Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
File:                     1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json)
Hash identifier:          BTlKzyFBkauXL/13lXolwCw7VUc/DzJJdoKT1x5lJoE=
Subject key identifier:   9F:6C:77:F4:32:C5:61:96:18:C7:39:1C:3F:77:0B:BA:A9:9B:58:1D
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E059B423B625C1D9B3C7A2D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     174
IP address blocks:        216.131.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:42:3b:62:5c:1d:9b:3c:7a:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=99fcdfd7-bef8-4dfb-8ece-e704aea9af64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:74:8e:9b:37:a9:cc:83:7d:08:11:09:ed:
                    76:b8:37:de:6e:3a:88:69:4a:b2:87:88:1d:28:10:
                    a7:fd:02:73:68:33:7e:83:d2:36:a5:e9:6e:49:58:
                    d9:04:c3:00:dd:f3:e4:a8:88:4b:51:43:7d:85:f5:
                    ff:52:70:76:fe:c3:c4:40:31:72:87:88:d2:2f:b4:
                    97:80:ad:e5:23:bf:e3:cc:c0:06:d1:15:ab:cf:21:
                    48:18:52:3a:e5:2e:a4:12:6f:fa:3a:3c:45:77:a7:
                    cb:60:79:1a:42:d8:97:f0:fc:42:ca:7d:43:32:99:
                    cd:74:33:89:00:cf:91:fd:68:c6:31:df:22:48:34:
                    80:7d:1b:ee:49:4d:49:0f:d6:4a:0b:bd:a7:22:45:
                    c6:15:74:7f:f1:2f:29:cf:ec:07:98:fe:e6:f2:bb:
                    b5:89:61:48:6a:f8:92:06:69:cd:92:42:84:87:48:
                    e0:12:23:bf:98:4e:16:70:26:05:ef:00:70:65:7f:
                    4a:1f:15:e4:81:1d:1d:9c:93:e8:f4:64:1a:35:2f:
                    f3:c6:fa:76:83:c3:cf:65:2b:1f:f2:83:d4:47:d7:
                    67:a3:26:95:b7:e8:20:fd:8d:47:54:93:5a:8a:07:
                    db:ad:9e:11:02:a7:ed:03:d6:e9:e1:61:4b:32:3a:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:77:F4:32:C5:61:96:18:C7:39:1C:3F:77:0B:BA:A9:9B:58:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:19:49:26:2b:ef:9d:de:0a:8e:a7:8b:83:b6:51:e2:51:
         74:fe:da:92:61:48:4a:5b:ab:84:4b:2e:19:17:1b:61:7f:a8:
         3a:3c:c6:80:25:a5:81:c3:49:19:4f:95:1e:c8:e9:02:30:58:
         f3:d2:64:57:be:38:8a:6e:c1:32:ba:e1:34:f5:4b:df:bf:4a:
         5a:e2:c1:fc:69:d3:72:12:71:8b:b2:10:9d:be:ff:a3:31:87:
         ae:d7:73:b5:07:dc:a8:b7:4e:07:bf:07:82:81:b3:4a:f0:e1:
         e6:db:36:54:42:b6:68:80:b7:4f:28:7d:3a:cb:d7:ec:64:89:
         f4:83:a3:ff:7f:82:42:d1:f7:a8:f0:fd:31:ac:58:82:9b:cc:
         34:e6:3e:b9:7e:a6:66:6f:20:e6:df:da:ea:54:c9:76:af:5f:
         b3:f4:cd:84:0c:6b:c9:4b:b6:3f:4a:6b:4a:26:d6:8d:fe:1a:
         91:f8:7a:db:68:c1:52:56:25:62:29:eb:4f:36:61:ca:4b:43:
         86:be:92:a2:9d:f3:d8:96:e5:ce:f6:63:f8:05:2d:cd:da:28:
         e9:f2:ae:77:29:7d:38:43:c3:1d:f0:87:2b:c7:c9:36:25:69:
         d7:af:d7:b1:be:3e:b0:d5:4b:e0:b2:b7:64:91:b0:85:48:9a:
         bd:f9:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:39:49 2026 by rpki-client