Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189437d5-679a-385f-9723-0c040c389c9c.roa
File:                     189437d5-679a-385f-9723-0c040c389c9c.roa (raw, json)
Hash identifier:          kT/Yue18oa+5XV4Whc7nq7Y/Kai7832GUIhacg0zrEs=
Subject key identifier:   94:A5:07:D6:C2:38:B8:0D:F0:B6:D6:37:60:A0:DD:07:0F:24:82:A9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FD71223EF097BF909270
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189437d5-679a-385f-9723-0c040c389c9c.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396555
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fd:71:22:3e:f0:97:bf:90:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=80335677-c3e6-4aee-b68d-2f0390d7eb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:11:06:a2:78:ec:3e:65:15:14:96:59:76:1b:
                    e4:6a:29:59:4a:c5:ea:f1:41:e3:e2:37:ff:ab:72:
                    b8:11:d7:ba:b4:72:ff:2a:97:cd:af:b0:c9:b3:0a:
                    a0:0d:c4:a8:e3:b7:36:b7:e6:c3:37:4d:66:f2:37:
                    72:e1:c6:4a:34:7f:2c:0b:f6:e7:e8:1a:e8:6d:35:
                    06:6d:c1:aa:e3:44:14:ab:39:1d:32:53:a4:63:08:
                    d6:07:d4:40:55:fa:97:c0:16:34:9e:17:46:07:cc:
                    5c:36:10:6f:3f:aa:e1:54:5b:ff:58:46:17:7f:c8:
                    e4:90:f8:7e:7c:b5:3d:90:fb:db:86:13:86:9c:5c:
                    41:cb:de:0f:b6:65:34:36:17:1c:d8:ab:7e:c9:bc:
                    9e:c9:a9:c8:c0:43:7e:2c:b5:5d:7a:8d:30:ae:70:
                    2f:7b:dd:76:a8:be:5f:e7:86:b3:7e:4d:96:36:28:
                    f8:83:37:c9:eb:ed:36:f1:cd:96:99:36:61:13:9d:
                    87:4f:d9:a3:cc:92:58:52:87:10:6c:1a:48:df:55:
                    bb:d5:7c:1a:86:a6:26:bb:51:f4:36:81:c0:ed:46:
                    56:7f:b1:fe:5f:b0:2f:ea:8f:28:79:5b:9b:64:67:
                    72:9f:e9:fe:f4:c1:cd:c2:13:81:4a:7b:69:1b:fe:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A5:07:D6:C2:38:B8:0D:F0:B6:D6:37:60:A0:DD:07:0F:24:82:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189437d5-679a-385f-9723-0c040c389c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:a8:10:ad:f7:c4:88:66:5a:54:79:4b:fc:5d:86:8e:44:
         6d:c5:ad:f9:53:9b:d8:ff:52:84:db:0e:ea:64:ee:93:2f:f3:
         c6:11:64:e0:70:dc:c1:cb:93:10:de:8a:5a:86:26:91:b0:63:
         e4:d1:81:f3:1a:7b:7f:5c:25:e3:c5:53:1f:f9:dd:85:e3:4b:
         d2:74:5b:9a:5b:89:62:b2:01:71:07:31:dd:5a:3e:4d:ce:8d:
         72:5a:ad:22:b6:b8:57:a1:d7:1b:bd:2a:13:18:c7:41:0c:5f:
         fd:f1:af:8a:47:b1:4e:8d:95:15:7f:16:66:b5:e9:25:a7:8a:
         e7:81:d6:d2:c7:89:11:22:9c:09:6b:8c:e1:83:3e:16:3f:7a:
         44:76:76:95:38:71:8d:7f:b7:48:c8:ce:25:37:25:d4:aa:0c:
         c5:14:05:5b:f5:1a:75:da:ad:24:f3:d4:02:92:d8:1c:fe:ad:
         61:09:d1:50:ca:75:59:c1:4b:91:0b:03:af:db:0a:33:4a:a4:
         3c:fd:b4:ba:13:ad:d2:26:ea:b1:b5:18:6b:cf:f9:49:34:32:
         76:ca:e1:3c:5f:dc:18:65:0b:d7:e4:4e:59:e4:65:cf:e9:c6:
         ac:72:ca:aa:e1:36:27:f7:3a:39:6f:0f:15:ee:27:03:72:66:
         3d:c6:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:50 2026 by rpki-client