Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c66fd9eb-e9fa-3ec6-8b58-2bccec1b59cd.roa
File:                     c66fd9eb-e9fa-3ec6-8b58-2bccec1b59cd.roa (raw, json)
Hash identifier:          5SGnmBQ7P4nL6owoXs7OUYgy7QVcRPMU7yMnTq3nq9s=
Subject key identifier:   A0:3A:CC:F6:F4:D2:3F:98:36:37:DC:19:79:10:3F:04:DE:AC:FC:82
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D6EEB18305F60D1F9D0E4BE80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c66fd9eb-e9fa-3ec6-8b58-2bccec1b59cd.roa
Signing time:             Wed 08 Apr 2026 01:34:11 +0000
ROA not before:           Wed 08 Apr 2026 01:34:11 +0000
ROA not after:            Tue 07 Jul 2026 01:34:11 +0000
asID:                     11049
IP address blocks:        159.112.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:eb:18:30:5f:60:d1:f9:d0:e4:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  8 01:34:11 2026 GMT
            Not After : Jul  7 01:34:11 2026 GMT
        Subject: CN=be1794e5-3b6e-481e-8f63-6d0bdf0185e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:53:71:3e:6d:fa:c0:f1:d9:00:a2:1f:fa:
                    af:bb:6c:76:f9:83:77:bd:4e:e6:73:6c:6e:77:1c:
                    cf:80:87:95:3e:a3:7c:ba:cb:4d:01:1e:af:b9:ee:
                    7f:d8:23:a3:67:3a:c5:c0:6a:6b:6c:69:8f:4d:7a:
                    b1:65:3a:c9:72:8f:6d:12:11:5c:61:44:21:1a:bb:
                    4b:47:31:5b:d9:01:f1:b8:13:a7:01:5e:18:30:93:
                    0b:65:2f:ee:21:17:70:dd:a0:b4:20:33:2d:5f:e2:
                    e2:b6:07:95:88:88:79:7b:99:1b:3d:8b:06:85:5f:
                    2c:1b:36:00:ae:d1:ea:a0:be:63:85:b3:bf:7d:c6:
                    6b:1c:a3:ef:47:3c:c5:9a:f5:99:c5:e0:9b:56:a0:
                    d3:99:23:b6:b8:05:a9:73:3a:1e:15:f6:41:2a:ff:
                    9a:1d:22:2b:54:6e:e5:a8:bf:b4:de:82:54:ca:bd:
                    8b:0f:6e:15:e7:37:34:02:5d:88:d5:95:10:a1:da:
                    a6:47:1d:b1:5b:f7:b8:ee:ec:06:be:d8:a1:b8:ec:
                    30:38:7d:8d:e2:df:23:3e:85:7a:69:17:d0:22:73:
                    09:01:62:f4:3c:2e:19:5e:20:a6:a7:13:e9:5f:94:
                    c0:8b:65:e9:96:17:24:5a:2d:8f:6a:2f:01:cf:13:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:CC:F6:F4:D2:3F:98:36:37:DC:19:79:10:3F:04:DE:AC:FC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c66fd9eb-e9fa-3ec6-8b58-2bccec1b59cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:94:43:da:d5:e6:1f:cc:be:ed:ce:72:67:bb:a7:ca:53:
         ed:e1:90:89:ce:ac:2f:4c:96:80:e4:9c:0e:3d:06:92:82:01:
         4e:c5:8a:4b:0c:fd:38:6f:09:43:dd:cb:01:f2:a9:1d:cb:69:
         1c:ec:e8:da:f1:04:fb:6d:8a:08:0f:a6:aa:db:ef:ce:3e:ac:
         fa:6c:9b:15:7d:a0:68:34:08:c1:a4:ff:65:70:68:0f:68:8e:
         e9:8b:63:4b:e4:c6:3b:d3:44:77:0e:83:d6:1b:9d:e8:7e:3e:
         ca:f6:c7:c5:a2:b3:cc:75:b1:0a:74:b7:c2:78:a3:54:62:6c:
         5c:37:07:07:e4:73:72:ac:f7:f6:a7:65:45:3c:86:f6:cd:91:
         fc:a1:94:57:91:44:e7:3c:f4:22:9f:fa:6d:e2:25:95:f1:82:
         7c:ff:02:6f:26:49:3b:38:6a:ef:91:63:59:bf:26:80:46:9c:
         9b:45:ce:d2:6b:b5:89:6d:94:27:91:55:1f:d3:db:b1:cb:21:
         81:5c:33:d6:63:02:ad:32:97:f0:ff:d1:23:06:18:c6:84:88:
         d0:36:57:d8:d7:db:fb:38:a4:d8:54:1c:6e:52:ba:72:a5:d8:
         22:c7:2f:81:ac:67:11:32:b2:b7:11:f8:8b:8c:c2:5e:6c:b4:
         09:41:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:22 2026 by rpki-client