Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
File:                     b8b1380b-8b04-35d1-aadf-93dea95122c5.roa (raw, json)
Hash identifier:          bLstdXNIk8CKIXiXUrUt0uy0pDbwttetwxweF8EBBZg=
Subject key identifier:   5A:0E:90:ED:EE:7E:3E:DE:5B:CC:72:47:66:0C:4D:CB:38:9B:75:A2
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584D15A265F604B4C5FCE8081F78
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     11090
IP address blocks:        64.127.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:65:f6:04:b4:c5:fc:e8:08:1f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=a6909f3a-275b-4742-ad34-006a9e905c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:72:d6:4a:35:cb:30:7b:78:9a:c1:68:df:
                    56:05:24:66:f9:0c:0c:b1:63:f7:a6:29:f6:62:c6:
                    fb:91:d9:2f:f9:88:46:ab:2f:da:ee:cf:3d:92:cd:
                    45:da:b1:1a:d7:a1:99:69:fb:92:b9:65:28:f6:0e:
                    cc:b4:41:7e:81:25:a9:3f:d0:45:03:4d:bd:ae:a8:
                    66:39:a7:9c:2a:d4:fa:53:ef:93:1d:b5:27:3e:ec:
                    0c:38:1a:1c:55:bf:3f:0d:08:6b:e5:b6:af:e8:96:
                    11:e0:12:ff:99:e7:36:d7:10:d9:45:a9:34:61:f1:
                    74:f3:27:99:ea:fa:0c:57:06:06:c2:bf:39:23:36:
                    ae:c5:0a:a3:c8:0a:48:4f:71:df:54:1f:07:ba:d8:
                    6c:a2:f9:11:0a:db:57:06:01:88:2d:7a:4b:4b:b2:
                    61:c4:cd:69:1a:35:97:94:04:be:dd:eb:14:0a:da:
                    6d:52:b2:de:87:f9:74:7b:84:5f:e4:28:16:25:3a:
                    04:00:4d:3f:e1:cd:0f:de:4b:55:02:ab:89:7d:91:
                    0e:5a:24:8b:12:3a:0d:23:e4:56:fc:7d:45:61:37:
                    f2:c2:e7:bb:65:23:01:44:37:98:41:58:a2:9b:45:
                    6c:fb:30:0d:ea:d6:b1:0f:3e:53:d4:f0:9c:2c:fa:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:90:ED:EE:7E:3E:DE:5B:CC:72:47:66:0C:4D:CB:38:9B:75:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:34:54:74:d3:ab:4c:f5:f3:48:c0:84:5e:63:02:48:c7:88:
         a4:3a:06:32:21:a1:19:3e:5b:4d:a1:78:20:de:06:92:5f:02:
         e0:c6:aa:f3:2b:79:0b:69:23:f7:2a:15:7c:a5:00:f1:de:d3:
         9d:db:9c:a0:4f:fd:74:9b:99:81:4b:98:de:92:e4:a9:54:68:
         23:7e:54:4c:b1:84:5c:2a:44:c7:e7:30:9f:e8:0e:b1:d5:a5:
         54:6c:1f:83:03:0a:e2:37:17:3d:30:36:bf:09:28:a0:43:a2:
         ca:0f:d8:7b:4c:41:2d:fe:3c:6e:48:91:63:9d:0b:42:4d:1a:
         0a:b3:44:da:f8:23:89:29:f5:c9:1e:47:0c:de:90:9b:56:da:
         8f:dd:4f:dc:c7:64:05:79:ab:b1:46:31:3b:0c:2c:50:cf:de:
         b7:5c:24:7e:e4:28:fe:c5:5d:54:6e:b4:8d:46:3f:11:97:f0:
         cc:bb:6d:b1:dc:1c:37:1a:0e:62:d3:8e:11:5d:09:ce:4d:d2:
         66:1a:fb:51:1d:2e:9a:54:1d:c1:d3:e0:f6:93:d1:22:47:cd:
         f1:14:27:92:f9:2c:2b:75:f4:17:a2:76:14:a3:0c:27:76:88:
         24:00:03:02:f3:02:54:99:9e:f1:80:f5:d2:2f:94:19:4c:be:
         93:5f:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:12 2026 by rpki-client