Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
File:                     f2b1bf4c-2212-3320-825b-ce87470ebea1.roa (raw, json)
Hash identifier:          xDCBwmcERHjEh3lWcwGOBTW7lBqgbU4kiStiYm+kj4I=
Subject key identifier:   A2:04:76:A6:90:8E:E6:98:0E:3E:B3:5D:7B:9C:64:9C:45:00:85:C4
Certificate issuer:       /CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
Certificate serial:       010D0C9F4328584D8EF5895B2EEE7E06834EB800
Authority key identifier: 3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     400915
IP address blocks:        107.180.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:89:5b:2e:ee:7e:06:83:4e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f35fa2a2-943d-46af-ab34-41ebcb07ea43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:8c:dd:0b:33:6b:10:e5:b3:8b:97:2e:58:
                    62:d5:ad:7b:59:20:76:76:fd:e6:8e:34:d0:ed:a8:
                    e6:e4:cb:5f:e0:a0:dd:56:79:aa:00:a2:0b:10:a0:
                    5a:2d:95:bb:f2:18:bd:80:19:e1:44:fc:4d:39:32:
                    96:d6:1a:ea:24:42:c7:a7:54:c3:f6:b5:68:0c:4e:
                    a7:c8:46:04:cf:59:a9:ec:00:3f:38:81:5d:c7:99:
                    1d:48:60:76:ea:0d:e0:5b:72:ac:ba:88:90:a2:39:
                    4f:f9:f7:1c:34:8a:20:77:cb:c7:81:16:60:5d:36:
                    2d:5f:7e:0c:25:08:c4:8e:19:f5:92:ea:51:34:66:
                    d7:ef:26:30:63:96:b2:cd:9a:58:f3:29:d1:b1:18:
                    64:0b:83:9f:7c:09:5b:f5:40:6c:2f:4f:6f:a5:28:
                    0d:ff:1a:23:4b:f0:a0:0b:f4:9b:fa:88:58:47:34:
                    f3:d9:5b:51:33:74:9c:9d:18:ed:ef:61:f9:6e:29:
                    e2:3f:21:e9:2a:b9:95:5e:ab:c1:1e:a4:4b:18:6b:
                    e8:88:e6:f3:07:3d:89:a7:79:c4:d0:73:16:8a:8d:
                    57:f0:a4:29:d9:72:6d:a5:49:7c:58:f6:cf:a3:4e:
                    4d:4c:9d:b3:b9:8c:94:b6:a4:d7:06:b4:a5:76:cc:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:76:A6:90:8E:E6:98:0E:3E:B3:5D:7B:9C:64:9C:45:00:85:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.crl

            X509v3 Authority Key Identifier:
                keyid:3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:73:c4:c2:99:73:31:91:b0:37:77:36:cf:2e:d2:83:f5:
         fb:cc:82:ca:99:26:2e:f4:ba:25:85:72:37:14:e6:62:6d:b9:
         26:51:3e:14:78:59:8f:d0:5d:09:d0:90:65:4f:3f:9d:eb:7a:
         44:17:e4:02:36:7b:a0:29:5e:5a:42:5a:f3:80:52:c1:e6:01:
         de:12:8e:05:d5:a1:b2:3f:4e:97:b4:a9:94:cf:e8:88:7d:d5:
         c4:b4:70:28:f1:78:c2:c5:f4:8c:9f:6d:5f:f0:63:00:91:24:
         a6:83:90:63:59:fe:49:22:a3:b5:45:eb:9a:6c:9a:51:a6:9c:
         23:d0:a9:ce:30:6b:bd:d6:98:05:76:a3:5a:0d:80:11:c9:61:
         e2:84:ea:bf:59:55:28:1e:c9:68:53:5b:3b:20:eb:67:8b:78:
         aa:11:c5:14:bc:fa:20:f6:24:56:a6:1b:4f:b9:8d:36:f2:0e:
         b2:5b:7d:78:cb:51:36:11:1d:64:05:17:a3:06:56:05:3c:c7:
         8f:43:31:1c:96:7b:d5:23:f7:94:ca:bd:34:80:eb:ff:14:2f:
         48:f8:e1:57:97:11:5a:83:8e:8b:b2:15:fa:a6:a5:d2:51:ee:
         d5:8d:ec:7c:dc:d6:51:64:d8:fb:74:4d:45:23:e5:02:b3:ca:
         4e:65:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:57:35 2026 by rpki-client