Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d79db62c-8a11-3d39-b5b0-56229aa118c4.roa
File:                     d79db62c-8a11-3d39-b5b0-56229aa118c4.roa (raw, json)
Hash identifier:          r/ZYuCDvHm5wZc9cBYyl5Ir1ef1iCTlex45Ptfyk9mI=
Subject key identifier:   1E:D6:D1:49:00:69:CF:A7:F0:A8:88:52:70:EB:A8:66:27:7C:19:02
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64F8C5D4DD3771F1120C00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d79db62c-8a11-3d39-b5b0-56229aa118c4.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     36627
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f8:c5:d4:dd:37:71:f1:12:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=44039843-155b-40c8-bb8b-95c53e3c8618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:10:19:67:37:9e:bc:2e:ef:c6:83:df:56:
                    0b:1d:e6:19:30:99:1d:60:9d:8e:b6:5f:42:af:22:
                    c7:b3:8e:0b:65:eb:a6:22:c1:76:e3:9c:d4:f0:ce:
                    d2:ee:7c:73:af:e8:9e:f3:05:2d:58:b3:e1:42:56:
                    be:c8:61:0b:87:1c:1c:43:fe:20:8f:cf:9c:bb:1c:
                    9e:45:11:43:e3:fd:43:cc:14:a9:52:b7:ee:c3:9c:
                    5a:fb:3a:a7:98:16:4f:e4:9e:76:e9:65:93:20:5d:
                    97:d6:a1:c0:43:e8:01:21:f9:6f:66:43:db:b6:12:
                    06:c7:f3:1a:f3:9b:68:98:5b:57:92:ad:ff:07:da:
                    ae:46:12:23:e0:af:3f:06:ef:05:7b:e9:8b:4a:f3:
                    cd:aa:06:74:54:d1:05:19:ae:48:93:45:dd:2b:cb:
                    78:db:8c:cc:09:96:47:61:01:d8:e5:e4:20:f9:17:
                    3b:2c:5b:18:20:f4:e5:fc:46:0b:48:c2:98:0c:c5:
                    89:84:c0:cf:ec:4a:ed:20:b9:d9:3d:01:b3:9b:1a:
                    38:58:a6:2d:1a:74:c4:4b:a5:28:7b:19:f0:3b:6b:
                    a6:88:98:65:fd:c4:dd:d0:fc:85:90:d3:a4:57:99:
                    e0:0c:5c:ae:fe:db:28:3a:07:0b:64:31:97:18:31:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D6:D1:49:00:69:CF:A7:F0:A8:88:52:70:EB:A8:66:27:7C:19:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d79db62c-8a11-3d39-b5b0-56229aa118c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:60:cf:74:38:fd:5a:dd:31:aa:a7:8a:76:ee:36:a5:2a:d0:
         35:8f:0a:1e:a7:46:34:44:b7:ae:0a:7f:bc:92:96:4c:83:33:
         ef:c2:cb:76:33:02:71:3f:0a:f2:84:79:4b:8f:11:89:1d:bd:
         9f:53:6d:c9:03:05:74:a7:22:89:7f:8e:5d:a7:d7:dc:87:8a:
         ee:f2:06:95:a7:1d:45:a6:52:49:24:c0:0d:b3:f3:eb:06:f7:
         36:a3:48:95:ce:de:a6:77:86:83:5a:b8:f2:3d:b4:50:cf:ec:
         72:50:b8:0f:63:77:e3:45:64:96:db:ea:31:f3:b7:5a:56:83:
         4c:ac:e1:e2:8e:cf:c3:59:8f:85:53:02:fd:5a:62:fe:a5:71:
         b1:2c:ca:58:18:2d:1a:11:fd:18:7b:84:61:de:1f:a4:fa:c1:
         e6:cf:4d:71:d0:f0:82:f4:ab:b8:e9:36:c0:09:b9:4d:b0:53:
         e4:39:d2:ea:65:3f:b8:05:61:0d:d0:8b:36:5e:9f:ab:0a:ab:
         c0:43:c0:37:f1:cf:5a:70:1f:3f:b3:f9:80:6c:7f:7c:2e:13:
         12:a8:86:f4:f5:9d:1d:37:67:65:85:ea:03:e9:f9:ba:26:6d:
         f0:6e:a0:1d:ed:8b:12:cf:d1:3e:f1:03:59:73:12:90:5b:08:
         a3:02:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:07 2026 by rpki-client