Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa
File:                     690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa (raw, json)
Hash identifier:          dOHOOpGnM0lSn2CnZu3slh5CCEaHANoV1LdpUHeG3no=
Subject key identifier:   98:46:6A:3D:37:9F:8E:24:35:79:75:2E:AC:5D:2F:11:71:56:77:00
Certificate issuer:       /CN=7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15
Certificate serial:       010D0C9F4328584D8695803DDBE9B0944BC36F00
Authority key identifier: 10:74:DD:6E:EF:AC:12:B2:27:DE:B6:E7:12:73:19:6F:27:14:AA:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16623
IP address blocks:        139.48.0.0/16 maxlen: 16
                          142.199.0.0/16 maxlen: 16
                          198.161.2.0/24 maxlen: 24
                          198.161.3.0/24 maxlen: 24
                          198.161.4.0/24 maxlen: 24
                          198.161.12.0/24 maxlen: 24
                          198.161.13.0/24 maxlen: 24
                          198.161.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:80:3d:db:e9:b0:94:4b:c3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d64d5808-009d-49d7-9d5f-336e1cda79fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:79:2d:9d:92:27:b9:31:df:08:2f:01:e1:
                    6d:52:4a:66:d0:88:ad:c2:c3:2a:cd:66:5b:e0:a0:
                    ef:49:cf:e8:38:4e:5f:d5:d0:de:95:38:65:3e:92:
                    bb:52:3a:05:39:05:2f:63:c7:0b:96:c0:85:c9:45:
                    1b:fd:49:32:4d:fb:2d:31:cf:73:a5:5b:28:8b:6e:
                    17:e3:23:ec:84:cd:c9:8c:35:f4:3d:93:f7:ab:6d:
                    c6:fc:88:26:ff:44:84:2a:7b:eb:16:57:d1:b5:d8:
                    19:50:ee:aa:03:eb:26:fb:8a:b3:ee:4e:9a:e5:f0:
                    5b:1f:a3:ff:94:5c:90:0d:da:e5:8f:d9:7c:3d:8e:
                    42:9e:16:b4:f2:7a:1f:50:7d:65:c7:cd:b7:f5:dc:
                    59:75:07:46:88:72:8d:9b:7d:09:8d:c0:b0:40:89:
                    91:d0:9b:25:28:9f:84:ec:f6:e0:1f:01:dd:2d:43:
                    f1:6b:21:89:95:fe:65:f6:2e:20:6c:06:80:32:89:
                    ab:56:f1:9d:69:3b:65:8a:06:99:24:01:78:86:66:
                    6b:79:b3:10:a8:a9:5c:71:bc:78:3b:45:fd:67:fe:
                    26:11:29:54:3e:8f:64:a9:8a:34:46:11:6d:fe:22:
                    8e:c1:e2:be:df:4e:51:08:49:8f:85:b5:33:31:88:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:46:6A:3D:37:9F:8E:24:35:79:75:2E:AC:5D:2F:11:71:56:77:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.crl

            X509v3 Authority Key Identifier:
                keyid:10:74:DD:6E:EF:AC:12:B2:27:DE:B6:E7:12:73:19:6F:27:14:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.48.0.0/16
                  142.199.0.0/16
                  198.161.2.0-198.161.4.255
                  198.161.12.0/23
                  198.161.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:95:a1:21:dc:4d:75:9d:6d:6f:ad:2a:c7:01:77:93:07:17:
         fd:ce:2d:9b:1b:d1:32:12:e3:58:7f:96:f4:59:7b:57:84:6c:
         85:6c:d9:b3:bd:5f:b7:97:94:ba:80:c9:18:dd:13:78:5f:58:
         14:96:9b:76:24:c1:46:04:2b:e0:19:b1:4e:a0:41:f8:e2:e4:
         b7:4b:a0:8f:a1:69:29:68:62:9d:1e:ab:43:2e:44:b2:5a:fd:
         15:66:c9:97:52:88:85:c5:c5:65:2a:c1:68:cf:8d:5e:fc:85:
         3d:86:0a:29:42:4e:ae:d7:f6:d3:4a:61:75:86:9f:29:2f:83:
         0e:28:13:91:56:07:7b:87:6d:e1:0b:b9:d4:e2:1f:f9:cc:5e:
         2d:4d:bc:74:09:14:2f:03:b3:03:e8:9a:0f:40:cf:83:71:e5:
         0b:34:e4:c7:cf:1b:45:aa:12:64:d4:55:b5:6c:3e:c2:68:4b:
         04:69:7d:71:04:35:99:1b:5f:55:d2:81:c4:93:6d:71:3e:31:
         a3:15:3c:8c:39:a3:77:75:7b:c4:ad:c3:68:02:b1:8f:77:b8:
         9f:45:dd:4b:fe:e6:66:59:7a:bc:aa:a2:cd:f6:22:52:d5:3b:
         5b:30:41:4b:62:6c:61:b1:14:19:a8:b2:dc:86:2b:da:a7:6c:
         fc:9c:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:16 2026 by rpki-client