Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa
File:                     b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa (raw, json)
Hash identifier:          tpBI3f64XC6HnUF/va7c1OmrbUDaoc1pjw21mKROt5A=
Subject key identifier:   B1:2D:E5:E6:DA:A6:B7:85:AB:AD:F0:AB:5C:20:07:DD:67:EC:2A:A2
Certificate issuer:       /CN=4ef7c372-e70a-4b95-81eb-c17911a45361
Certificate serial:       010D0C9F4328584E534F3B4178CD1A023811F200
Authority key identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        216.183.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3b:41:78:cd:1a:02:38:11:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef7c372-e70a-4b95-81eb-c17911a45361
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=aa9b691c-8cb2-4cd5-ac32-a6d90ade4518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:ab:5e:fc:ad:3b:ba:88:dd:53:7c:91:a4:
                    6f:e9:a3:ae:3f:75:22:cf:5d:86:67:3a:e3:75:2a:
                    e8:d5:d7:14:63:4f:1c:48:ae:65:9b:62:05:83:56:
                    f3:e2:3a:f6:a3:a8:77:60:dd:45:4f:65:70:ca:ab:
                    a1:c7:78:33:6b:60:d9:d2:cf:d5:af:48:e3:06:4e:
                    e3:67:21:49:ad:f8:94:82:6f:79:50:79:80:8f:94:
                    05:d6:e1:46:e5:2f:37:63:4e:29:2c:5c:8d:bb:35:
                    00:7a:78:9c:2e:72:64:6c:c1:c4:05:9f:2c:b7:96:
                    50:b1:31:34:9c:11:d0:f5:09:6f:82:b3:5f:b1:a4:
                    2f:0f:d4:bc:60:7c:db:a7:fc:88:cc:29:17:bf:56:
                    b4:22:86:7e:fa:4b:ec:20:b8:33:ec:a0:5d:e3:fb:
                    76:a8:8d:00:31:84:00:d4:3d:b4:71:8b:3e:c0:22:
                    1e:5e:95:20:82:1b:be:1b:21:46:3b:44:0c:63:7e:
                    0b:b3:d4:fc:53:34:68:df:bc:0f:e5:7f:ff:bf:07:
                    95:c6:20:36:95:78:2d:b9:12:fc:ac:47:35:5d:06:
                    58:61:55:22:53:b9:a6:33:df:fa:94:f7:08:db:54:
                    f0:45:27:c8:0f:20:36:d3:b7:5c:5d:20:dd:96:e0:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2D:E5:E6:DA:A6:B7:85:AB:AD:F0:AB:5C:20:07:DD:67:EC:2A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:28:38:55:3e:32:bb:94:bc:57:0d:19:65:be:cf:1b:53:
         a3:57:1d:89:43:65:2f:d5:b3:4e:d3:30:92:45:ec:e1:e7:a6:
         cc:5b:d9:b9:af:13:a1:5c:9b:7c:c1:f1:91:ae:9c:2b:90:1f:
         05:43:8e:69:92:aa:19:34:26:ee:ac:75:d1:6e:1e:1f:9d:5c:
         b1:a8:b8:c7:67:87:f8:29:84:99:ba:69:13:a2:67:62:a4:11:
         83:fd:1d:77:f8:76:1a:22:57:91:ee:02:e2:b1:63:2a:24:05:
         6e:5d:3f:29:19:3a:6c:c1:f1:bd:76:7e:ea:de:6b:29:35:67:
         5e:bb:e7:00:ad:5a:87:ff:3f:db:fa:07:e1:0f:1b:67:c5:63:
         08:07:57:cb:55:10:34:87:5c:1f:da:10:9e:3f:43:58:08:24:
         a1:ec:0b:92:7e:e6:a8:a3:35:89:4d:ff:fc:a4:32:56:c6:4a:
         71:6d:c0:42:cb:10:a4:27:05:d4:e9:37:88:47:da:58:f5:2d:
         8d:91:29:1b:6f:da:1d:ef:2e:6f:a7:a7:fe:0e:0a:ce:9d:a6:
         7a:e0:87:66:f0:23:a6:a4:2f:3f:05:18:c1:23:ef:6e:8f:93:
         4a:4b:3b:d9:8a:d2:2e:53:5e:fe:21:3c:db:e6:ce:80:3f:44:
         b1:2f:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:41 2026 by rpki-client