Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa
File:                     612364ac-24a2-32f5-8b02-cc553fb685ac.roa (raw, json)
Hash identifier:          zwyJ5Ob6sTpLXxu1jdnncyKn7jxxJIZMB1NpvOurHxE=
Subject key identifier:   7F:1C:07:79:17:8F:A4:8D:25:99:AC:C8:C6:9B:66:89:25:8F:68:A3
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584D55BA43209497485B9AF29340
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:43:20:94:97:48:5b:9a:f2:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=ca33a8c8-c478-4f5c-a099-7c9904166681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:9d:e2:58:96:f4:01:63:a2:3c:a4:88:9a:
                    cd:a6:e2:a2:7f:18:7c:c3:d7:fd:fc:52:3a:ab:30:
                    42:2d:d3:a3:b2:c1:c1:5e:99:2a:c5:e5:5d:25:c6:
                    a1:9b:f7:34:ce:44:66:9f:4b:aa:14:6a:36:30:22:
                    c9:33:6f:21:58:c9:f5:bb:80:5e:10:a7:1b:48:fd:
                    8c:95:f0:0c:1d:0e:02:bc:64:e9:c6:ca:f8:71:5a:
                    91:a6:2d:04:29:96:4d:75:17:c8:f4:d3:d6:77:6b:
                    4e:e1:d1:fa:6a:00:5b:bd:19:2c:fa:13:78:b6:8a:
                    60:bd:c8:2b:8c:9f:8f:de:4f:78:b3:4b:7a:87:e1:
                    b0:9d:29:73:0e:8f:c4:e1:2a:5a:93:be:92:57:49:
                    9b:46:4b:e4:69:22:c0:f5:fa:d7:cf:5f:bd:6b:35:
                    7a:11:2d:83:cd:06:0e:b2:7d:40:3d:44:c0:cc:39:
                    8f:5a:9f:d3:e8:53:01:51:70:7b:21:08:ec:84:55:
                    bb:2c:dd:c3:88:5e:5c:1d:d9:74:59:ee:a0:54:41:
                    9d:d9:02:3c:cb:29:48:8e:0d:ad:16:6f:a3:28:eb:
                    07:c9:64:0f:0b:96:3f:86:e0:82:d5:88:1c:0a:05:
                    08:63:00:40:8d:ed:ca:e6:4b:11:8b:05:d5:fd:5b:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1C:07:79:17:8F:A4:8D:25:99:AC:C8:C6:9B:66:89:25:8F:68:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/612364ac-24a2-32f5-8b02-cc553fb685ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:66:a2:87:0e:92:72:3c:1f:02:6c:3e:e6:0e:8f:31:9b:16:
         e3:40:54:f5:c6:fe:c7:c8:a1:aa:d8:a1:47:d8:20:f8:a1:e4:
         a9:8e:64:2e:ac:2a:ef:e7:29:d0:71:96:99:4c:58:c2:de:9c:
         97:75:b7:d6:9f:e0:82:63:5b:cd:ef:c9:85:fb:1a:eb:f9:e5:
         d0:b5:f3:ed:9a:12:8a:0d:b6:71:22:05:28:3f:6b:32:7d:a2:
         10:2d:d5:96:38:14:f9:62:6b:bd:e5:00:e9:e3:3c:0f:00:6c:
         7f:c5:15:80:c0:c7:d5:6f:0d:01:46:92:45:99:9d:b8:f1:da:
         f5:e4:b8:50:d5:eb:f4:23:b6:41:6d:70:b5:98:49:9f:b9:ff:
         e7:f7:c3:9e:6f:14:a1:a2:e7:cd:93:a6:a8:5c:1b:61:c0:21:
         fb:d0:45:97:7b:94:5b:a9:55:a7:e7:f8:2d:16:37:2a:24:1f:
         bf:32:5d:13:e9:69:8f:3b:d7:d6:11:97:20:6c:c0:ff:6f:c3:
         d9:8c:a2:38:b1:20:8b:a2:1a:f0:19:b0:45:7a:53:20:fb:9c:
         87:50:42:ff:29:1c:0a:06:a9:d5:c0:5a:90:de:23:23:04:0f:
         6a:3c:60:ec:0f:93:7f:c2:91:5e:f5:97:3e:d3:e4:d6:3d:62:
         3d:d2:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 22:16:28 2026 by rpki-client