Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
File:                     ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa (raw, json)
Hash identifier:          W93o6KPHmc5ntDCyP5uYZwa4rajdfeVODWHulQf79ok=
Subject key identifier:   E9:A9:A3:53:E9:69:DF:21:26:D1:A2:44:21:01:D6:30:0D:9A:27:FE
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584DA81588A3DDE9E410F068DF80
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     27370
IP address blocks:        216.163.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:88:a3:dd:e9:e4:10:f0:68:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=69f9f510-1395-49cd-a64f-407671bded77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:b7:cb:75:8b:a0:16:8b:03:65:bb:5d:72:
                    25:76:25:c4:55:82:ad:b5:07:a1:1c:ed:82:2d:64:
                    d1:b1:69:19:14:2a:43:f1:55:81:84:72:4f:b2:24:
                    d5:89:1b:02:e0:6e:54:19:d9:be:a5:56:0b:37:f0:
                    d9:86:40:e2:ea:22:cb:ca:fe:c3:74:83:ee:90:17:
                    4e:e4:72:f6:55:b9:99:4c:d8:fd:bc:97:12:1f:2f:
                    95:2c:e4:86:53:f1:29:be:92:f2:5d:32:44:ef:ef:
                    cc:f7:b5:94:68:47:97:83:92:fe:48:08:ac:77:62:
                    a5:5a:2e:f8:b7:03:52:02:86:7e:e5:20:12:9f:31:
                    1d:23:d9:de:54:1f:57:d8:25:7f:db:66:2a:01:ab:
                    76:e0:3f:ca:1a:0d:7c:5b:94:93:73:d7:f1:23:c6:
                    be:db:7c:3c:20:b7:64:19:a8:7e:38:31:e5:34:f3:
                    3a:49:20:c2:e2:5a:1e:3f:51:1c:f1:26:c4:f1:40:
                    98:45:ca:7c:17:96:1e:18:42:b7:e8:0d:5e:96:b1:
                    76:2f:62:25:5a:03:62:e0:98:3e:e3:b0:06:34:fa:
                    cb:a1:c9:ef:01:65:77:21:22:5d:29:b6:73:3d:21:
                    b4:e4:da:60:f1:03:46:c7:3e:4e:2e:36:04:cf:dd:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:A3:53:E9:69:DF:21:26:D1:A2:44:21:01:D6:30:0D:9A:27:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:68:f7:03:ee:8b:6c:29:82:6d:c5:57:b0:f1:5a:e6:53:17:
         1e:2c:21:0f:0f:ce:9d:a0:af:a2:96:e2:f0:04:fd:6f:a0:88:
         8d:92:e4:68:6f:78:bf:f3:d3:bd:25:d8:8e:36:05:cd:82:21:
         af:06:ef:a6:62:81:ae:07:61:4f:bb:bc:f5:06:e1:21:4e:58:
         16:02:36:b2:d3:70:0d:79:56:03:89:97:b7:33:de:85:bb:87:
         af:36:74:37:37:7d:1b:98:71:c7:23:40:53:4c:9b:7c:3e:7a:
         93:76:01:93:16:3c:a6:7d:ff:7d:f5:f8:df:01:62:d0:2e:e1:
         5c:0d:a6:d9:dd:fa:8c:29:27:72:47:cb:f9:4f:9d:42:00:cf:
         ad:55:64:d9:cb:a4:48:0e:29:6c:92:69:be:45:c6:fd:a8:33:
         eb:bf:19:ca:0b:c9:70:a0:da:a1:23:a2:82:d1:f5:5e:62:00:
         c5:c2:26:9a:cd:a5:4c:ae:00:25:de:65:7f:58:96:80:4b:fc:
         78:81:6f:6e:c0:d9:ba:68:3e:b4:a2:0e:a5:93:4a:70:67:14:
         c1:d9:7f:c6:57:6a:77:2c:09:9a:b8:a2:0a:ee:d5:5a:cb:c7:
         bb:02:09:55:a2:33:be:ec:a2:40:ab:26:d9:77:51:14:d5:0c:
         a9:f8:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:19 2026 by rpki-client