Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa
File:                     1e3d4f97-753b-354c-81de-02471daecfb2.roa (raw, json)
Hash identifier:          PrOGOS8KWqgiHid8sPzqZwWKcGy2/VUARJ+EEGMNX4o=
Subject key identifier:   46:DA:D6:37:0E:A6:F5:0E:1B:D9:45:4A:7B:9C:12:07:03:E3:39:37
Certificate issuer:       /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac
Certificate serial:       010D0C9F4328584D8C2AA0E42AD823AF8BCE1C00
Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     3477
IP address blocks:        137.75.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:a0:e4:2a:d8:23:af:8b:ce:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=2091517f-689d-43ad-beab-03a28d9b8bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0f:3d:29:61:98:0a:69:72:82:6d:61:71:9b:
                    44:c4:b5:91:0a:12:63:5b:e4:59:f9:bc:15:1f:eb:
                    d2:56:be:74:7b:79:ca:9d:e8:8e:87:27:86:11:e5:
                    eb:97:30:1c:03:e1:71:f1:d5:85:3c:74:4a:d4:9a:
                    25:78:86:e2:c9:41:9d:db:43:74:43:42:7f:8a:a0:
                    40:b7:ef:a5:d5:9b:f1:8a:c5:09:db:45:ff:df:c8:
                    c8:9f:52:00:62:1e:58:4a:f1:51:24:ec:d1:6c:ef:
                    e2:02:61:e4:1e:16:23:28:25:a0:d8:ba:56:01:ee:
                    48:c0:9e:18:a7:54:e6:cd:34:ad:53:f6:85:a7:b6:
                    4b:d7:02:1e:0d:a4:a2:68:78:14:dc:8d:74:ca:00:
                    97:69:aa:8c:ea:d6:a2:5c:cd:0b:f8:69:b7:32:a1:
                    fe:bc:0c:db:da:18:14:97:83:84:eb:e1:62:e3:f2:
                    57:f5:14:3c:b5:71:7a:d4:e7:f6:66:72:4d:0e:93:
                    6c:ca:92:fb:1e:16:42:e1:8f:15:b6:9b:91:e3:1d:
                    a8:cc:12:94:20:69:4b:90:17:35:84:5a:c0:f6:75:
                    34:13:a9:6b:98:63:16:29:e0:22:df:4e:ac:cf:44:
                    c8:bc:00:9a:65:2d:35:41:0a:d7:cf:25:53:ff:41:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DA:D6:37:0E:A6:F5:0E:1B:D9:45:4A:7B:9C:12:07:03:E3:39:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:df:de:e3:b1:43:50:da:19:1c:1d:0a:94:2e:8c:3a:11:fc:
         dc:42:06:0f:ec:7f:bd:57:8a:e0:6b:d6:36:4f:fb:06:78:f8:
         58:50:96:ae:b2:28:3c:a8:6b:91:28:84:45:c4:87:72:34:3b:
         a2:ff:4a:37:73:65:f6:7d:4c:46:5d:3f:51:7f:59:a4:c2:72:
         99:4c:73:d2:69:88:c6:a6:82:14:6f:00:55:9e:ea:54:20:6b:
         b9:fc:57:98:09:e6:61:5f:f6:72:83:62:7f:e7:aa:98:4c:44:
         ce:5c:e8:4e:78:bc:fa:8e:ce:db:08:2b:48:0b:64:c8:03:b9:
         9a:8c:3f:75:58:8b:76:cb:fa:1e:da:69:83:76:82:af:5d:91:
         69:43:fc:69:e8:83:c6:51:f4:6d:e9:3b:0c:89:97:55:62:b5:
         f5:27:eb:f3:50:10:93:d5:56:55:67:21:15:44:7e:56:88:99:
         d7:e3:b7:25:d0:e3:ff:1e:76:4d:53:72:03:95:5f:0b:83:63:
         f4:f9:b6:db:64:a2:4e:25:0a:06:6e:6a:7c:f0:7a:25:f7:09:
         55:b2:4f:33:ee:fc:55:44:62:59:3f:56:f3:36:d7:60:bc:25:
         5e:a0:78:13:ad:26:4a:59:9c:a0:f8:c4:cc:3a:58:6d:1c:ab:
         df:23:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:54 2026 by rpki-client