Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d6ccbadc-b215-3d02-b528-bccc5fe75e99.roa
File:                     d6ccbadc-b215-3d02-b528-bccc5fe75e99.roa (raw, json)
Hash identifier:          fHTd+Itr9d3zJD9w0qsTbYTSxeCdhdIDfRme84a2U8A=
Subject key identifier:   DB:3C:BC:6F:2C:1F:A7:7D:FA:EB:1E:2D:99:7D:DA:30:32:E6:01:D7
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D316F643201264C56E39198F8
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d6ccbadc-b215-3d02-b528-bccc5fe75e99.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     18013
IP address blocks:        198.44.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:64:32:01:26:4c:56:e3:91:98:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=7fd871c3-997d-4a9f-a862-1c3e01604fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:58:a5:94:fc:2f:0a:04:8c:18:0a:45:0c:
                    26:68:82:3a:6b:63:46:04:36:f2:fb:67:52:ff:82:
                    39:e0:bf:ef:e4:81:6c:14:5a:bb:2a:e0:4d:bc:9e:
                    3c:44:7d:27:f4:da:a6:f2:46:f9:53:ae:22:76:e5:
                    b8:75:75:df:71:28:ab:b0:b4:1b:5d:ed:13:b0:4a:
                    a7:54:91:3e:6f:c2:34:1c:b4:4a:e8:48:a8:fb:fd:
                    31:e4:19:bf:a8:f5:1d:b3:fa:38:b5:79:ed:52:d5:
                    37:9e:82:69:24:96:8f:06:c6:6b:08:fc:6d:a0:e5:
                    32:18:de:1f:ce:08:02:32:ef:bd:fb:84:de:da:fc:
                    cb:32:fd:f2:95:16:ab:2e:cd:93:cd:50:43:d0:69:
                    0d:c0:97:f1:b8:05:35:09:59:2b:cd:74:e5:11:dc:
                    5d:5f:22:8a:d3:c0:3e:42:21:26:5f:b9:d0:1b:f0:
                    74:01:e1:13:e3:c8:dd:ea:08:4c:1c:ae:ab:09:b9:
                    03:9f:c6:2a:c4:21:1d:2c:47:f6:0b:6e:27:8b:73:
                    a9:2e:8e:fa:19:a4:84:46:41:f6:73:a5:93:91:be:
                    8c:b9:e6:16:9c:7c:62:97:b8:04:76:7a:1e:67:be:
                    5b:6d:fb:7a:84:7b:7d:59:fe:d7:26:f8:40:89:43:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3C:BC:6F:2C:1F:A7:7D:FA:EB:1E:2D:99:7D:DA:30:32:E6:01:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d6ccbadc-b215-3d02-b528-bccc5fe75e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:99:d6:18:01:ea:3e:75:be:2e:ff:5e:2d:f9:94:69:f4:
         11:7e:4b:87:ec:83:37:98:14:7f:30:33:bf:e4:48:fc:d9:8c:
         c7:eb:a8:4b:b6:ac:22:49:ae:52:59:60:be:3b:66:60:2d:84:
         f4:5e:14:6c:b8:b7:01:96:2f:ed:37:55:30:1d:c3:96:06:00:
         95:3b:e3:26:ef:82:a1:64:d6:b3:3b:01:b7:52:e2:f5:a0:96:
         22:35:41:6a:82:e8:81:ef:73:3a:80:95:47:19:da:2d:bd:3f:
         74:f3:98:33:ad:25:06:a4:b5:3b:d4:67:5c:47:4c:c6:41:01:
         9c:af:7f:db:ff:79:25:5d:84:fb:04:c9:ab:d6:30:13:e1:9b:
         7c:51:fa:c5:81:72:97:d6:a1:8d:91:96:9a:05:7c:88:fb:9e:
         e9:0e:01:3f:b3:7c:0f:49:68:5e:09:ce:45:51:14:7f:8c:87:
         7b:3a:c5:2a:86:cc:25:94:97:ab:40:38:f9:2a:bb:8b:14:7d:
         08:e2:16:48:00:b9:ab:40:35:a0:66:d6:ba:1d:04:e8:bb:5e:
         f5:69:c4:01:92:66:57:72:85:cb:49:d7:72:45:cf:0e:d1:40:
         90:41:80:da:43:64:17:c9:ee:05:07:0d:f1:2e:3a:a4:b0:15:
         e5:cc:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:55 2026 by rpki-client