Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83ea7a1-9172-3ca1-a2d2-54630e4069e0.roa
File:                     c83ea7a1-9172-3ca1-a2d2-54630e4069e0.roa (raw, json)
Hash identifier:          zNleC5nF30f8Q5/tbNgzprxhT6Dpa76Svck62coPmVY=
Subject key identifier:   DC:C8:7E:40:0D:EF:7E:30:E1:B6:94:2B:D4:DF:61:64:93:5F:68:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D117270EE08503C0C4FA4F2A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83ea7a1-9172-3ca1-a2d2-54630e4069e0.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        76.159.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:70:ee:08:50:3c:0c:4f:a4:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=284daf09-4820-4244-babf-d80b36c920e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:81:8e:31:3c:0d:5a:fa:95:51:c3:8d:ec:
                    e9:fc:85:07:9e:50:9e:b9:00:5a:a1:78:3b:91:9e:
                    f1:5b:47:cb:ab:b2:53:47:46:bc:95:74:a6:e7:8e:
                    6e:45:af:86:e7:3c:99:08:72:e0:a5:b2:c9:89:de:
                    09:2d:8c:f3:af:22:e5:51:b2:90:01:5b:36:2d:18:
                    5a:11:d2:f2:39:22:48:71:53:0b:a4:95:66:fe:0f:
                    12:01:ea:c4:d1:86:55:ca:f7:f2:80:cd:1f:86:9b:
                    ce:27:e7:97:77:28:83:32:93:b4:1a:79:a7:03:5a:
                    12:e0:b7:f6:e2:2a:d9:88:d9:cf:97:d6:14:38:cc:
                    53:8e:31:10:60:c4:c3:d3:87:8f:07:fb:31:7f:1c:
                    9d:35:c6:69:bf:6f:d9:7c:f0:4d:49:c1:61:66:dd:
                    3b:e7:ae:cf:e0:44:98:90:b6:27:31:71:63:e8:f3:
                    4d:5a:54:2b:62:e0:42:04:7d:08:37:e3:67:43:49:
                    45:70:dd:64:71:80:37:79:54:e8:d0:28:99:85:32:
                    aa:95:e9:11:89:a3:0e:d8:b4:22:b4:f4:83:f7:9f:
                    16:52:ba:5e:1e:2a:85:11:d4:17:43:64:70:fb:72:
                    ed:da:d7:a1:14:b4:44:5e:d9:09:43:c8:79:79:c5:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:7E:40:0D:EF:7E:30:E1:B6:94:2B:D4:DF:61:64:93:5F:68:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83ea7a1-9172-3ca1-a2d2-54630e4069e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.159.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:e3:9b:59:eb:e5:40:ad:5b:df:b9:40:45:ed:e4:b1:a3:
         59:5d:79:2b:ba:14:77:93:e3:06:7d:f4:fd:ed:18:95:dc:65:
         31:db:d0:92:2e:c4:1f:a0:6b:ec:9c:f3:94:8f:38:eb:7e:8a:
         cf:fc:4f:ea:05:89:4a:55:9b:da:e6:05:96:95:de:11:f0:a6:
         e8:7c:3b:32:99:ad:13:a1:cd:6f:10:81:7b:be:52:4f:30:fa:
         a8:8d:ac:88:6b:59:08:d4:32:a1:27:4d:25:8a:38:34:a4:ba:
         4d:48:4b:f2:01:78:0b:83:3c:0a:9e:14:54:f5:15:53:15:81:
         b4:b7:36:a7:d3:22:48:b1:ea:f7:c9:da:8b:43:4c:93:c2:50:
         bd:a1:69:35:2c:4f:e9:62:6e:96:04:e2:17:55:0c:c3:d0:97:
         8a:6f:d3:e0:88:3f:71:e1:bb:39:fe:6d:68:17:9e:f2:ea:3b:
         8f:ba:1a:ee:35:ae:eb:97:97:1f:34:c0:1f:9a:52:5d:93:59:
         e4:a4:2f:09:81:00:d3:3f:a7:f3:43:12:fb:66:63:82:55:79:
         02:88:db:25:07:44:f0:48:1e:47:cd:47:68:60:e6:69:23:d7:
         0e:48:8c:c2:66:ff:8b:13:2c:b6:04:dd:f9:3b:fa:6c:2b:91:
         79:f3:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:59:07 2026 by rpki-client