Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
File:                     f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa (raw, json)
Hash identifier:          AzTSlNh3RJUxKkgVfLySsWciYwrgghOJbCLuqVA8iX4=
Subject key identifier:   F0:03:C2:98:9D:4B:4C:FD:7A:EF:8D:E5:E9:65:5E:17:D5:81:1F:87
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584D5E1A4B34D668C0EFE0095900
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        207.45.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4b:34:d6:68:c0:ef:e0:09:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=75a88d66-19f0-4359-9b7e-cbed4c9aea6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:78:d6:d8:e6:09:ea:38:85:81:7f:a7:2d:
                    6b:08:de:a2:45:bf:29:2b:29:f2:7d:db:20:5c:75:
                    11:99:99:fe:b2:bd:46:61:14:cb:2d:c8:5d:a2:0b:
                    ab:87:65:d8:75:98:4b:e1:60:6e:58:2a:3a:dd:d8:
                    f8:97:93:b9:9b:cb:e2:59:62:36:ef:ee:8a:4e:c2:
                    4e:ac:8e:bb:70:8f:3c:1b:36:3d:6c:34:39:8c:73:
                    5a:5d:97:67:c8:b7:45:eb:8e:b6:85:8d:41:88:ea:
                    80:c4:1f:94:50:39:94:af:a7:1a:ad:ca:66:31:65:
                    8c:81:18:d9:86:e3:8a:56:7c:42:6f:ce:03:68:e6:
                    ff:79:46:b9:78:e1:8b:3f:f5:52:89:05:07:de:bc:
                    5a:e6:30:78:16:02:e2:80:44:79:f9:81:60:60:ac:
                    c9:1d:9b:4f:96:7a:1f:26:bc:68:2a:14:fe:2f:ab:
                    6e:6c:5a:6f:eb:29:34:50:5b:80:6c:e9:5c:33:b8:
                    a9:94:4a:c2:e3:c7:7b:e7:61:b4:7a:70:6a:7d:f8:
                    7e:ed:61:21:92:9c:3a:b6:31:8a:c0:34:a8:57:84:
                    77:3f:93:c8:41:3d:a9:68:59:f9:1f:fa:9e:14:8f:
                    a6:6d:33:ac:47:92:0c:09:54:c6:1f:1b:48:02:30:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:03:C2:98:9D:4B:4C:FD:7A:EF:8D:E5:E9:65:5E:17:D5:81:1F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:de:84:92:7a:3a:58:7e:1d:09:17:ef:a3:45:0b:b9:e0:87:
         7f:e8:db:79:c4:16:3c:77:14:46:3b:5a:f9:27:06:0e:d4:44:
         b8:9a:2e:b9:08:d3:85:20:d1:42:e3:91:d4:ed:44:e9:ae:01:
         e2:2d:98:37:ee:61:b1:ef:80:2a:58:1b:f7:32:a6:39:d9:14:
         aa:2b:02:5c:5e:83:bb:e1:83:76:f1:33:4c:9f:b6:17:d5:e4:
         aa:cc:03:f6:8f:bd:34:6e:99:cd:5b:3d:c6:36:1e:99:b4:86:
         46:f8:f0:4b:09:2e:04:2d:d8:41:fa:37:79:d9:a2:e7:5f:56:
         f6:39:bb:16:b4:26:fc:a3:99:6d:e8:18:84:03:8f:73:e6:d2:
         5b:24:ca:b7:9c:b2:b4:fc:ca:93:70:85:2f:02:3f:f5:94:58:
         5e:ab:13:87:8e:77:8a:43:d1:8a:27:ca:69:32:d4:ab:6a:2e:
         d9:8f:91:a2:0f:e4:7a:ba:8c:61:22:2d:9b:15:6e:90:5a:08:
         5e:97:94:52:d1:53:fe:00:d0:a0:c3:b0:c2:64:bd:b3:84:28:
         b7:e0:99:a6:e7:63:c4:d5:07:2a:6c:37:61:ce:29:c5:69:5d:
         f0:a7:2c:c5:32:d6:24:93:14:aa:5f:d6:b1:07:cb:7d:66:55:
         18:f1:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:31:00 2026 by rpki-client