Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/6223aec1-1536-3d21-bf29-56d15bf9d408.roa
File:                     6223aec1-1536-3d21-bf29-56d15bf9d408.roa (raw, json)
Hash identifier:          y/GsxyajPMHk2b2qaJk5M5GWj+5hSgCzLTgMi4BzJjM=
Subject key identifier:   01:51:DE:3A:E1:1A:B3:57:B9:F6:CD:6C:D4:9E:CC:1E:D7:AB:D0:3F
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584D9E501CFEF72089AAB806DA80
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/6223aec1-1536-3d21-bf29-56d15bf9d408.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        168.203.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1c:fe:f7:20:89:aa:b8:06:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=3b526248-8cf5-44d7-8b7d-654c6687859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:9b:da:8a:bd:17:88:4a:06:c3:49:7a:75:
                    89:e3:7d:85:d4:d4:48:68:b2:31:98:e9:97:f2:21:
                    7e:d8:7b:32:14:63:b4:21:08:fa:0e:ce:9a:c7:44:
                    52:d4:dc:58:01:49:8a:e5:e2:0e:dd:3d:cf:12:00:
                    f5:75:7c:7f:a9:0d:14:c2:ad:ef:cf:53:1d:6a:d8:
                    54:20:c0:24:bf:7e:f4:8d:5d:20:31:f1:0c:fa:8e:
                    34:88:30:a3:35:df:84:52:bf:1e:11:4a:5b:d2:4b:
                    23:49:e0:b5:f4:15:e1:0d:3f:da:14:d2:c7:92:b7:
                    1b:2e:75:5c:64:0d:1d:88:e0:7c:f1:f7:be:52:e7:
                    b0:ae:f9:de:ec:18:b9:65:ee:1e:64:2d:0b:4c:95:
                    40:e6:56:f8:ce:7a:1b:a0:24:4a:2f:e1:39:ea:ab:
                    56:dc:5c:5f:16:8d:c8:37:26:95:1f:b2:77:54:2a:
                    a9:8e:ac:d0:3e:e0:81:39:b5:8d:8d:10:0d:25:58:
                    d7:c1:91:4a:57:39:c3:90:e7:d8:7b:c4:ed:33:a3:
                    b9:f1:d4:b9:5e:1e:42:c1:ea:36:82:cd:8c:8c:66:
                    8d:79:9e:3e:a0:73:55:29:91:c1:c8:fc:b7:dd:95:
                    33:bf:b0:f3:42:d0:2a:df:89:f9:f4:c3:64:39:c2:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:DE:3A:E1:1A:B3:57:B9:F6:CD:6C:D4:9E:CC:1E:D7:AB:D0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/6223aec1-1536-3d21-bf29-56d15bf9d408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:48:fa:a7:6b:30:e6:b4:2a:00:5c:76:18:dc:5f:5a:1f:
         0d:15:ca:c0:30:86:4f:d5:07:61:83:57:0c:e0:be:19:f9:36:
         6f:33:d5:9f:d1:db:e2:75:cf:e3:22:75:06:ba:1a:cd:d6:c6:
         43:96:ad:54:1b:2b:ef:c8:64:e4:7f:ed:f4:0a:3a:ac:5a:8c:
         5b:10:d7:b9:c5:9f:f9:2d:b9:ea:e1:96:e9:c5:3c:bf:c4:b5:
         ee:b3:fd:53:0a:11:80:6a:e7:13:eb:b4:39:4f:84:72:14:47:
         64:80:81:0d:76:16:22:b4:49:e4:a1:45:b0:53:2e:1b:02:43:
         6e:93:ac:d8:77:2f:1c:c9:3f:9d:cc:3b:3b:ae:b7:e3:7f:0d:
         77:4b:a4:ca:39:f0:bc:be:bc:97:8a:99:1c:d7:8b:17:20:92:
         9b:47:25:29:84:7c:89:4c:ad:2d:02:65:0a:ab:6d:f9:20:ca:
         13:00:8f:3b:7a:93:4a:51:0c:5f:50:6c:28:c1:cc:22:c9:53:
         d2:46:ce:0b:f5:34:34:29:6a:75:39:b4:f8:b8:49:a5:5d:76:
         e7:df:ea:32:5d:0e:35:0e:c8:17:9e:d9:09:32:b8:9b:7d:cd:
         08:a4:2e:d5:f2:8a:33:70:49:42:65:32:21:e6:d6:a8:c4:c3:
         32:2b:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:15:46 2026 by rpki-client