0:03:88:9c:bc:23:f0:
         67:ae:2a:3a:8c:e0:09:ee:b9:c4:0e:27:7b:8e:35:b1:44:0f:
         36:bc:9e:48:12:da:39:09:73:3b:a9:7d:ba:58:25:95:dc:bf:
         0b:78:d9:f2:85:bb:52:f6:7c:eb:3f:23:4f:be:fd:74:5b:4a:
         ec:01:78:d6:a9:0b:9f:91:c1:b4:95:05:e5:f1:46:9a:45:2d:
         86:f7:d7:3d:83:f7:a9:d7:7a:3b:d1:22:5f:bb:4e:72:28:c5:
         77:6d:2f:6a:69:bc:6a:0a:e1:e7:d6:17:70:74:0e:e1:98:76:
         39:04:ab:fd:1a:86:91:23:03:95:83:4e:5a:52:35:7e:8e:4a:
         40:19:33:0c:c8:7b:d9:25:8d:cd:49:41:5a:ae:f6:b7:a2:84:
         05:8e:5c:25:90:c0:fe:35:b6:3a:e6:cb:f1:50:b6:80:95:65:
         e0:bd:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:58 2026 by rpki-client