Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa
File:                     61d214c5-20e0-3859-9688-c9e3dd55219c.roa (raw, json)
Hash identifier:          vBXqR0u6RyLb+Bw+JzokTG6aakEhbcC/puYpDvs3ZOU=
Subject key identifier:   79:F4:BD:04:D9:4D:F2:9C:7D:35:F1:E1:FC:B0:1F:27:27:09:A3:06
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19F978B93511CFDFD3EC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        75.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f9:78:b9:35:11:cf:df:d3:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=7042754f-5ec6-449b-b540-fa09b3f7442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:4a:0d:d5:6f:a9:b3:fa:c8:54:60:72:f2:
                    cc:a6:77:ea:69:e3:e4:2a:76:63:be:62:c8:a6:aa:
                    9d:39:4a:04:4a:69:07:bf:8b:20:c9:80:05:b9:71:
                    fb:cc:2c:e4:b6:6f:a2:0e:f6:38:6a:f9:77:2a:df:
                    28:27:c2:97:d2:35:53:ff:68:04:0a:f3:e6:c1:45:
                    ce:40:f5:d7:95:91:40:10:13:3e:46:da:8d:20:80:
                    7b:65:a9:c4:d2:27:c0:c7:82:a6:b3:b0:e5:e3:ac:
                    83:1d:17:a0:49:20:23:2e:69:67:bb:b1:11:61:5d:
                    94:39:2d:08:59:c1:3a:c9:ca:0e:90:01:64:50:38:
                    93:ad:f2:30:0b:94:0c:02:32:79:d9:97:db:9f:6c:
                    13:ac:8d:ae:4c:a7:e0:ec:a4:42:02:13:9b:6f:db:
                    98:f5:76:e9:15:fe:47:b2:9c:b2:82:4f:9e:29:24:
                    6c:28:39:a0:79:ec:02:f2:91:d7:dc:a1:ef:70:cd:
                    bc:8e:8f:be:61:c8:09:46:0a:87:66:79:97:a1:de:
                    2a:be:d9:a2:17:05:16:f4:cd:6b:ef:50:71:3e:b7:
                    c4:1f:c4:f6:c5:3a:64:e5:ac:c6:01:dc:31:34:c5:
                    30:aa:d8:09:af:39:04:62:b4:23:bb:5b:03:ba:04:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F4:BD:04:D9:4D:F2:9C:7D:35:F1:E1:FC:B0:1F:27:27:09:A3:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d214c5-20e0-3859-9688-c9e3dd55219c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:68:d8:ed:c2:13:54:59:0e:42:b6:a3:ad:e3:f7:ac:24:c5:
         9c:26:2c:94:22:04:54:f6:14:52:a6:51:ca:d4:cc:69:ad:cb:
         ad:44:97:7a:fa:82:b9:4e:8e:62:ec:48:f8:38:e2:c3:e5:72:
         72:65:12:f4:ba:12:f2:ca:68:b0:af:da:94:1d:e5:91:53:e5:
         37:f6:30:af:4f:08:2f:53:e3:86:d2:4c:71:74:ae:72:5f:dd:
         45:1a:c2:6b:6a:5e:f7:62:42:15:87:af:18:62:5b:03:6b:67:
         ab:7d:74:60:95:41:91:f3:af:62:00:a4:49:62:09:fd:de:60:
         4d:da:83:74:c5:d6:cb:ad:ce:d4:ce:d0:4f:2e:da:22:0f:5f:
         34:3b:d0:23:77:b2:20:a7:16:d3:05:31:17:4a:94:6d:dd:18:
         5e:64:f5:eb:10:83:af:91:d9:b3:28:ea:ef:b8:ce:da:60:71:
         a5:38:a4:97:51:21:f7:f3:2f:b2:37:4d:7e:5f:36:ec:e1:c7:
         0d:a8:f5:9c:10:3a:7a:a5:ed:6f:83:3b:e6:5a:c0:bf:b2:ba:
         ff:b2:35:8c:ed:f2:33:83:d5:8f:41:0a:98:97:01:c0:f7:18:
         6c:56:d6:29:3d:d7:36:32:df:72:1b:82:7e:c4:80:08:22:92:
         22:f4:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:42 2026 by rpki-client