Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/abcc9852-f289-3333-948f-ce008de145e9.roa
File:                     abcc9852-f289-3333-948f-ce008de145e9.roa (raw, json)
Hash identifier:          I4+X6FNZ04sytM0CXjUrQURfkCCIYx7CHiRpJ0OA4Hw=
Subject key identifier:   79:4B:43:A2:84:18:D9:D3:96:9A:17:EF:BC:52:69:70:B0:30:C7:92
Certificate issuer:       /CN=4ef7c372-e70a-4b95-81eb-c17911a45361
Certificate serial:       010D0C9F4328584D707746724E0281FD39AFCA80
Authority key identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/abcc9852-f289-3333-948f-ce008de145e9.roa
Signing time:             Wed 08 Apr 2026 14:52:26 +0000
ROA not before:           Wed 08 Apr 2026 14:52:26 +0000
ROA not after:            Tue 07 Jul 2026 14:52:26 +0000
asID:                     13335
IP address blocks:        216.183.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:77:46:72:4e:02:81:fd:39:af:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef7c372-e70a-4b95-81eb-c17911a45361
        Validity
            Not Before: Apr  8 14:52:26 2026 GMT
            Not After : Jul  7 14:52:26 2026 GMT
        Subject: CN=cbd3df8d-27e6-4871-b2c0-254dd33bd2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:f7:7d:b7:32:3b:4a:05:0c:85:16:93:09:
                    2a:3a:aa:78:1f:fd:d9:28:5a:31:03:01:3f:cc:b1:
                    8b:bf:22:a2:ba:38:b7:e2:f8:03:0e:3e:14:c9:86:
                    b6:2c:ae:35:fd:bf:29:2e:0d:fc:8b:c2:95:3e:91:
                    e3:48:3e:cf:af:b3:ef:13:dd:c6:26:35:5b:60:a5:
                    b6:63:e6:1d:91:98:7b:7b:08:e4:d6:02:24:10:85:
                    93:01:b0:72:a5:b1:2b:58:55:7c:86:1e:60:49:ab:
                    51:62:32:56:b4:23:84:64:5e:c2:5d:53:88:3d:43:
                    cd:bd:6b:f9:80:5d:1f:ff:55:8d:2f:2d:73:51:3e:
                    c5:ae:42:02:82:b2:e1:50:7c:d9:0d:df:9d:85:ff:
                    e2:06:80:86:05:f9:96:35:9f:33:63:0f:f9:9b:4b:
                    56:44:bb:19:47:f3:6f:41:b9:1e:05:38:ca:35:b6:
                    59:f6:e5:79:43:ba:61:a7:71:99:10:08:38:26:8c:
                    dd:03:09:fc:73:84:7a:3c:c7:60:68:d8:63:55:21:
                    ff:33:35:9d:9e:f9:92:5c:8c:5c:3f:84:38:a1:69:
                    77:26:d7:b6:5c:ad:d7:5d:5b:b7:ff:ea:ae:58:22:
                    16:45:10:bf:83:b2:ef:27:7f:4d:ae:3a:40:12:64:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:43:A2:84:18:D9:D3:96:9A:17:EF:BC:52:69:70:B0:30:C7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/abcc9852-f289-3333-948f-ce008de145e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:85:9a:95:5a:84:cc:15:1a:82:aa:0e:9d:3e:99:1d:9d:88:
         71:80:b2:d0:72:8b:12:40:2d:50:b9:3b:ab:72:b9:4a:44:9a:
         d7:e2:d3:93:c7:04:c6:ed:16:3b:af:47:2b:4b:90:00:f9:5b:
         f1:7a:23:03:48:ef:b6:3d:71:3d:fe:ef:92:98:33:68:9b:4c:
         68:41:36:cd:07:d9:e2:b6:16:fa:ab:37:88:6d:25:d6:43:1d:
         0a:b0:13:e6:8d:0c:a7:11:9a:f9:cb:ab:ee:aa:72:e2:7b:df:
         a9:39:2c:b7:7d:9e:d3:c4:77:6f:0a:bf:0c:c4:01:48:15:fb:
         4d:61:4e:5e:8f:b4:c4:4e:c4:fe:92:ba:13:4c:d0:06:9b:f4:
         34:bd:55:02:35:19:f7:38:f9:c0:39:c5:1b:6c:0a:15:25:35:
         2f:3a:b1:a4:ba:27:4b:d9:14:d1:b3:37:1f:17:7d:b4:1d:35:
         5d:c6:bd:df:5a:9a:78:b6:4c:4c:c6:25:10:99:b9:0e:51:ef:
         12:70:29:58:25:c9:d8:ad:60:d7:c7:46:19:2f:c2:7f:d8:db:
         d0:87:df:e4:8b:62:0b:b2:27:0f:54:c1:70:09:70:0b:ca:40:
         6b:b7:d3:8a:02:b0:dc:f9:c7:0e:ac:c5:bc:01:be:4f:d1:a5:
         01:5d:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:56:09 2026 by rpki-client