Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa
File:                     dea7db87-2826-35a7-8644-c9e3d986426f.roa (raw, json)
Hash identifier:          sd5OTEHnsz9ml5E+o0oeDdCUhfbjli6BpMZgWmW1f5g=
Subject key identifier:   CA:6A:91:8A:79:D7:B9:48:A5:51:8F:5C:30:74:02:4F:45:E8:A9:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D300A35ED8D46DB3332386680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        64.237.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:35:ed:8d:46:db:33:32:38:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=d88a9313-2137-4a30-836b-8d4cdf0bfd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:f1:9a:3c:64:df:f5:1a:81:ee:f1:3a:5b:
                    a9:0d:33:52:dc:7d:da:54:12:c9:58:c7:40:b4:35:
                    98:51:e2:cb:90:9d:26:2a:d7:0b:dd:3c:94:60:69:
                    45:f5:e2:c3:89:0b:f0:20:64:c8:12:5e:27:df:60:
                    a7:5c:8d:e0:4a:a3:07:1f:35:3e:7d:ab:f2:79:7f:
                    44:28:3a:8e:fd:ef:e6:52:c2:42:2d:ef:de:7c:f3:
                    4e:cc:9f:42:f3:f1:94:7b:a1:2c:06:96:54:f6:b1:
                    a2:e1:05:c2:61:8d:4f:77:2e:9f:44:85:84:6e:76:
                    eb:4f:91:0d:66:50:30:41:c2:e6:f5:9c:e3:7d:f7:
                    9c:32:6c:25:6b:7f:9f:50:08:6a:d3:db:e1:d6:4a:
                    14:7a:a4:87:07:cc:cb:53:5b:5c:e0:4d:87:78:9b:
                    fa:fd:d7:d8:00:9c:10:9c:d3:7c:b9:b7:e7:d3:d8:
                    ae:a4:69:f1:54:83:49:ab:69:6c:af:35:e3:77:db:
                    9f:6c:7d:1a:ce:e4:ee:b0:02:90:4b:f3:7a:e2:72:
                    a7:72:b5:71:e3:24:30:a6:8e:68:db:56:bd:8f:82:
                    30:d9:75:ff:67:79:1f:47:93:7d:e0:11:7b:bd:5c:
                    70:a2:9a:66:da:8a:2a:ca:de:b5:1a:5a:af:ac:48:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6A:91:8A:79:D7:B9:48:A5:51:8F:5C:30:74:02:4F:45:E8:A9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:ae:82:bd:47:63:ce:70:fe:7b:d9:2f:c5:1d:e6:c0:08:
         27:4c:56:42:30:a0:5b:6f:94:b9:1e:39:a4:ef:fe:7b:fb:36:
         c0:44:fe:8c:44:d9:5b:69:a0:47:0d:d6:a7:bf:64:77:a0:de:
         9e:ed:db:51:bb:57:ee:80:3a:74:73:ed:1d:22:20:16:b6:e3:
         ce:fc:55:29:30:61:1d:c1:55:33:21:9f:06:16:03:ac:61:85:
         cd:ef:bf:3b:48:01:8d:ed:6e:1e:2e:f5:43:bf:e3:38:12:bb:
         3b:1f:5b:45:01:b4:9c:de:4f:c0:f8:e6:8e:63:f0:c7:44:bc:
         04:c5:d4:f6:cf:4d:6b:d6:7b:07:77:d2:1a:13:cd:f7:0b:31:
         57:95:d9:e1:c2:e1:bf:77:38:01:f6:44:80:9d:83:8f:74:05:
         07:d4:67:2e:70:c4:67:9d:a9:b4:be:17:af:6e:8a:8c:9b:26:
         7c:b8:fd:16:05:8d:1d:c4:fb:45:f5:fa:47:8e:97:e8:d5:66:
         b1:59:59:04:1f:8b:4a:d2:fc:78:17:89:24:b2:2a:e6:ac:97:
         9b:db:84:21:a0:6c:52:86:c0:68:75:00:36:89:9c:5d:9d:c0:
         7e:b7:4d:16:8a:ae:4f:52:b8:d6:98:7e:c9:6a:09:bf:13:b7:
         9d:03:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:46 2026 by rpki-client