Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/41216f92-f834-3c9d-aa07-f3fdf7d8ef48.roa
File:                     41216f92-f834-3c9d-aa07-f3fdf7d8ef48.roa (raw, json)
Hash identifier:          Q7hk1J23lXqmFGuwzoZmVf60rPhrl7qUP4ZQp71jb5U=
Subject key identifier:   23:47:C6:71:70:3E:A7:40:5E:BB:1E:B2:C3:84:B3:4F:04:C8:74:45
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584D19B4DE57BE32BBDA99A21A00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/41216f92-f834-3c9d-aa07-f3fdf7d8ef48.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        152.39.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:de:57:be:32:bb:da:99:a2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=dafd8526-3af7-4683-b18e-133d0fbb49c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:ad:b6:86:59:4f:50:c2:ef:cd:e6:c2:87:
                    df:d1:0d:69:78:f0:c7:56:2b:61:94:bf:2d:17:c7:
                    75:3e:84:7f:27:9a:4d:9e:8a:22:35:ed:84:8a:32:
                    6b:c2:c4:29:a2:22:50:3e:fc:d4:fc:15:42:7a:8e:
                    7c:07:92:88:7d:5e:e2:20:fc:74:34:5b:74:20:94:
                    d7:83:81:c4:b6:f2:40:9b:d3:7a:d6:ae:f7:79:c8:
                    36:38:27:6e:cc:1c:40:44:b8:90:fd:6a:0a:72:cc:
                    af:d7:80:b8:52:84:e6:2f:c5:39:28:f9:80:a9:6d:
                    67:71:1c:11:3c:61:fb:c2:62:ca:1a:1c:f0:74:37:
                    96:b3:bc:f3:df:77:b5:3e:9b:97:b9:20:ff:e5:51:
                    9e:44:37:78:90:8c:79:9d:4e:97:6e:fa:67:80:db:
                    2a:a2:31:07:81:77:5f:8e:49:83:ef:57:ab:73:e5:
                    71:12:ff:cb:49:a2:be:d0:e6:fa:3d:0c:01:96:a4:
                    63:35:06:95:c0:8c:67:5d:e4:33:98:1e:88:10:cf:
                    ab:ad:32:2b:88:35:7b:3c:73:3d:52:81:86:87:06:
                    48:85:04:a4:c7:98:69:0a:f4:21:20:67:06:15:12:
                    82:7f:23:2f:7a:f5:8a:7e:bd:bc:6d:cc:bb:18:c9:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:C6:71:70:3E:A7:40:5E:BB:1E:B2:C3:84:B3:4F:04:C8:74:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/41216f92-f834-3c9d-aa07-f3fdf7d8ef48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.39.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:68:0d:a5:18:11:f5:87:1c:1c:3b:5b:67:29:36:a4:e7:65:
         8a:79:d7:8b:46:f1:c1:66:78:e6:91:9b:8f:54:3c:72:0b:4e:
         d1:f5:2c:e8:b3:72:d2:28:71:55:85:83:4f:05:04:cc:bd:60:
         fb:7d:4f:a8:40:f7:dc:af:a7:02:1b:0e:1a:af:04:a0:f7:17:
         25:f8:a3:40:c3:1a:ac:68:e6:e8:10:62:fa:92:41:17:65:ef:
         b9:d1:fb:87:b7:7f:fd:58:a4:0c:d9:ef:a3:22:00:89:78:4a:
         ca:77:e7:ab:0b:61:62:91:7c:96:db:99:19:76:e4:79:26:7e:
         9a:1a:66:94:43:a6:bb:46:87:dd:91:83:d6:e0:37:3a:fe:c9:
         a8:6f:8a:89:68:1c:fc:d4:ec:ae:6d:c9:4f:0a:97:d9:bb:69:
         e1:1a:49:49:d2:0d:bb:f5:0b:e6:9b:04:7f:bd:09:60:1f:5d:
         a4:9b:99:10:3a:3f:77:13:d4:69:49:1e:a0:95:fe:52:82:ce:
         a2:d1:9f:8a:18:a3:4e:bc:48:ce:33:c9:dc:09:09:f0:a3:af:
         80:f1:d7:28:c7:97:3b:a6:46:55:b8:ca:f0:96:66:fc:79:ad:
         64:7a:0b:90:b1:52:8e:0b:12:59:7d:f4:08:bb:6c:09:df:33:
         4e:46:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:34:02 2026 by rpki-client