Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
File:                     51d3ada2-a449-3854-8c76-b066b8ac2408.roa (raw, json)
Hash identifier:          qxizxNgIJ3R95ttVxvGNoeSU3vGHXCDiJqoFrliCgqI=
Subject key identifier:   A5:F3:0D:04:1D:32:85:D6:DA:A1:43:D5:DD:B6:07:C5:63:1D:17:48
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584D3F64EC169F6D60439C425EE0
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     55091
IP address blocks:        198.73.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:ec:16:9f:6d:60:43:9c:42:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=1a73fdd5-8e8a-401d-a84c-1790a1a7b607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:16:8b:c1:e6:e2:20:29:88:d4:0b:42:0e:
                    de:21:c8:d4:d8:a0:68:e5:9d:85:33:d6:03:20:e4:
                    93:bc:67:68:dd:ba:5e:53:9a:49:72:b9:8b:f3:87:
                    f9:7f:19:b7:aa:95:e4:ae:f2:26:0c:4d:9b:09:a7:
                    10:a7:3c:30:72:72:7c:3f:f6:cb:33:52:79:6f:16:
                    ce:35:27:b0:6a:39:bf:ab:a1:d0:14:90:0b:17:b1:
                    d7:06:96:df:49:bd:c1:d9:4d:9e:b4:29:35:72:a2:
                    b5:ac:96:68:72:6d:a9:c7:65:33:24:ab:90:74:dd:
                    c8:54:ae:c0:63:f0:88:27:f0:6c:22:3f:19:4d:4a:
                    c4:d0:4b:d6:06:9d:ed:65:3f:7f:c2:10:ca:de:e7:
                    b4:b6:2e:96:99:b7:d2:50:a6:80:a3:f3:db:5e:6b:
                    2a:2a:4c:34:d8:2d:cb:34:6b:a3:68:cb:71:74:25:
                    83:3d:e3:e6:c7:f7:ef:93:19:87:6b:ff:a8:49:4f:
                    87:01:bc:a6:81:6e:87:e3:26:e0:ba:6e:2e:de:c4:
                    58:a2:03:fb:1c:63:80:62:3e:01:dc:0c:33:1a:33:
                    3f:65:2c:6f:b1:29:75:06:c7:4a:5d:f0:e5:aa:8c:
                    6f:09:97:ed:3d:0b:07:44:f1:7d:18:a5:ea:1d:5c:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:0D:04:1D:32:85:D6:DA:A1:43:D5:DD:B6:07:C5:63:1D:17:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/51d3ada2-a449-3854-8c76-b066b8ac2408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:14:31:b3:92:67:21:43:c7:aa:fc:a9:5c:41:69:53:ab:64:
         2a:1f:4b:08:55:88:98:fb:ea:e5:e4:c0:ce:33:5a:ec:b6:16:
         9a:9b:4e:8d:75:07:3b:58:47:f2:62:f8:34:16:7e:a1:4f:01:
         76:9f:44:ab:31:00:92:6a:8f:3e:ca:1d:9c:aa:f1:91:fe:39:
         51:42:a1:58:1d:be:5a:77:78:63:51:4b:ce:df:a7:c2:31:77:
         e1:55:f2:2f:69:c9:e7:64:0a:2d:af:ab:7e:f3:58:a4:e8:71:
         e0:4e:50:e5:c1:ed:63:be:f2:8f:e2:5c:37:60:e0:e7:2b:5a:
         c2:30:c8:35:0e:3e:5e:14:9a:ce:c4:7e:5c:e0:d6:56:34:10:
         f5:99:2d:77:21:a8:1b:b2:0d:16:f7:e2:5b:d6:2b:31:be:df:
         18:90:8f:06:46:0a:b3:6a:45:54:78:ac:f4:bb:42:dd:e7:db:
         14:97:07:fe:b1:25:2a:e4:c6:90:b1:3a:a8:65:17:44:7f:6e:
         49:f1:30:c0:45:ef:b3:74:37:2a:62:9a:4e:92:18:82:d9:a4:
         6f:84:78:43:fb:d9:88:43:c0:2e:7e:dc:a6:43:e6:2b:cc:3f:
         77:ba:86:b1:82:1a:64:47:b3:b7:f6:cb:6a:b7:8f:ae:33:1e:
         cf:82:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:29 2026 by rpki-client