Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
File:                     01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa (raw, json)
Hash identifier:          LveqJCDU/uT/dozSGYT768hf8S/95czc52fbX6dvOl8=
Subject key identifier:   CF:3A:DC:0B:D9:AE:18:7F:49:5B:3D:01:97:3B:BB:F7:46:91:B8:B4
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584D47C4E35986EAF8F084988D80
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        144.81.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e3:59:86:ea:f8:f0:84:98:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=9c1d7008-ac79-4450-b0cd-1340134b9ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:bb:b7:8b:fc:02:40:1f:43:73:a8:60:9b:
                    52:13:d5:55:ab:e5:0a:16:11:d4:60:c3:79:41:18:
                    75:6f:65:96:46:15:c0:9b:43:16:cf:e1:eb:8f:23:
                    b8:bf:c8:46:b3:47:e2:1b:7f:c7:ba:cf:fc:1a:cf:
                    31:e8:7d:3c:a4:68:d0:d1:92:09:ef:70:df:87:14:
                    52:d4:1e:8f:27:d8:51:df:47:7f:95:9f:ca:f3:39:
                    c7:83:0b:71:bf:78:a6:8a:61:fa:11:a3:1a:5b:0d:
                    f6:2c:05:6f:80:48:fc:31:10:a7:63:85:5f:96:2f:
                    29:6b:90:c8:91:5b:ca:94:40:4a:a3:6b:b6:46:53:
                    37:05:d6:58:f2:49:89:14:18:20:49:0e:89:be:70:
                    d2:3f:4d:3e:3d:15:f1:9c:01:78:30:2b:3b:89:29:
                    19:84:cb:35:1e:97:51:8b:40:c3:8f:a3:4c:ad:6f:
                    02:c0:8c:54:ae:75:29:65:36:80:2a:f7:b0:90:87:
                    d3:fd:d5:2a:c7:c5:5c:e2:4d:fc:b7:b5:10:17:69:
                    00:b6:b2:a3:d3:6d:93:81:7b:d7:99:e6:7d:a1:54:
                    44:f5:38:55:b6:83:93:ec:f7:17:79:47:27:85:4e:
                    9b:fd:4e:d3:54:6f:42:ac:a3:7d:1c:84:c8:58:30:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:DC:0B:D9:AE:18:7F:49:5B:3D:01:97:3B:BB:F7:46:91:B8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:28:d9:d2:50:2d:f9:ff:db:1d:78:d9:07:f8:f4:ad:6e:
         76:22:1d:17:a2:82:44:5b:a4:73:54:75:b6:e4:75:6a:d3:2c:
         b9:41:5a:e1:3b:eb:a5:4c:16:93:09:da:ac:eb:ce:37:63:14:
         cd:87:72:2c:0f:46:23:38:3f:01:ac:00:ce:72:1a:c7:16:5d:
         ed:97:58:0d:1f:87:9c:75:cb:ab:08:af:55:93:aa:da:d3:10:
         c4:44:8d:cf:5d:52:0a:92:47:19:16:6a:c2:cc:b6:1e:e8:39:
         f2:f8:f4:31:bb:78:cf:aa:0a:8e:04:09:96:fd:47:b7:93:63:
         02:97:d2:c3:4e:22:84:2d:e9:9f:10:7f:11:5c:bc:56:7c:a8:
         31:61:87:f7:f2:c8:1d:50:9f:fa:27:d7:ef:c1:d9:9d:a2:1c:
         bd:bb:92:91:9c:5e:f2:02:10:c0:5b:53:68:e7:f7:4b:37:c3:
         e4:d2:49:bd:23:05:54:fa:48:38:e9:e6:e0:de:f2:ff:52:50:
         22:0a:e6:f8:7e:6e:e8:55:b9:05:f5:2c:fd:c4:6c:ef:f5:0d:
         d4:6c:ac:59:1e:ca:68:47:aa:50:3c:6b:f7:29:7d:87:c8:5e:
         6c:c6:89:c9:b0:ba:34:ff:9a:17:a4:56:72:d8:c4:bf:9f:ad:
         a0:b3:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:44 2026 by rpki-client