Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
File:                     bf93319f-0189-3af9-bb58-9a82a9fad60e.roa (raw, json)
Hash identifier:          dDo6mAhu1KdKZuTSJKRliCczMQ1xU4nxbhjNQoRUu0w=
Subject key identifier:   0D:6C:B4:44:68:0F:D3:71:D8:5F:18:99:1C:32:B4:22:BC:AA:3F:6B
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584D524345417DE0DE55B38982C0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     62537
IP address blocks:        162.222.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:45:41:7d:e0:de:55:b3:89:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=04ba2542-0221-4b33-85df-82b157247a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:a4:96:48:80:9b:aa:d0:14:aa:2f:fa:a9:
                    e9:2c:57:32:94:51:54:bd:f1:6e:13:df:20:a1:52:
                    3c:a9:ba:4a:99:10:66:36:b2:40:37:44:6e:27:5c:
                    53:5b:13:2f:d2:ae:c5:ec:f9:14:f6:d9:14:13:57:
                    3d:d8:21:06:69:0c:80:34:65:ba:12:69:b8:90:19:
                    d5:a7:c3:09:be:f3:dd:20:7b:d0:13:d1:43:aa:0d:
                    6c:09:94:28:76:20:4f:4c:c1:25:67:68:7d:66:99:
                    3b:05:cc:1f:24:c7:c6:75:68:7c:dd:b5:b2:ab:ee:
                    a6:ed:6c:7c:16:d8:be:08:fb:72:62:c0:d0:53:19:
                    b2:62:4e:02:34:d6:9c:0d:89:7b:19:5d:3a:9d:84:
                    7f:c1:51:84:e5:80:4d:85:1b:fe:18:66:35:64:a6:
                    92:c3:15:a1:a5:0f:f5:a1:aa:89:e3:11:a9:27:df:
                    87:4c:8a:6f:60:8e:70:1a:8e:89:9a:12:39:04:26:
                    02:d0:2e:2f:65:9a:0d:e2:c5:80:84:ae:96:e5:3b:
                    50:41:31:0c:09:93:b6:8c:13:ac:68:0f:5b:b0:06:
                    aa:5d:6f:73:62:f5:d4:ec:a9:0a:51:c0:3d:b5:78:
                    a4:29:5e:79:a8:51:31:ed:59:a6:82:62:0c:40:01:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:B4:44:68:0F:D3:71:D8:5F:18:99:1C:32:B4:22:BC:AA:3F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/bf93319f-0189-3af9-bb58-9a82a9fad60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:72:db:87:be:8a:bf:77:7b:8c:1a:b3:b3:1c:b8:eb:b7:c8:
         28:bd:06:cb:86:48:df:d6:6a:15:10:f8:9b:82:7e:f6:a7:b4:
         1b:ce:80:e7:67:78:9e:7f:40:95:9e:c8:e0:c4:b7:c7:35:c4:
         85:70:23:76:24:fb:01:06:63:ef:f2:c1:b1:47:98:9f:44:ea:
         d9:b0:40:12:32:2d:51:5b:4d:0c:a9:39:14:a2:d8:1d:b3:14:
         7d:02:b7:3c:b6:83:ec:84:cf:76:3b:29:99:81:ba:68:09:0c:
         ce:cd:e7:c5:c1:48:fd:08:0a:6c:b8:a0:29:fa:88:97:9d:b9:
         2f:a7:06:d1:42:de:45:56:87:27:9f:b0:34:7f:e4:79:49:2a:
         19:e3:50:ca:c9:14:5b:f3:45:b9:48:8b:d2:a9:99:b9:6a:c7:
         6c:a0:bb:60:9c:55:1b:0b:f9:87:72:3e:62:4b:88:06:35:a7:
         b7:24:1c:51:44:af:9c:e8:ff:d3:34:2b:19:fa:4c:61:f5:df:
         15:60:80:45:63:23:b2:f1:7a:8d:1a:5d:96:8f:2d:ed:f7:f2:
         db:ff:18:dc:72:85:82:1e:57:1a:6f:7e:5c:16:02:ab:2f:bb:
         4b:25:e3:66:81:76:91:fd:6c:38:10:c3:49:87:93:ef:f9:7a:
         77:5e:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:50:07 2026 by rpki-client