Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa
File:                     4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa (raw, json)
Hash identifier:          rpAMsIHC8DyJhPfRWokVPuSG1n4h5rOXjwM+WKe56g8=
Subject key identifier:   BB:BC:16:75:EF:72:B4:6C:77:84:57:32:99:09:FD:5F:CE:AA:CF:FC
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584D3F64E1C35A1BE8C872EB2BC0
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     55091
IP address blocks:        198.73.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e1:c3:5a:1b:e8:c8:72:eb:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=83475ae8-3234-4422-b8d6-c1052a2a62e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:9f:7e:07:5e:87:97:dd:e1:d4:c0:f1:42:
                    21:31:dc:a4:8b:91:97:60:20:42:51:44:1b:8a:d1:
                    08:06:ce:67:36:d5:d8:8d:48:6d:59:a1:a8:b9:cc:
                    b5:c2:44:e6:0f:fe:d5:5c:6d:e5:6b:ce:fa:40:6c:
                    87:5e:a5:89:1b:47:1a:57:5e:73:54:63:d6:bd:d9:
                    1a:9b:4f:43:b8:1b:3a:77:dc:77:c0:c3:33:ce:37:
                    94:98:50:e1:de:87:ad:75:a7:4e:14:61:b0:97:d5:
                    a1:5d:9d:0e:4d:32:5c:c9:2f:bf:b2:2a:c8:85:af:
                    4a:77:86:a2:d5:e6:75:18:1a:9e:e6:6d:06:fa:1f:
                    72:c9:cb:ef:c9:d3:d1:97:45:35:c1:1d:88:a3:b9:
                    00:c0:06:3c:49:aa:da:0e:14:4f:51:da:75:2b:fb:
                    7b:6d:df:90:b6:9a:46:eb:a0:e7:fe:b0:e7:d0:ed:
                    ed:ed:88:55:f5:f3:5b:d1:64:9f:6e:c2:63:f5:4a:
                    8f:43:cb:14:c6:d9:5a:79:b5:8a:2c:44:be:31:40:
                    64:05:d5:ba:9e:20:bb:d9:1f:be:bb:4e:4c:e7:04:
                    91:04:36:67:09:8a:84:57:6b:2b:28:07:7b:66:bf:
                    9b:cc:f1:f4:19:92:6e:57:3d:ab:e5:4d:4d:67:58:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BC:16:75:EF:72:B4:6C:77:84:57:32:99:09:FD:5F:CE:AA:CF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/4faf3ccf-c247-3223-99e7-64fd106ebfc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2b:d0:1f:56:ed:3c:b7:c1:b1:dc:55:14:b6:e2:40:73:ad:
         f3:0d:35:2d:59:74:eb:3e:b5:d2:9b:68:ec:f8:05:f6:62:16:
         46:0e:52:f1:97:ee:05:6d:7e:c1:c4:4e:ef:2e:8c:f6:a9:81:
         dc:2f:59:c2:30:14:5c:62:03:0a:1c:26:21:2c:12:65:6e:1e:
         40:25:43:42:c1:46:57:a4:a1:c5:01:27:68:a7:17:4d:1a:12:
         7f:35:55:4e:4e:a0:22:8e:86:16:d1:14:ee:a0:ff:c6:46:e6:
         03:b3:81:04:d8:b0:26:a9:f1:14:5f:ea:85:c4:41:d3:8b:58:
         0a:9e:8a:c7:a8:45:6d:24:a8:91:66:3f:e6:0f:d4:e2:32:aa:
         90:96:24:6f:47:18:9b:4f:c8:76:7e:7e:d6:bf:ef:59:3b:bb:
         3b:ea:04:29:2d:7b:b8:be:3a:87:0d:fa:70:95:e0:fd:60:19:
         5b:56:bd:43:10:99:4f:d2:0b:c1:8a:71:b9:5d:a8:24:e4:db:
         ae:f7:46:40:43:1b:13:d9:e4:d7:59:27:cf:86:47:fd:2c:ed:
         49:e2:54:eb:86:82:96:67:30:48:02:9c:4b:00:28:f0:0f:45:
         f5:55:1a:63:15:66:c7:29:c8:b1:14:95:09:bb:95:9c:82:de:
         a0:65:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:38 2026 by rpki-client