Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/e130fb0f-ac3c-36e7-8a61-afa468e6d0e7.roa
File:                     e130fb0f-ac3c-36e7-8a61-afa468e6d0e7.roa (raw, json)
Hash identifier:          fBczNsg48/kLeKd0L3CmkPbH0cBn1iRutnn0iOgzpr0=
Subject key identifier:   35:A2:82:66:A6:84:DE:42:C1:7A:90:89:23:B6:36:C7:96:B0:C1:10
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584D8E6DFD5968ED93353D961700
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/e130fb0f-ac3c-36e7-8a61-afa468e6d0e7.roa
Signing time:             Sun 19 Apr 2026 08:27:59 +0000
ROA not before:           Sun 19 Apr 2026 08:27:59 +0000
ROA not after:            Sat 18 Jul 2026 08:27:59 +0000
asID:                     3300
IP address blocks:        63.250.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:6d:fd:59:68:ed:93:35:3d:96:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 19 08:27:59 2026 GMT
            Not After : Jul 18 08:27:59 2026 GMT
        Subject: CN=71c67995-f055-449a-acf1-1859dfa8b03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:86:80:14:5c:66:0b:7b:e5:4f:8e:5e:e5:
                    ae:7b:3d:50:2e:b0:a0:8d:ff:32:4b:b4:65:d5:f5:
                    ab:de:72:4d:b4:a5:89:90:6a:ee:5e:a1:26:b7:68:
                    a3:45:72:21:cb:79:65:c1:71:8d:43:7b:80:62:05:
                    96:7a:51:5b:a2:21:20:38:c9:bd:d0:16:97:47:7c:
                    ff:d9:d4:3d:02:40:ac:98:ad:e1:c3:26:01:df:00:
                    93:7d:ae:57:a2:68:da:9f:95:8e:f1:0b:99:19:e3:
                    ed:ea:b2:46:3e:f8:7c:c4:68:68:38:38:e7:df:e6:
                    87:6e:8b:71:95:f2:9b:e8:f3:74:aa:62:11:b8:09:
                    5b:e8:2b:7c:d5:99:6f:fe:ad:ac:66:9c:c3:96:62:
                    f8:53:8d:6e:35:c9:b5:02:d3:11:8c:08:5d:b1:f6:
                    f5:93:80:49:d8:d7:9b:14:c3:e6:32:7f:a8:7a:d9:
                    a0:df:63:35:0f:fc:e5:cf:98:63:f2:66:2d:90:3b:
                    12:fd:a1:d0:26:c7:5c:f6:9a:96:a7:35:fe:b6:d5:
                    e1:5b:5f:ad:11:e3:a7:14:3c:7e:d3:1e:5a:d3:9f:
                    29:bc:29:8e:d6:9e:c5:55:d6:a6:35:d6:8c:02:1c:
                    3c:84:d9:85:17:19:fa:e7:75:12:bf:85:7a:08:97:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:82:66:A6:84:DE:42:C1:7A:90:89:23:B6:36:C7:96:B0:C1:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/e130fb0f-ac3c-36e7-8a61-afa468e6d0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:00:60:e2:8b:83:47:0d:48:e8:89:64:5f:45:26:f1:54:dd:
         72:70:ae:65:f5:2d:95:3d:80:d8:67:47:77:c8:6b:22:28:6b:
         e9:d6:b7:9f:48:61:82:de:79:d2:c6:22:fc:ef:1d:24:36:67:
         39:89:ff:3b:cf:97:0a:2e:92:4c:6c:50:69:52:fd:67:19:e7:
         a4:c4:06:ce:e8:ed:77:1c:97:b1:83:64:c3:37:e6:05:c1:b7:
         05:d5:4d:73:3d:16:e6:cb:65:a3:5d:c7:51:3e:ee:d3:51:1a:
         ce:12:f7:3d:83:4e:f1:32:64:7c:20:2c:9d:41:a2:ed:79:70:
         72:7f:c9:a9:ac:ed:63:2f:34:65:2c:6e:2d:cf:68:6b:4d:3b:
         7d:b3:e7:9d:ba:8a:83:eb:fe:44:88:a0:64:e0:2e:57:49:1f:
         f7:73:e3:88:fe:5c:16:53:9d:4d:6f:17:ef:2c:e2:80:f7:ac:
         52:12:83:f6:2e:95:37:fa:e6:48:79:be:33:dc:b2:15:7e:6c:
         f9:ef:2a:f3:8a:90:5b:b6:87:6d:33:56:01:f3:21:d6:cd:c7:
         e6:95:ae:f8:9d:43:01:61:af:f9:fe:ea:b6:6b:6b:97:a1:5f:
         52:23:ee:fe:61:ee:d4:6f:04:60:64:8b:2f:66:dc:b7:92:7b:
         5f:eb:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:23:52 2026 by rpki-client