Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
File:                     e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa (raw, json)
Hash identifier:          dkbEg5YUB9GJgl0x5TWkkpgZBCCIs+xXQWihqynyvMk=
Subject key identifier:   6B:9C:A6:F7:CE:94:3F:1D:50:08:F2:81:2C:1A:68:8D:0F:C0:A5:4C
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584D571FAEFDB93FC378C6339080
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        72.13.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ae:fd:b9:3f:c3:78:c6:33:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=1fb8c3a2-eef5-43c1-8a1d-31744ecc0fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:97:d8:fc:3a:c4:ac:e3:89:1b:18:7b:d4:
                    e8:52:73:74:d3:50:65:4a:59:a7:1f:23:21:d4:98:
                    d4:7c:bf:f5:1f:49:fa:51:a9:ec:86:9c:70:ac:4b:
                    3d:2e:83:a7:3d:5b:04:f0:6b:be:d3:f0:cc:47:4a:
                    f3:dd:80:b7:38:e7:f5:0c:0d:06:31:4c:93:28:6f:
                    3c:1e:a5:21:1c:11:f3:42:78:80:5a:2e:74:78:c8:
                    b8:2b:5c:0c:be:af:a8:6b:ef:f9:2b:76:55:90:d2:
                    62:1b:68:4e:5d:bc:17:12:9c:31:cc:68:67:f3:8e:
                    b5:1f:fd:75:77:6a:28:83:0f:1d:07:1d:8f:f5:be:
                    12:9c:38:b9:e1:14:51:13:2d:99:30:84:17:fb:da:
                    75:cd:e1:4b:05:e0:e4:76:75:d8:b0:1d:56:a9:41:
                    76:e5:f7:10:f0:b5:ec:89:48:06:a5:08:ff:84:53:
                    ad:73:7e:43:e3:29:35:4f:e6:b3:88:75:f3:af:5a:
                    a7:d5:8b:01:d9:e5:67:6b:5d:d5:8c:4c:51:f7:c3:
                    58:d7:b9:88:95:d2:39:64:2d:34:8b:30:d1:25:4e:
                    76:37:78:83:a8:95:b8:0f:a9:00:20:53:68:d0:50:
                    13:e5:82:28:30:a6:d9:18:c1:19:0d:71:62:eb:b4:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9C:A6:F7:CE:94:3F:1D:50:08:F2:81:2C:1A:68:8D:0F:C0:A5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/e9fa680d-54b9-376f-8fcc-f902a3be72a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:07:03:aa:88:07:4c:68:06:b5:ec:cc:4b:fb:65:cf:85:bd:
         19:cd:59:68:09:2a:be:8f:20:e9:3b:13:09:b3:c3:75:3d:50:
         ee:ea:e0:4b:c8:02:da:2c:72:fc:44:db:7b:bc:52:a8:65:e1:
         06:93:ce:12:b0:68:d8:45:bf:02:b6:9f:ed:cf:0f:e7:55:24:
         be:f4:a6:27:a4:90:fd:5f:ca:47:05:11:5e:14:6f:b5:a3:e9:
         f7:e3:7c:49:39:c4:67:e2:4c:b6:5a:bc:af:e4:e0:c5:3e:f6:
         29:dc:3f:f7:1a:a9:c1:d8:79:ae:43:b9:48:5a:29:f8:76:ce:
         d5:90:f5:a3:a4:23:00:96:80:29:66:f5:16:f1:fb:53:66:43:
         67:66:69:10:d6:ab:50:ed:d5:03:15:c8:4f:32:29:1a:a8:b4:
         33:90:8d:49:54:9f:a5:09:16:a0:61:ff:c7:38:d0:89:0c:c8:
         aa:be:8b:68:f5:af:8f:98:6c:7f:1c:ed:06:ac:0a:e6:4c:94:
         d5:c8:45:08:e6:51:67:5c:6e:cf:f2:8a:3e:a8:2f:19:33:d4:
         bd:b7:31:d7:be:83:32:13:f9:0c:b4:31:f8:87:d9:30:f7:bd:
         03:44:44:2b:ba:64:32:c6:a5:8a:3d:1d:51:52:00:bc:6c:ed:
         60:56:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:36:06 2026 by rpki-client