Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa
File:                     0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa (raw, json)
Hash identifier:          OdKoh/Q4KHGAM6wJzBus+iwKI26jJ89lXi3PQVV9nZA=
Subject key identifier:   4B:AB:C2:87:87:48:84:92:2E:56:66:B8:D0:E4:DD:A8:F4:6A:8B:79
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584D300A4EF15C96471EB1401440
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6621
IP address blocks:        67.44.0.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4e:f1:5c:96:47:1e:b1:40:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b5e0c03e-3d1d-4c02-8f20-b66195b92f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:d4:fd:c2:a7:f6:ac:b6:fa:14:69:89:48:
                    27:14:b0:f8:31:63:3d:c3:7f:f5:a4:15:2a:d8:da:
                    2b:31:35:63:76:ec:27:bd:6d:a0:8d:5f:16:a9:bb:
                    20:28:37:cb:63:89:47:2e:09:f6:5e:01:80:4c:c6:
                    7b:15:e8:23:f8:2e:18:f9:cf:f5:5b:91:87:b3:e6:
                    74:aa:6c:e5:13:f4:3d:85:5d:3e:ff:d3:95:d6:16:
                    58:82:6a:a6:77:72:49:7d:d6:97:7f:1d:2c:ef:60:
                    9b:35:83:c3:77:d7:74:58:42:0a:d9:6c:aa:2a:2b:
                    10:59:4c:1c:c0:6b:7f:dc:da:70:97:ed:e2:a4:4d:
                    f3:22:60:6c:9b:6a:47:15:6b:ca:7e:3e:a5:bd:71:
                    f7:7a:a8:04:19:ea:50:0b:62:97:83:52:8c:e9:18:
                    34:28:2f:34:c9:c2:17:d0:8c:99:62:67:88:5e:52:
                    d5:f8:f7:22:51:b8:48:53:58:df:2e:f5:72:00:95:
                    9a:4d:f7:fb:a7:57:dd:9c:0b:96:9f:8c:40:45:ac:
                    67:55:6c:80:9d:4d:6d:ff:f0:e6:b3:cf:2f:03:ee:
                    23:fc:70:da:f5:12:b4:bc:8a:89:98:64:3b:96:74:
                    20:1f:4b:5e:96:8c:89:63:35:7a:02:a2:03:c8:45:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:C2:87:87:48:84:92:2E:56:66:B8:D0:E4:DD:A8:F4:6A:8B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:22:63:94:43:0a:51:48:a5:37:83:3a:cc:6b:b8:52:9b:df:
         b1:7c:57:56:a0:9d:14:67:83:39:00:b0:1d:17:0a:b6:04:0d:
         69:c4:09:65:46:15:17:af:c9:ac:a8:e5:aa:cb:56:95:e8:77:
         f4:37:80:47:fb:f3:41:49:f3:f3:ee:89:46:73:d3:13:bf:b9:
         a8:88:9e:ab:6c:d9:c1:c5:43:2b:43:b4:7c:64:fb:10:a3:8b:
         54:d3:9a:56:2e:b6:63:ae:c2:d8:b8:9e:41:ad:6c:9c:e3:5f:
         73:23:d5:15:88:bc:69:5f:64:b3:b0:49:2e:24:c8:5e:09:f5:
         b0:73:a4:a2:3e:e5:48:36:f9:21:1d:bc:07:1c:7f:ce:cf:7f:
         3b:aa:a3:5b:c4:a3:17:bf:0a:c5:eb:5c:78:1b:68:a7:72:4d:
         5f:12:17:b6:f8:fc:39:67:43:aa:e1:60:3f:56:26:89:9e:cf:
         c7:bd:4e:cf:c2:fb:60:d1:74:4f:8a:0c:b0:4c:bd:29:c9:19:
         05:43:9f:2b:d2:ad:47:90:fe:31:da:56:c2:6d:00:37:00:f9:
         c0:d8:bc:5a:b0:ae:80:70:40:4a:18:30:5e:1e:fd:12:c3:f4:
         2f:23:fd:1c:d3:11:b7:71:ea:32:32:8f:b6:16:aa:d0:11:7c:
         1a:da:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:28 2026 by rpki-client