Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/15af7687-6fff-34bb-9647-e04b452e847c.roa
File:                     15af7687-6fff-34bb-9647-e04b452e847c.roa (raw, json)
Hash identifier:          NEnfIiLgZ0llkOiwOrWdY9njSumVcwkBNKEx4RiYllY=
Subject key identifier:   B0:24:CD:B6:97:E3:B5:72:66:5A:E9:1D:7B:99:57:95:20:C6:39:5A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D237A69B5E050B87049B22280
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/15af7687-6fff-34bb-9647-e04b452e847c.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        204.227.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:69:b5:e0:50:b8:70:49:b2:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=6e089ebe-fc22-42f2-a89a-957a5da4d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:43:c2:92:8b:17:ea:bb:d6:ed:3b:32:98:
                    e7:45:4b:87:dc:56:a9:bb:36:8c:73:34:c3:66:ca:
                    6c:dd:fb:1f:e9:3c:83:ec:e7:11:6b:f8:16:7c:be:
                    18:c0:40:89:f7:c1:ac:82:aa:cf:7f:c7:03:03:99:
                    15:54:83:34:05:3e:33:56:6c:d9:d7:c0:f5:b5:25:
                    55:e6:03:80:9c:33:25:5a:4a:79:db:ee:de:2d:46:
                    f5:6d:e5:1d:da:f4:47:06:ff:dc:60:ca:60:fa:5e:
                    5e:db:a1:e7:8a:f6:cc:ae:7c:34:bd:53:93:35:ad:
                    09:25:3c:fa:7d:a7:c3:c0:d9:35:37:83:11:41:5c:
                    2c:23:06:c4:b6:aa:9f:09:53:28:9f:f7:45:e0:9d:
                    14:5b:66:d4:7a:d5:aa:20:d9:36:1a:9e:bf:95:e6:
                    cc:dc:91:09:06:a4:c4:7c:0f:d8:15:d1:cf:35:5f:
                    57:32:0b:7b:67:37:77:73:4f:c9:33:90:98:e0:ab:
                    79:77:5b:84:ec:24:fb:4c:61:ec:b1:2a:07:e1:aa:
                    ee:1f:05:2f:97:5c:52:5e:4a:7d:69:f0:59:3b:f4:
                    a3:1b:d8:a9:04:21:39:b8:44:2a:65:54:a8:d4:2d:
                    f2:67:02:f4:f9:f8:2f:e9:41:20:a1:66:c9:20:cd:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:CD:B6:97:E3:B5:72:66:5A:E9:1D:7B:99:57:95:20:C6:39:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/15af7687-6fff-34bb-9647-e04b452e847c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:f1:f5:07:29:61:3f:90:e9:c7:28:71:b9:dd:e2:c2:7c:
         08:aa:9e:67:4d:94:a7:d1:44:34:69:6d:66:b7:e2:a4:43:c3:
         ac:bf:50:5f:b4:b7:db:1b:1b:ec:13:fa:7b:b5:2d:9f:ee:fb:
         e6:fa:c2:7f:0f:c5:8f:1d:35:fe:89:aa:0c:85:8a:23:28:cb:
         b9:9b:fe:3e:86:bd:c7:75:26:df:2c:7d:95:60:5c:c2:93:42:
         fc:26:1b:6f:8b:43:01:4a:df:19:e0:f2:fd:3c:f0:ac:5d:a2:
         02:06:f3:22:d8:f7:5d:f3:ea:f5:3d:13:50:15:2c:bb:be:df:
         14:23:3a:00:6d:ba:0e:6d:08:3a:08:1d:10:60:7a:a3:ce:28:
         e8:28:cb:9b:ff:b6:52:2d:55:e9:cb:b4:ab:a3:4a:0e:ab:58:
         ff:8e:12:3f:37:af:ca:bb:52:ff:7e:38:6d:e4:e6:5f:bd:0c:
         17:cc:36:17:69:5a:de:fc:07:3f:8a:1e:d0:df:22:87:20:0f:
         22:eb:1f:24:0a:f0:19:74:dc:d1:71:87:70:05:2d:e9:16:c9:
         c6:95:69:23:6c:ff:7b:62:cd:54:be:1b:cf:74:5a:57:d2:fb:
         8f:e4:86:0f:fa:cc:dd:70:e6:e4:82:b6:b8:4a:3f:84:53:87:
         23:44:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:04:32 2026 by rpki-client