Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa
File:                     4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa (raw, json)
Hash identifier:          jc7bIH1JHsq3Yhb8fwEOp72z4dDafua3Jano97NRulo=
Subject key identifier:   AB:0C:57:EC:09:14:52:A1:07:45:20:0F:95:71:34:D5:8D:79:6D:0E
Certificate issuer:       /CN=24b82191-9eab-4780-afd2-8d7640123b59
Certificate serial:       010D0C9F4328584D19B4BAD0E7BD17DBE75E0E00
Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     63303
IP address blocks:        172.83.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ba:d0:e7:bd:17:db:e7:5e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=200fa0fa-fff5-4337-8256-e4095aa1709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:da:89:ac:fa:5d:1a:01:a9:ba:46:ab:d0:
                    93:e1:57:e7:68:04:98:0e:bf:bf:0d:5b:b9:c7:e3:
                    46:d3:cb:06:bf:87:99:f2:80:30:b3:83:a7:dd:07:
                    fa:17:82:fe:f7:46:83:40:2d:82:82:b9:51:c9:65:
                    77:6f:16:17:02:da:87:cb:b0:4d:f3:03:38:59:63:
                    7b:5a:10:ee:da:75:b8:c2:99:95:f8:a8:e3:1a:6a:
                    57:3c:14:06:67:5f:e3:1f:ab:ee:3f:94:76:52:af:
                    d7:0b:71:1e:0c:a6:ec:46:2e:ed:42:18:c7:be:27:
                    ca:16:71:d3:ae:4b:31:46:a3:81:16:d8:65:66:eb:
                    1a:93:3b:c5:7c:16:7c:88:b8:7f:04:ed:a9:18:a5:
                    e3:8d:94:38:1f:2c:3d:09:3e:8f:23:9e:2b:86:7a:
                    d2:3a:3e:85:0d:65:c3:1a:52:b9:db:3a:9e:e0:b5:
                    2d:b5:0f:b9:68:19:a6:c7:48:02:2b:c3:ad:63:56:
                    a4:f7:41:94:4d:79:5c:19:d2:9e:b5:2c:20:f7:fd:
                    71:d1:6c:49:94:9d:20:6e:a2:7e:6d:1c:1d:17:07:
                    70:35:80:8e:3d:4f:95:4a:54:c9:9c:ad:80:44:da:
                    91:aa:55:ba:2d:c2:37:1e:00:5e:3a:7c:d0:e2:9d:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:57:EC:09:14:52:A1:07:45:20:0F:95:71:34:D5:8D:79:6D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:8c:b6:3f:72:14:91:03:e0:32:dd:37:db:8e:cc:63:8a:
         a1:61:2c:49:73:05:db:3f:77:3e:62:fa:aa:e5:ea:5e:f4:71:
         e8:01:b7:cf:02:45:ac:d7:7b:4f:7a:ec:c3:50:f8:c2:b4:db:
         47:1e:f3:d0:14:67:51:4c:94:b8:e0:f5:d2:a5:29:d2:c2:8b:
         4e:cd:0b:e6:dc:34:71:35:a0:8d:e4:42:f4:47:e4:ae:5c:86:
         1d:8d:3c:ef:04:60:03:3b:55:68:e8:2d:b6:20:bf:f4:e6:b1:
         28:81:9b:1d:8f:aa:5b:d7:3e:a0:69:b6:16:00:70:88:29:b6:
         5d:6d:ad:6a:ea:a1:03:b0:1b:a1:1a:ca:33:91:ea:29:b5:00:
         59:3d:15:ea:b3:ae:29:53:d1:62:d5:d5:d0:c4:cd:05:30:c3:
         ce:16:d7:3b:ab:b0:86:7a:22:21:dc:d4:7d:18:6c:18:40:c6:
         d2:bb:f8:68:58:13:5a:de:8e:f5:db:a7:5b:48:03:12:91:a9:
         6a:76:2a:86:fc:9f:01:88:62:da:0e:45:75:32:e5:57:16:ba:
         e5:ad:89:93:b3:2d:15:b6:3f:93:bd:25:76:7c:f0:54:db:8f:
         fa:25:fb:31:a3:42:81:cc:30:2a:77:ee:50:2c:1c:06:1b:02:
         ad:71:18:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:14 2026 by rpki-client