Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
File:                     ad31075d-6561-3431-956d-53bb1915b644.roa (raw, json)
Hash identifier:          ViPG37Ru0DO+dCNAMk/M1QRzYhuwTPYHrzi2LFOzESs=
Subject key identifier:   E0:34:74:65:88:8E:6A:45:0C:A0:8A:59:73:C0:D9:A5:41:CC:CB:07
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584D40CA47C9ECA7A34A5E9E5380
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        192.161.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:47:c9:ec:a7:a3:4a:5e:9e:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a3a47d52-e582-4f22-b6bd-88a7f73086c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:08:3a:10:9e:bf:f8:26:f4:b6:c2:94:f4:
                    0a:31:cb:29:5e:8b:fc:78:7b:0f:ad:ee:e8:d7:69:
                    c3:ed:9f:c9:7e:59:64:2e:e3:0a:2a:52:18:a1:1d:
                    8e:8b:7d:c4:c3:24:fd:c5:ba:dd:a5:8d:9a:70:d5:
                    26:69:74:38:b5:d4:46:11:b3:50:a8:63:57:d6:1c:
                    ce:c1:a3:c8:dd:b8:e4:34:ed:6f:58:b8:89:f8:73:
                    8d:a0:ac:93:63:4b:d8:d2:75:5d:03:3e:21:da:dc:
                    2f:da:a5:c6:34:12:19:36:16:39:fd:d1:9a:a7:b6:
                    51:33:37:82:52:34:ab:c3:00:40:bb:a6:0d:e1:ac:
                    01:b6:78:2d:1c:09:e7:0d:3f:cd:b6:e9:09:aa:b6:
                    83:ef:e2:bc:8a:98:95:5e:f5:92:ab:9c:3c:d2:a7:
                    62:d8:6f:b8:6c:58:88:1c:e3:b2:f0:ff:18:ec:b0:
                    8b:e3:93:b5:96:12:30:85:2b:8b:8b:00:0e:8c:59:
                    f4:29:9d:83:61:c7:ab:66:d0:cc:2e:d5:2c:fa:64:
                    01:4f:d5:f4:95:9d:e1:fd:f2:e7:08:c7:a9:84:24:
                    f4:eb:d5:de:dc:d2:3b:12:c6:53:b4:ef:c0:e4:c6:
                    25:a5:4a:85:0c:17:57:63:9d:7b:79:50:89:07:1b:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:74:65:88:8E:6A:45:0C:A0:8A:59:73:C0:D9:A5:41:CC:CB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:7c:9f:71:24:61:74:a9:2e:a3:ad:5d:6e:fa:16:35:21:
         6a:a0:a5:1f:00:32:1c:cd:8b:44:39:f3:a1:63:00:f2:20:20:
         26:b4:03:b4:9d:ed:a3:42:15:fb:ce:85:cb:6a:fc:ae:3c:59:
         40:ae:a7:6f:b4:43:64:a8:9b:85:1c:45:50:5b:6c:ea:fb:b0:
         c3:a1:24:b3:07:56:1f:6e:6c:8b:0d:e3:5d:20:e8:47:2c:27:
         1a:ec:04:e1:66:a5:bd:64:81:bb:6c:dd:ba:f1:cf:4f:7e:2d:
         27:fe:f2:59:4a:9c:01:c6:4b:cd:fd:6d:68:ed:cb:f2:bd:70:
         15:30:f4:04:f0:ad:2a:b6:ed:ff:81:6b:50:79:e6:d7:da:72:
         49:eb:f3:2f:75:c0:e8:fe:b8:4c:f6:2a:26:72:c6:21:d2:87:
         bc:bd:44:7b:6a:25:9e:41:ac:f6:31:5c:7d:ba:40:9a:df:c2:
         37:a3:9c:f4:8f:a9:89:34:52:97:97:16:22:f2:bc:b1:7e:ae:
         b1:9f:0d:4d:cc:16:26:5e:bc:f4:12:ed:5d:70:8d:be:51:c4:
         ce:9e:c3:1a:9f:2e:75:06:fe:39:cf:08:f5:30:21:c9:a3:f2:
         b1:5f:d6:17:19:4d:ee:c5:49:18:89:19:f2:a8:65:7b:fd:7e:
         e6:76:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:33 2026 by rpki-client