Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
File:                     3048f25b-01bb-3ce6-a347-f94feaca53ce.roa (raw, json)
Hash identifier:          p517KmKe65ep0j4im/YDF49G+LPJxUBqyWKAoei0N3o=
Subject key identifier:   16:57:F2:2C:74:6C:28:AA:1B:CF:77:5F:EE:A3:0E:8F:67:DF:1C:00
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584D19B4B96CC1CF55EA05E71E80
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     54885
IP address blocks:        192.102.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b9:6c:c1:cf:55:ea:05:e7:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=7a530c73-a8aa-4ee5-9599-5a4489f417c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:19:c5:ad:12:1f:0d:25:21:19:da:5c:ca:
                    c4:ed:1d:7d:af:77:3f:8c:38:79:06:45:22:e4:c0:
                    3f:93:2d:06:1c:51:58:b2:a2:90:7b:54:fa:54:9b:
                    bc:0c:6e:2e:e2:d7:6b:86:f1:c2:91:0b:1e:3c:97:
                    14:b9:20:7e:4f:70:b4:cb:d3:58:26:e7:c8:9b:63:
                    01:9c:b1:45:1a:3c:b1:94:fb:17:40:21:35:38:3d:
                    60:78:c6:a1:64:a6:af:c1:d2:9b:84:53:62:70:aa:
                    67:51:bd:ba:91:e6:75:2d:4e:83:00:55:5f:93:4f:
                    c0:35:41:7f:40:5a:b3:7b:31:20:14:95:62:29:c6:
                    52:df:4d:b6:ef:5a:a5:df:9a:8a:98:57:8f:be:46:
                    87:3f:0e:49:72:13:92:83:16:24:f5:fd:65:a2:00:
                    0d:15:c8:28:02:e4:46:e2:b1:62:cb:ca:e1:3f:3c:
                    28:90:b5:a8:85:17:45:19:0b:e0:86:89:84:8f:6b:
                    ff:e0:32:35:70:db:53:c4:41:ff:82:06:f7:64:ed:
                    38:86:a7:87:fe:16:de:6d:0a:bf:22:ee:a3:79:ad:
                    ad:54:b2:f5:ef:7b:f6:6c:10:f9:b7:9a:11:1a:6e:
                    67:7c:6c:39:84:f5:b0:bb:01:0c:91:be:08:8f:96:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:57:F2:2C:74:6C:28:AA:1B:CF:77:5F:EE:A3:0E:8F:67:DF:1C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:be:da:c6:4b:ad:73:9f:b5:7c:b3:65:dd:69:5f:9d:a2:95:
         1a:db:08:cb:00:58:0d:a7:09:1d:28:dc:de:f2:af:4e:66:6b:
         ff:94:65:b2:81:d9:09:79:d6:6f:90:04:e3:1c:43:15:eb:31:
         7b:85:9d:1c:1a:da:9d:2a:e2:29:39:8d:e5:1d:f5:21:af:b7:
         41:e8:7b:a6:2f:62:de:e9:80:49:8f:b4:b1:47:e2:55:5b:39:
         9f:ac:de:a9:b5:71:bf:e6:44:83:c8:23:aa:b1:f4:77:d0:4b:
         78:23:6f:bc:44:4b:ea:82:6d:aa:f9:62:0e:80:f9:40:17:24:
         f6:97:66:27:49:a8:e4:5b:d1:d2:4c:c1:8f:9a:58:a1:6f:80:
         6f:ee:81:6d:34:c0:12:cf:33:fa:8e:d1:65:d4:c2:99:d4:9f:
         2b:8a:53:37:08:fc:bc:56:2f:ba:d4:7b:21:6d:77:70:9b:37:
         5f:1a:3e:61:4c:56:7d:b5:92:13:ea:71:c1:dc:5a:07:0b:43:
         7b:fe:0f:37:ca:72:08:ce:52:de:ec:b8:0b:7d:cf:d3:97:76:
         55:65:7e:fc:cf:3a:f2:46:43:48:d9:2b:ab:8e:8f:8f:07:8a:
         2e:6c:0e:f2:54:10:b3:16:b3:15:b4:94:27:fe:d0:a5:cd:72:
         9e:b1:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:32 2026 by rpki-client