Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/7c4630ad-b037-30b8-865e-6fcbacfb5297.roa
File:                     7c4630ad-b037-30b8-865e-6fcbacfb5297.roa (raw, json)
Hash identifier:          BFKLWuDw3wtu654AWFOJ7oUa53mFh3xpRiaT8yyJI4s=
Subject key identifier:   D9:DA:B4:12:FF:36:90:2D:F0:8E:C9:88:E3:79:D3:A8:2C:61:90:90
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584D359FD23926C60DFC38189600
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/7c4630ad-b037-30b8-865e-6fcbacfb5297.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     26229
IP address blocks:        162.138.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:d2:39:26:c6:0d:fc:38:18:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=984eb475-8bef-46d2-868e-7c62fac77cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:d1:e2:8c:7d:8a:23:49:60:6d:40:df:fa:
                    7d:0c:b2:5c:59:ec:f8:8c:7e:44:f3:28:f5:cd:ed:
                    ef:83:b6:56:c1:7e:06:ba:e8:47:93:d3:da:db:b9:
                    64:2f:23:dc:a0:8c:6b:c5:a0:d3:1b:5b:35:a7:da:
                    cd:87:2e:a6:09:e0:3d:1a:62:10:9a:01:ab:e3:fa:
                    b3:b9:e5:f2:88:c3:30:83:b1:18:82:3e:64:5d:04:
                    74:56:50:39:39:a1:37:5f:bf:de:fc:20:be:83:a1:
                    f7:43:6d:89:ce:de:ba:20:dc:35:74:af:44:8b:c2:
                    e6:7b:27:63:85:c7:dd:b1:fd:77:62:34:a6:11:5b:
                    55:e3:c4:9c:e8:8c:cd:43:d6:66:c3:a1:53:80:d1:
                    47:d3:5b:fe:5e:95:a9:09:d2:99:98:0b:84:86:3d:
                    4d:fe:61:ab:35:71:ed:f5:9a:02:8d:e3:d5:c2:f7:
                    6b:0d:7a:dd:e9:1a:c8:4d:07:54:3d:0f:f7:65:69:
                    c2:03:f0:ff:63:79:05:fd:89:a4:dd:8f:c1:fc:69:
                    f5:ac:33:0b:e8:dd:08:35:ff:b8:7f:c4:71:d3:fd:
                    57:7e:42:ab:62:d4:8c:04:f1:f7:9d:77:1e:2a:68:
                    49:ee:31:ee:af:d9:1f:2b:0e:33:53:31:33:9b:35:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DA:B4:12:FF:36:90:2D:F0:8E:C9:88:E3:79:D3:A8:2C:61:90:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/7c4630ad-b037-30b8-865e-6fcbacfb5297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:20:79:2d:59:60:7c:fd:fb:d6:61:ea:a5:ae:61:ec:53:10:
         86:f9:fe:03:f6:5c:4b:12:4e:cf:29:a4:e2:7b:35:8e:f0:84:
         16:db:51:cc:67:e3:70:de:3d:72:9a:ee:ee:60:79:f4:ad:44:
         47:24:ac:34:50:8c:9e:5a:ec:10:d6:79:0b:50:fe:de:a9:cf:
         71:bf:20:01:91:fc:6d:4a:d2:95:a3:72:3c:72:e3:98:52:c6:
         af:0a:c5:bc:6d:bf:6f:b3:9b:b5:f6:be:07:dd:41:f5:30:62:
         51:bc:12:c8:7a:b6:14:bc:a5:b9:e5:ea:d1:6a:fd:10:dd:6c:
         65:2f:f5:4f:bb:7f:c7:60:61:5e:49:8d:27:be:bb:0e:b4:e8:
         a6:2a:19:08:a2:42:db:bb:31:d7:b9:e9:36:9f:cd:46:7b:70:
         72:be:6d:48:74:e2:86:77:3c:2a:65:78:b8:a8:b1:fa:25:02:
         dc:67:6b:a2:c4:6b:fd:81:f4:ac:ac:28:5e:57:b5:5b:3f:4d:
         36:b1:9c:24:01:1b:af:b7:fe:61:37:f8:90:2d:52:3d:f3:05:
         fa:ee:46:99:82:48:41:d6:3d:d8:c6:2d:f1:3f:1d:26:b3:e4:
         c8:8d:bf:19:a1:7f:b9:95:76:c5:9d:77:ee:28:13:ce:5e:65:
         a9:06:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:34:43 2026 by rpki-client