Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/cb579500-dc95-345f-b51f-f0f1a70b0021.roa
File:                     cb579500-dc95-345f-b51f-f0f1a70b0021.roa (raw, json)
Hash identifier:          yrS68Try7/iP2L/ATFe15o8elGUANP/gRDePivKB7Fk=
Subject key identifier:   58:76:9F:FE:79:AF:1B:1A:42:72:6F:35:A2:0D:48:58:73:51:1E:B3
Certificate issuer:       /CN=fb6e7f06-7b17-42b7-8725-7e607bbacf00
Certificate serial:       010D0C9F4328584F0829B1F976C4478494798EB0
Authority key identifier: B6:04:50:85:7C:43:8F:72:A5:AA:9D:0B:5E:B0:C9:11:81:A3:80:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/cb579500-dc95-345f-b51f-f0f1a70b0021.roa
Signing time:             Tue 01 Sep 2026 15:45:56 +0000
ROA not before:           Tue 01 Sep 2026 15:45:56 +0000
ROA not after:            Mon 30 Nov 2026 16:45:56 +0000
asID:                     219394
IP address blocks:        216.41.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/fb6e7f06-7b17-42b7-8725-7e607bbacf00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/fb6e7f06-7b17-42b7-8725-7e607bbacf00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:08:29:b1:f9:76:c4:47:84:94:79:8e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6e7f06-7b17-42b7-8725-7e607bbacf00
        Validity
            Not Before: Sep  1 15:45:56 2026 GMT
            Not After : Nov 30 16:45:56 2026 GMT
        Subject: CN=4b6b3988-317a-448d-bbf6-419c68db4d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:87:e9:48:f3:74:34:b0:6c:72:73:0f:f3:
                    3c:93:61:83:f1:58:8e:ae:33:9b:96:68:62:1c:b6:
                    83:97:b9:f0:ef:13:99:f6:b7:b8:32:80:1b:7f:1d:
                    1a:dc:e9:c8:3d:51:e1:03:30:71:d1:45:d5:b7:a5:
                    7b:40:49:03:ba:69:50:6a:6f:b5:75:aa:6e:8c:f3:
                    ca:cc:06:fd:0c:51:20:48:d9:89:df:8c:d5:1b:b4:
                    df:d6:7c:9f:67:c1:10:7c:43:05:9d:10:e1:5b:c7:
                    41:72:6d:4f:e2:73:68:89:e5:95:41:6e:5f:86:eb:
                    50:18:f3:6f:58:0f:aa:81:cb:4c:26:5e:3a:5b:59:
                    68:4a:7e:cf:c0:70:d0:d9:ba:2f:73:b8:21:16:69:
                    ee:5e:c8:4e:5c:b0:ed:f8:43:55:0a:54:94:e2:ef:
                    6f:08:ef:2a:a8:d0:13:8e:6c:9d:55:42:53:28:c2:
                    06:dc:5a:10:35:9b:d0:8c:a3:44:92:83:95:a1:b3:
                    ed:28:4d:f2:7c:9e:8c:88:66:60:86:69:82:af:e4:
                    8d:85:20:7b:9a:1e:53:00:42:84:38:6a:ce:8e:ec:
                    33:cf:37:e5:0a:f2:4a:b0:dc:7f:a9:ca:5f:48:0f:
                    c5:4e:e9:4e:00:23:61:8a:4f:30:9b:5e:4e:7e:d6:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:9F:FE:79:AF:1B:1A:42:72:6F:35:A2:0D:48:58:73:51:1E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/cb579500-dc95-345f-b51f-f0f1a70b0021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/fb6e7f06-7b17-42b7-8725-7e607bbacf00.crl

            X509v3 Authority Key Identifier:
                keyid:B6:04:50:85:7C:43:8F:72:A5:AA:9D:0B:5E:B0:C9:11:81:A3:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.41.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:60:80:fc:79:64:ac:8b:29:01:95:68:15:6f:a7:a4:8f:
         77:fe:cd:a9:b8:8f:e0:75:28:2c:78:4e:67:8c:80:f5:3f:df:
         14:84:bf:ad:59:59:13:57:2b:49:12:4b:4a:bf:59:4d:0e:62:
         ef:73:e0:da:d4:23:12:32:02:0c:23:ab:83:db:23:61:d5:7d:
         a0:51:be:5e:36:14:ba:49:94:71:19:9a:73:e5:01:6f:7b:8f:
         4a:9a:06:15:22:92:e0:e9:ca:80:99:42:61:0e:a2:5f:9c:6f:
         6d:65:d1:5c:5e:ef:09:5b:21:46:04:b8:83:ef:51:be:48:99:
         b9:64:02:84:27:8a:5d:9a:21:bb:a5:c4:81:ac:4f:08:26:bc:
         2f:76:c0:8a:1d:9b:aa:56:2f:db:9a:15:8c:ed:e3:c4:98:4d:
         e6:dc:5b:bd:64:9c:b2:d3:b5:c5:94:ce:dd:23:1f:a3:83:8d:
         4b:7d:6a:9a:a1:74:9e:aa:b7:6b:77:ec:ab:38:b3:d0:bb:5d:
         1b:ac:78:8c:48:70:11:7d:94:53:21:6d:f9:4c:16:c3:06:47:
         13:82:a8:63:40:74:84:34:ed:ba:5a:b8:60:07:58:32:fe:8b:
         cc:e8:30:97:af:b2:0a:2f:a4:2e:aa:f6:62:df:df:fc:50:ba:
         11:ec:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:47 2026 by rpki-client