Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
File:                     cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa (raw, json)
Hash identifier:          OsGvDI4QyaYhCf4uexWMLsTEU7Z1Rrf6zJgjr0NA3k8=
Subject key identifier:   77:8E:41:B7:C8:6A:EC:45:04:3E:EB:41:3F:3A:01:2D:27:F4:D2:79
Certificate issuer:       /CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
Certificate serial:       010D0C9F4328584D1EB2ED5BED92600137E98C80
Authority key identifier: 47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa
Signing time:             Fri 06 Mar 2026 14:08:33 +0000
ROA not before:           Fri 06 Mar 2026 14:08:33 +0000
ROA not after:            Thu 04 Jun 2026 13:08:33 +0000
asID:                     14618
IP address blocks:        159.220.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1e:b2:ed:5b:ed:92:60:01:37:e9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8adc860-1381-4299-b5ba-dd3e1f605c46
        Validity
            Not Before: Mar  6 14:08:33 2026 GMT
            Not After : Jun  4 13:08:33 2026 GMT
        Subject: CN=f30b15fc-ce26-4e24-914b-00b50c5fa414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b2:2e:b3:7a:99:7f:d2:e4:63:83:b3:6e:db:
                    b4:d5:52:19:c4:e5:2f:21:b6:10:3c:f5:11:f3:db:
                    87:23:c0:76:a0:b4:40:09:7a:1c:69:96:2a:cf:b1:
                    ad:5f:a8:85:35:a5:17:21:25:ee:fe:9b:b7:bd:ab:
                    44:f4:7c:be:54:71:8d:d4:b1:cb:06:23:2f:aa:ae:
                    20:3b:bc:be:cf:54:ce:5e:a7:20:43:e1:54:1d:15:
                    be:37:cd:c4:12:c2:7d:1d:dc:05:a2:25:c4:55:bd:
                    62:6e:ec:88:b3:b9:fa:64:38:05:ec:ee:2e:28:62:
                    34:b8:cf:d1:be:bd:f6:7f:df:47:52:28:d9:cb:17:
                    dc:c1:69:cf:90:59:8f:b1:89:8b:c3:17:56:33:5f:
                    97:9b:e0:c3:ee:97:2e:84:e5:fa:40:48:d7:e1:36:
                    1b:21:9f:f5:7e:e7:48:d7:19:60:d5:d3:66:8f:d7:
                    22:89:ae:67:34:01:e4:91:db:a9:3d:24:fc:76:75:
                    af:18:39:77:44:54:e5:0f:ce:95:03:0e:41:a6:33:
                    aa:fb:71:6c:72:61:a3:6e:90:6b:6f:c0:ca:54:8c:
                    37:21:ae:03:82:e2:c8:54:57:57:7c:70:5c:83:b6:
                    f1:5b:67:9e:82:19:34:1e:c5:c5:a3:f5:aa:43:eb:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:41:B7:C8:6A:EC:45:04:3E:EB:41:3F:3A:01:2D:27:F4:D2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/cba51b77-5728-3d1c-9a9d-192c8e3d588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl

            X509v3 Authority Key Identifier:
                keyid:47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.220.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:28:6e:38:28:0c:21:e3:92:1b:d3:9e:8b:da:73:02:8a:
         d2:71:97:2b:d6:18:0d:dd:87:ce:b5:98:0d:4e:f3:9b:0c:04:
         e0:58:a5:df:b1:d2:d3:e7:74:6a:81:5e:bf:7d:23:c6:fc:7a:
         1f:b3:bf:d5:4e:af:45:32:8f:fb:f0:49:31:96:c8:fc:30:1e:
         36:14:bc:45:3e:c8:bc:da:f8:7b:59:1a:e0:b9:1e:79:a3:e2:
         1b:19:85:ba:ce:25:dd:91:46:1c:ee:35:89:b5:05:43:36:0b:
         1c:78:55:c9:a7:43:15:02:b9:fa:72:81:39:c1:16:34:00:f6:
         8d:b4:98:3d:d2:6e:09:d0:4e:2a:b4:f6:81:fc:cb:8f:1a:e0:
         7c:81:39:5f:df:51:b5:78:a9:8d:7f:3d:c2:16:ad:77:fe:4f:
         2f:7f:a5:ee:64:4d:e3:31:e7:95:c6:f3:92:94:0f:97:6e:f1:
         20:5a:a3:9f:6b:5d:33:b5:a2:2a:dc:70:49:a7:13:cf:8b:91:
         0e:b8:2e:eb:ae:78:4e:9a:b5:df:17:b8:2b:1f:83:da:35:d7:
         9d:0f:24:e1:15:16:3a:ee:d5:26:92:93:4c:b7:68:ba:98:60:
         f6:65:14:60:27:b6:c1:12:43:d5:11:47:fd:af:01:04:35:67:
         7f:22:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:37:31 2026 by rpki-client