Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/e92b3d4e-62b7-322f-a098-94d2bd8d4509.roa
File:                     e92b3d4e-62b7-322f-a098-94d2bd8d4509.roa (raw, json)
Hash identifier:          KiLvavHD4fwdaRABaHxXaX+uvqmthClTPWAEHg8gw0k=
Subject key identifier:   B7:82:B9:BC:B5:DF:21:66:0D:C7:08:3C:BE:BF:69:26:97:EA:B2:7D
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F4328584D2540EB0EEBEA81CEC1199C80
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/e92b3d4e-62b7-322f-a098-94d2bd8d4509.roa
Signing time:             Thu 12 Mar 2026 16:17:17 +0000
ROA not before:           Thu 12 Mar 2026 16:17:17 +0000
ROA not after:            Wed 10 Jun 2026 16:17:17 +0000
asID:                     200173
IP address blocks:        104.156.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:40:eb:0e:eb:ea:81:ce:c1:19:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Mar 12 16:17:17 2026 GMT
            Not After : Jun 10 16:17:17 2026 GMT
        Subject: CN=a0dacf70-13b9-47a8-a9ae-1fbed8bae03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:d4:c2:d9:07:e5:33:9e:fd:ab:7b:b0:b1:
                    89:da:80:f1:3e:b9:38:9d:a0:a9:48:e3:aa:5c:cc:
                    d8:8d:1f:6e:36:3d:74:c3:46:b8:fc:a9:75:8e:0f:
                    b5:70:69:8b:77:f7:18:b2:1a:e8:3f:c3:24:c3:8e:
                    30:a4:c0:33:f5:3e:9b:1c:00:96:0b:6b:64:ac:4b:
                    63:f1:af:f4:0f:92:ff:69:86:ba:8d:c7:9f:60:1f:
                    1d:d0:0e:46:e2:05:a0:2b:dd:36:1c:6b:99:56:87:
                    f1:2e:c1:00:ce:60:69:1b:2d:1e:10:15:2a:57:ce:
                    77:84:b2:41:13:f9:ae:ba:e5:8d:d3:20:d4:a2:1e:
                    e8:95:8b:e2:d7:e6:db:2e:b1:e4:2d:be:8c:e6:e5:
                    21:bc:82:ea:81:f1:f5:ba:27:c3:5b:32:6d:7e:8b:
                    f9:4f:1c:ab:49:bd:c7:29:31:b9:6f:81:d0:c1:51:
                    f1:7d:8e:c3:ef:72:16:eb:37:37:c2:16:2d:15:e1:
                    cf:b2:92:ef:33:e3:02:a0:81:ca:1f:5b:68:23:7f:
                    58:5c:f2:2f:af:95:68:d0:75:b4:9d:6b:b6:43:78:
                    ac:d7:da:8d:a6:87:ca:97:72:03:dc:af:f4:bb:8e:
                    7b:7c:5f:98:78:74:1b:00:ec:ed:28:bc:25:4e:58:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:B9:BC:B5:DF:21:66:0D:C7:08:3C:BE:BF:69:26:97:EA:B2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/e92b3d4e-62b7-322f-a098-94d2bd8d4509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3c:cf:e1:ab:aa:51:47:41:80:6e:65:7f:33:19:de:e4:ad:
         ba:96:fa:5d:bd:5d:9a:52:31:4f:0d:0e:5e:10:32:0b:cd:8b:
         39:d0:05:06:53:1e:f8:f1:35:c7:61:79:37:3f:7c:d5:83:69:
         ab:eb:23:a7:19:4d:d5:31:42:e9:d9:da:fd:72:29:53:0d:36:
         db:45:e6:ab:3d:2a:51:42:ce:1f:f4:34:d7:91:0e:9d:16:72:
         88:01:81:32:d2:a6:0c:f5:50:0e:91:2d:45:83:37:f6:cb:9a:
         49:9d:e1:58:dc:7f:1e:45:7a:90:49:4d:f0:69:c3:68:92:be:
         6f:2e:fd:1e:28:00:5e:04:d8:8e:0c:1d:4a:a1:4c:e6:75:04:
         cb:36:c0:57:d7:fe:6b:be:c5:69:ba:bf:09:da:35:14:f0:31:
         14:b4:7f:03:5c:76:99:d7:59:7a:53:14:4f:34:90:f8:8d:c2:
         8f:20:09:2f:6b:18:54:66:a3:47:cb:bc:36:73:bb:23:8b:9f:
         71:fa:21:93:89:96:bb:05:e7:44:a1:31:5f:6a:93:bb:57:e2:
         60:03:61:d0:5e:15:6b:5e:3e:fc:29:90:13:eb:f0:ad:76:e9:
         6d:46:ef:3f:97:f5:37:db:db:71:77:06:e8:43:68:07:3f:48:
         41:7f:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 18:17:23 2026 by rpki-client