Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa
File:                     c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa (raw, json)
Hash identifier:          Mbcp6u5phNWoLwi7m56ytCGoqAYjUEyOru8KlHGwxmw=
Subject key identifier:   79:E9:4B:C3:54:B0:2B:A3:7E:E3:21:AC:FC:1D:BB:5E:10:CC:CA:37
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584D143D80B98378F995B9632D20
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     26380
IP address blocks:        216.119.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:80:b9:83:78:f9:95:b9:63:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=15cfcc2d-49ac-459b-831f-9349b2ebe7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:69:80:33:06:8e:49:80:de:d3:bf:40:ee:
                    95:08:64:7d:93:96:70:20:ba:be:d7:ba:82:60:86:
                    8f:2a:7b:37:d3:9f:7d:04:4f:31:05:da:4a:ba:ea:
                    f3:37:6f:81:60:e2:d9:a6:9c:8b:91:b7:85:c0:26:
                    1d:33:94:34:d5:ad:12:e2:60:e2:df:3b:72:6f:72:
                    ed:8f:ac:64:7e:73:eb:21:e7:12:f4:f4:13:a5:6c:
                    db:28:41:0c:02:bd:ba:9b:ba:ff:a0:58:2e:03:6f:
                    1f:71:9c:86:3d:20:91:12:10:ff:5e:93:85:a8:9c:
                    1a:cb:be:7f:d9:5f:92:e6:da:93:58:92:a4:5b:fa:
                    58:6d:4c:ee:78:58:dd:71:04:2e:92:34:9a:82:cd:
                    81:a1:7d:25:89:d9:fc:93:3c:4a:1e:57:a3:5d:1e:
                    da:6f:42:58:7c:12:76:f1:51:5a:c5:8a:d9:c8:b5:
                    46:2f:f4:d2:2f:b4:ef:ef:8e:47:36:ee:fd:a4:57:
                    cd:dd:af:76:cc:17:e7:47:8a:e5:39:25:86:87:da:
                    fe:cd:d0:03:4e:2d:5e:59:3b:ad:be:cd:76:70:80:
                    66:59:80:93:10:1d:45:79:31:db:46:c1:43:37:34:
                    93:48:7e:e1:1c:d0:37:46:c5:d4:74:60:c0:bb:79:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:4B:C3:54:B0:2B:A3:7E:E3:21:AC:FC:1D:BB:5E:10:CC:CA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:77:f4:41:bb:db:97:f0:ff:86:d6:51:36:a5:2e:d7:78:6c:
         73:f1:a3:67:83:65:ab:92:f2:ae:cb:9b:f1:6c:97:42:e1:2e:
         89:bd:35:54:05:a2:a4:2a:b3:c2:ba:49:0c:7d:30:e7:f5:f6:
         ab:ee:f5:41:03:dd:f9:fb:e9:fa:c8:5f:f8:64:6f:ef:9a:0f:
         ab:55:c8:b7:1a:0a:fe:ac:3a:b3:c5:aa:22:dc:2e:31:c0:9e:
         3e:20:d5:2f:79:9c:82:e4:eb:17:85:06:66:d2:e8:0d:f9:2d:
         69:c7:c2:6a:b3:2f:ed:a7:78:43:2a:23:2c:b6:b9:1c:4e:cf:
         b6:bf:dc:13:68:bd:2c:9d:24:50:4d:52:16:32:ae:81:cf:eb:
         ed:b6:25:f0:af:c0:2d:37:1e:e6:d3:2e:2c:24:68:38:c1:c6:
         a7:dc:a9:2c:50:ed:87:09:35:58:0c:41:e1:67:17:9a:06:c5:
         b8:78:38:ee:09:4d:5e:b4:26:e8:19:ed:16:ca:39:fd:c8:c2:
         ad:cb:d3:19:f1:fe:78:c9:0b:85:31:59:f3:f3:44:df:28:1c:
         8c:35:b9:9d:82:71:d6:87:94:72:16:5c:67:80:28:91:04:5d:
         cf:6b:58:4d:3b:d2:38:2f:64:1a:09:d3:1a:91:66:2e:23:43:
         38:a8:23:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYC5g3j5lbljLSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RhZGRmMWYtYTc3NS00NGFhLWIzY2EtMzUyMGY3Mzk5
M2VkMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MTVjZmNjMmQtNDlhYy00NTliLTgzMWYtOTM0OWIyZWJlN2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRppgDMGjkmA3tO/QO6VCGR9k5ZwILq+17qC
YIaPKns30599BE8xBdpKuurzN2+BYOLZppyLkbeFwCYdM5Q01a0S4mDi3ztyb3Lt
j6xkfnPrIecS9PQTpWzbKEEMAr26m7r/oFguA28fcZyGPSCREhD/XpOFqJway75/
2V+S5tqTWJKkW/pYbUzueFjdcQQukjSags2BoX0lidn8kzxKHlejXR7ab0JYfBJ2
8VFaxYrZyLVGL/TSL7Tv745HNu79pFfN3a92zBfnR4rlOSWGh9r+zdADTi1eWTut
vs12cIBmWYCTEB1FeTHbRsFDNzSTSH7hHNA3RsXUdGDAu3nnywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnpS8NUsCujfuMhrPwdu14QzMo3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZGFk
ZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIwZjczOTkzZWQvYzhiZjhjNmItMzk4Mi0z
ODRkLTgzYmQtMzg5YjdhMGEzZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2RhZGRmMWYtYTc3NS00NGFhLWIz
Y2EtMzUyMGY3Mzk5M2VkLzdkYWRkZjFmLWE3NzUtNDRhYS1iM2NhLTM1MjBmNzM5
OTNlZC5jcmwwHwYDVR0jBBgwFoAUMlBImdDYIXkBI1DeL6I8Wlsa2ZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZGFkZGYxZi1hNzc1LTQ0YWEtYjNjYS0zNTIw
ZjczOTkzZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HfVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIh39EG725fw/4bWUTalLtd4bHPxo2eDZauS8q7Lm/Fsl0LhLom9NVQF
oqQqs8K6SQx9MOf19qvu9UED3fn76frIX/hkb++aD6tVyLcaCv6sOrPFqiLcLjHA
nj4g1S95nILk6xeFBmbS6A35LWnHwmqzL+2neEMqIyy2uRxOz7a/3BNovSydJFBN
UhYyroHP6+22JfCvwC03HubTLiwkaDjBxqfcqSxQ7YcJNVgMQeFnF5oGxbh4OO4J
TV60JugZ7RbKOf3Iwq3L0xnx/njJC4UxWfPzRN8oHIw1uZ2CcdaHlHIWXGeAKJEE
Xc9rWE070jgvZBoJ0xqRZi4jQzioI0w=
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:18:14 2026 by rpki-client