Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1e4ed572-f3c9-3471-bee5-054c60890636.roa
File:                     1e4ed572-f3c9-3471-bee5-054c60890636.roa (raw, json)
Hash identifier:          pL6nwqXiM41S7i8ZmwxWJaUboX7Rt36RbEA1fy5InPA=
Subject key identifier:   4A:A4:13:77:6C:F4:91:26:D4:10:88:D2:D0:CF:44:6F:19:50:51:22
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D237A5FA4B4C6B2B7B28DAA00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1e4ed572-f3c9-3471-bee5-054c60890636.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        104.145.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:5f:a4:b4:c6:b2:b7:b2:8d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=5db35d78-8ec9-45d0-bb14-5caeb7422bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:9e:81:55:7b:0c:d8:6f:6e:30:ad:44:76:
                    ba:64:6e:36:ac:6c:de:a5:cc:5e:ae:6f:d4:66:f7:
                    f8:0c:41:49:60:c6:d1:aa:84:27:ab:c8:42:38:b5:
                    32:b4:4e:4f:c4:cb:a7:db:89:6c:b1:80:2e:9a:e3:
                    54:80:cb:c7:a7:d4:b5:a1:84:41:58:d0:8b:bc:8f:
                    2d:a6:fd:a1:74:db:a4:6a:0c:8f:42:30:98:4c:b6:
                    bb:11:d1:7b:b7:50:06:5d:00:83:95:c6:25:fe:50:
                    a9:13:e8:63:c8:25:aa:30:ac:cc:22:ed:f7:f1:28:
                    1e:43:8e:c8:9f:81:77:56:df:b7:e6:36:74:be:7c:
                    fc:d2:72:aa:d8:b1:68:a9:08:06:65:72:e1:0a:04:
                    19:e2:be:39:e3:02:3e:f8:dc:ae:4d:66:c0:38:07:
                    cf:b4:5a:77:9a:b0:c9:77:dd:ac:f6:ab:f6:f8:79:
                    41:a0:47:7f:50:9b:ad:ab:7c:ff:b2:b9:b9:74:27:
                    5e:96:9c:ae:7a:85:a8:34:30:7e:a5:c9:ac:ce:a0:
                    60:9c:f8:ff:d4:13:84:48:40:86:d2:da:a4:ea:c0:
                    4a:6e:41:16:2f:fd:d7:b0:bf:bb:dc:7d:ea:95:3f:
                    3b:a9:ee:49:ed:58:77:8b:fb:97:02:cb:a2:37:31:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A4:13:77:6C:F4:91:26:D4:10:88:D2:D0:CF:44:6F:19:50:51:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1e4ed572-f3c9-3471-bee5-054c60890636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:d9:85:a1:96:a9:78:3e:be:8f:e9:78:37:5c:59:be:eb:
         0c:46:fa:ce:0c:79:24:97:b3:64:44:5a:e3:d2:ea:6d:b1:5a:
         41:d2:29:59:f3:a6:c1:11:a5:7d:12:11:9a:e1:1f:62:35:52:
         62:50:06:8b:ab:53:13:ce:d0:a2:c7:29:1f:e5:a5:27:73:50:
         92:82:1b:1f:8a:58:53:2a:57:4d:52:7f:f0:87:60:bf:27:17:
         f0:85:d6:70:bf:9e:b6:e8:d9:fb:08:80:22:0b:a0:fd:e2:5d:
         10:05:77:75:bc:a8:1a:62:3d:a6:33:eb:6e:e5:8d:c5:94:47:
         8d:e7:68:f3:92:c5:a0:e7:38:7f:b4:df:a7:1c:84:49:8f:56:
         b1:97:5a:39:21:8f:6a:a1:b5:8f:e8:d8:7a:fa:75:53:16:68:
         0d:4e:e1:ba:dc:66:73:ca:5d:f9:bb:5c:eb:fa:4d:29:8a:69:
         a6:18:15:04:5b:bc:b3:e9:3e:08:e5:d7:c7:1f:25:3f:3a:bd:
         94:04:77:a3:2c:7e:2e:af:18:2c:37:98:99:66:5b:41:53:5d:
         4a:ec:2d:99:e5:0e:15:8d:d2:61:55:9b:10:39:01:82:37:c6:
         a6:6a:22:b3:6a:84:33:ee:e8:7d:23:2b:03:4a:e7:fc:68:8f:
         e0:40:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:57:00 2026 by rpki-client