Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/b0ea49d2-b2ae-3f53-ad6f-69b000517938.roa
File:                     b0ea49d2-b2ae-3f53-ad6f-69b000517938.roa (raw, json)
Hash identifier:          4GyhSFTAd9haMG6k1LxvkuJXuwTEgVPSL9a5/kh+M4A=
Subject key identifier:   62:C9:D8:7E:16:4A:0E:F0:6F:8A:0F:81:C4:2A:C8:3B:85:7E:BA:90
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F4328584D359FDA06381A43BE94003E80
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/b0ea49d2-b2ae-3f53-ad6f-69b000517938.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     11426
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:06:38:1a:43:be:94:00:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=5634dfe5-d865-4515-b5a7-b059a19f977c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:ed:f7:16:3b:88:fe:87:11:91:ec:78:87:
                    f5:49:a8:b2:ee:78:a9:78:29:ff:c0:cf:46:be:03:
                    cd:28:af:58:3f:9d:9d:1e:a5:1d:55:1a:dc:fd:84:
                    74:7a:2d:d9:8f:00:40:8d:85:cb:e7:46:61:38:fb:
                    2a:e1:c4:67:d6:dd:0a:ef:f1:2d:9b:be:9f:e9:d6:
                    e5:b2:3e:ea:ba:c1:2b:cb:7b:bd:f9:25:6e:41:1e:
                    28:81:35:7c:8e:3c:af:e0:cd:b3:a2:47:ad:b3:56:
                    af:34:ff:1c:73:a6:af:a7:2d:f6:5c:93:2e:a8:bb:
                    8a:51:ed:f6:51:fd:50:ff:3a:01:d9:39:fd:23:8e:
                    e3:71:25:a4:04:b3:c6:48:6e:8a:97:84:a4:b1:74:
                    a8:54:91:fa:81:55:02:a5:35:62:c0:f3:1e:63:c2:
                    27:1f:8c:34:dc:d0:46:9b:62:1a:c6:5d:fc:25:af:
                    f3:19:77:47:22:ad:13:67:67:fe:01:64:d4:75:48:
                    9a:7a:77:3b:de:88:9b:8b:a5:d3:3e:9b:cb:b5:12:
                    de:68:4b:7b:d5:50:44:49:0c:a4:42:52:79:8b:db:
                    15:4c:c1:f6:42:b8:2b:b4:6a:13:7a:7e:03:d7:a2:
                    64:ed:cd:52:99:f0:21:ac:e9:3a:e4:d4:e6:82:f9:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:D8:7E:16:4A:0E:F0:6F:8A:0F:81:C4:2A:C8:3B:85:7E:BA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/b0ea49d2-b2ae-3f53-ad6f-69b000517938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:14:06:95:e0:44:6f:19:03:3b:3a:fa:bb:72:e8:13:5c:
         95:a0:66:06:f2:ec:6a:d0:66:ff:1e:c6:43:a3:03:44:fb:78:
         09:df:95:2e:35:3e:7e:13:46:0c:11:c3:bf:df:dc:27:8e:3b:
         2e:ac:0f:34:75:8a:36:a0:24:7e:79:69:a3:f7:e9:0e:79:f0:
         02:0d:7e:3d:16:fb:14:44:3a:b6:85:00:b4:52:0d:75:f2:b6:
         02:5f:1d:9e:cc:ec:e6:b9:98:54:02:85:6b:fc:4e:b3:7d:f4:
         81:19:86:6c:d1:1e:82:fa:5a:7c:f4:81:6c:40:a8:01:50:02:
         db:c4:ee:36:1d:82:12:32:1e:1b:cd:1a:df:e2:a9:0d:79:1c:
         d2:a1:45:fd:39:46:70:7c:9e:13:0b:2a:09:23:19:ce:5c:70:
         7b:32:b1:5e:5f:50:07:f5:3c:23:13:63:69:cb:3d:c6:42:1a:
         ad:0e:7a:96:f2:55:ad:8f:27:69:45:1c:cc:4e:90:6d:ca:09:
         18:03:6b:b1:a0:11:d7:bb:27:a3:8f:0a:53:32:3c:01:8a:e8:
         5b:a4:93:4e:ce:15:87:9d:f5:7d:08:8e:6e:3b:0d:15:fc:13:
         bd:e5:f2:62:0a:a3:c3:15:47:b1:05:21:06:9e:73:42:29:9d:
         02:86:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:53 2026 by rpki-client