Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/d0b0bf3c-7cf9-3ad8-ad60-6c6eee416e83.roa
File:                     d0b0bf3c-7cf9-3ad8-ad60-6c6eee416e83.roa (raw, json)
Hash identifier:          SxfGjbWpyIqC75dJUN/6VbsGhEQk9h/8sp6ldA2QDVI=
Subject key identifier:   9D:7E:3B:B3:47:28:7A:E8:2E:79:61:B0:04:FC:75:9D:ED:6E:48:CA
Certificate issuer:       /CN=588408ab-7c90-4aa1-8bc3-00b989e7f082
Certificate serial:       010D0C9F4328584D5234EAFCEA7FDF345E5F1180
Authority key identifier: 29:8B:CB:C3:FC:85:78:9C:25:28:65:1A:5E:B3:D0:7E:F4:24:89:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/d0b0bf3c-7cf9-3ad8-ad60-6c6eee416e83.roa
Signing time:             Sat 28 Mar 2026 18:44:29 +0000
ROA not before:           Sat 28 Mar 2026 18:44:29 +0000
ROA not after:            Wed 20 May 2026 17:27:54 +0000
asID:                     14618
IP address blocks:        169.143.7.0/24 maxlen: 24
                          169.143.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:ea:fc:ea:7f:df:34:5e:5f:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588408ab-7c90-4aa1-8bc3-00b989e7f082
        Validity
            Not Before: Mar 28 18:44:29 2026 GMT
            Not After : May 20 17:27:54 2026 GMT
        Subject: CN=93b50717-25ce-477d-8faf-371f856afef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:e9:21:b5:d7:b9:1d:19:43:7f:9a:b7:5f:
                    08:78:2a:94:b2:61:36:4f:c4:c4:20:66:cf:15:7e:
                    db:73:c8:f8:24:9f:2a:17:dd:e5:d9:18:8e:bf:01:
                    5f:9f:3a:d5:91:f4:f5:1f:ac:82:fa:b4:4a:a0:98:
                    1c:62:62:af:26:80:02:e3:08:9c:ba:ff:8e:0f:e3:
                    24:5f:87:64:7f:3e:c7:28:58:41:1d:6b:9d:39:71:
                    91:e7:1a:fe:03:8c:f2:22:7e:f4:e8:f8:ca:aa:3d:
                    d2:cf:45:4e:a5:e9:72:d8:78:47:54:5c:32:85:97:
                    f1:a0:e2:f9:47:63:e7:ac:47:0d:78:9b:52:f3:8c:
                    d6:1d:e2:9c:22:17:07:e0:8e:fe:ab:0f:b4:cf:b3:
                    23:48:99:1a:24:83:30:21:90:30:de:68:1e:ca:a7:
                    96:0d:27:5b:e5:55:3c:7e:b8:fe:99:a0:ca:28:de:
                    33:89:d6:93:17:aa:b5:f1:c6:d7:84:63:4a:c8:08:
                    af:91:d5:54:1c:c0:dd:2b:21:6e:c5:29:ef:de:61:
                    94:2a:4b:1a:d7:4d:fc:5b:57:ed:d8:a2:03:30:0f:
                    7c:73:0e:00:0c:4e:09:65:4f:1d:e6:4a:f7:7c:c2:
                    75:6d:d7:97:3d:75:ee:de:39:48:ec:0b:76:31:08:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7E:3B:B3:47:28:7A:E8:2E:79:61:B0:04:FC:75:9D:ED:6E:48:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/d0b0bf3c-7cf9-3ad8-ad60-6c6eee416e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.crl

            X509v3 Authority Key Identifier:
                keyid:29:8B:CB:C3:FC:85:78:9C:25:28:65:1A:5E:B3:D0:7E:F4:24:89:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.143.7.0/24
                  169.143.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7c:db:74:10:6a:71:2a:77:80:06:4d:e9:b5:17:7c:23:3c:
         d0:d0:04:7a:27:ee:9b:19:b2:1f:ac:06:bf:36:26:4a:7b:27:
         4d:42:09:90:12:9e:f1:0b:ae:c9:ff:df:41:7a:82:4b:c6:89:
         dc:f3:d6:c5:b6:68:97:58:d7:80:da:7f:5c:98:ed:c2:a6:13:
         a8:e5:6f:2d:99:82:66:b4:05:54:57:4d:9c:11:f0:ce:ec:14:
         17:d5:98:c5:c4:60:1f:7a:6b:77:b8:3b:6c:8d:c8:49:32:5c:
         5b:de:17:d6:3d:d5:cf:78:d8:93:51:3d:38:f9:4e:81:2f:f8:
         60:cd:40:e6:93:0a:34:22:7b:bf:76:1b:84:54:38:97:08:43:
         6c:a2:aa:d6:30:33:bf:fb:58:af:70:f3:f7:e1:7a:6f:28:e4:
         66:0f:d9:70:5e:f0:a3:fa:9c:e4:d0:de:3b:44:01:66:b7:c4:
         5e:9d:fd:a4:0d:ed:11:14:ec:34:ee:2d:82:a4:85:53:57:18:
         68:73:e6:5d:95:15:05:aa:75:b0:44:6f:31:2f:2f:3b:d4:0f:
         c1:ba:87:69:b8:79:a8:d3:5b:48:3b:a9:7f:9f:b7:12:21:c5:
         05:e4:13:75:b2:44:1d:8e:86:a4:45:e0:e7:38:99:1a:9b:ea:
         82:b4:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:34:16 2026 by rpki-client