Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa
File:                     b0877303-3406-3332-9cef-2f93ba63c3c3.roa (raw, json)
Hash identifier:          juMZ/vGd/y6kw3P4GJ9/iAjQoCJf7XhhXQ796eL3wlw=
Subject key identifier:   E1:96:0D:C8:A7:78:02:2B:C8:31:7A:A8:6A:CD:27:D0:93:5A:27:72
Certificate issuer:       /CN=608a6439-1cee-431f-908b-dcfad7329c1d
Certificate serial:       010D0C9F4328584D5243581A2D9626B3618C4060
Authority key identifier: 0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396982
IP address blocks:        159.137.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:58:1a:2d:96:26:b3:61:8c:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608a6439-1cee-431f-908b-dcfad7329c1d
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=ae3f5a25-f96c-46bd-be0f-53e4c9e1f8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:50:28:79:79:28:cb:8d:73:a7:b6:68:d5:
                    d5:80:c6:93:76:1e:b8:10:3c:0b:ef:c9:8f:3e:f2:
                    9b:88:58:ad:3c:e5:75:ac:64:a4:97:d7:b1:2f:8f:
                    5b:2c:55:e1:a3:e9:6b:46:1d:69:e6:55:da:ed:b3:
                    45:09:bb:31:d5:25:46:7f:e8:30:19:74:ab:20:7d:
                    1c:a8:8c:24:d3:7e:c3:02:e6:66:b3:e0:34:b4:2c:
                    f8:c2:e0:3d:33:47:08:0a:a7:62:c1:85:cb:56:9c:
                    87:59:50:89:40:d1:5e:e6:f2:a1:2b:ee:41:49:38:
                    56:fc:55:50:21:e3:67:6e:40:26:be:7d:65:05:ab:
                    69:60:99:b9:d6:c9:41:0b:4c:8d:cb:ca:1e:cc:cd:
                    28:60:e6:ae:73:5f:74:ff:e9:db:05:14:b3:9a:d2:
                    f0:60:d8:44:92:76:06:58:47:d8:33:0f:23:f8:dd:
                    c5:90:6b:b2:14:de:bc:ff:85:3b:a4:de:27:72:44:
                    ff:d9:6e:b7:66:4f:e7:b1:f2:b8:53:87:07:77:77:
                    4c:98:11:da:fb:aa:c0:88:88:bc:1d:f0:79:59:4c:
                    a4:f4:ca:f0:4f:15:65:cc:db:53:f7:5e:1e:7b:d9:
                    2f:a6:8a:40:0b:91:27:ef:6d:5a:5f:17:4a:cd:48:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:96:0D:C8:A7:78:02:2B:C8:31:7A:A8:6A:CD:27:D0:93:5A:27:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/b0877303-3406-3332-9cef-2f93ba63c3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.crl

            X509v3 Authority Key Identifier:
                keyid:0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.137.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:dc:1c:30:2b:40:24:5d:3f:f3:70:aa:af:a4:79:e5:71:
         dd:53:97:75:95:da:25:27:aa:7a:17:a2:44:88:5a:d7:c0:19:
         c2:72:91:a2:67:82:07:12:bb:79:41:80:84:b1:2f:e0:db:9e:
         78:ec:3a:0a:b4:80:37:77:89:7c:5c:38:ec:8b:e3:c8:d5:b0:
         d8:47:2d:38:81:e0:c4:f2:d2:7c:a8:70:da:23:b9:ea:8c:a9:
         ac:b4:fa:88:12:d4:66:12:c3:0d:10:b1:fc:60:08:79:db:da:
         2e:56:7b:6c:42:08:7f:78:be:9a:6e:af:0c:9b:f0:b7:76:a4:
         cf:d3:74:e0:88:70:b4:0f:ad:b0:e1:ee:a0:54:78:04:c2:41:
         a9:c7:d7:06:b2:0c:db:a9:e2:31:94:f8:fa:58:ca:60:59:42:
         e8:ae:66:95:49:7a:ef:66:5f:da:26:3b:11:48:ac:45:5f:d2:
         9d:89:ce:8d:30:8d:68:25:05:e4:6b:3c:74:ab:37:51:71:76:
         55:74:c4:4e:27:ef:23:bd:89:fe:c8:2c:94:96:40:cc:03:f8:
         1f:d4:c3:e4:f9:c1:0d:07:7a:f6:30:00:d8:18:8d:3a:31:33:
         bc:d0:78:b5:0a:b4:8a:36:e2:26:2a:54:7a:82:89:51:8d:ac:
         8b:38:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 17:59:29 2026 by rpki-client