Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa
File:                     d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa (raw, json)
Hash identifier:          6VBAWNeuAilOIzdcK2Oer02Lp8cq0ynT9ul85yJUMHE=
Subject key identifier:   3B:44:4F:38:A1:C5:F3:B3:38:31:10:77:A5:DC:3B:76:04:9E:E2:77
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584D3B34DE53FA552B762F7AF7C0
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     32277
IP address blocks:        204.50.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:de:53:fa:55:2b:76:2f:7a:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=6c045004-f82a-4ff8-adc8-98fc20dbe398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:fd:6b:dc:24:64:d7:f6:3d:ca:b7:df:9f:
                    a9:43:5c:9c:5e:e9:7d:26:fc:bf:a5:79:6a:17:6f:
                    f3:72:bb:6b:47:50:d5:2e:b8:7c:2e:66:5c:c7:c8:
                    59:62:eb:e3:5a:ff:f8:b5:8e:fc:03:64:98:e3:c3:
                    ce:2b:f5:0e:2c:fe:96:42:4c:d1:a5:30:cf:2b:f9:
                    48:51:09:b1:3e:0c:10:52:d0:12:a3:1c:3d:23:50:
                    16:f9:4b:95:1d:0e:50:ed:cf:99:f9:ac:8c:b0:52:
                    77:8f:fb:b7:d9:0b:79:50:28:e7:c4:ea:45:73:f0:
                    46:95:40:e2:21:c6:aa:21:bc:13:fb:c5:28:00:4a:
                    f3:77:9f:24:be:f6:7e:b1:e8:4f:bc:ff:1f:25:aa:
                    80:91:91:84:ea:5e:47:aa:1c:d1:82:85:f8:d9:f5:
                    3c:f1:ac:c2:99:49:35:fc:71:19:d9:fd:8c:1a:e0:
                    cc:3f:54:b3:07:88:e0:70:db:bf:77:46:5d:e0:f4:
                    e9:99:09:36:4b:f7:87:12:ba:b1:13:72:0a:73:77:
                    65:41:fd:7e:95:8f:5b:15:2a:d1:00:d2:ba:31:33:
                    64:ae:fa:46:93:6a:41:b7:17:95:2c:20:f2:ed:8a:
                    5b:26:0b:62:14:70:04:86:40:81:18:d9:ad:ed:54:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:4F:38:A1:C5:F3:B3:38:31:10:77:A5:DC:3B:76:04:9E:E2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.50.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:50:21:1d:a2:19:55:99:80:70:c8:f6:80:30:3c:61:c2:
         f4:03:31:af:f1:4a:68:90:46:1c:06:91:9e:b5:1c:28:48:15:
         75:3d:a2:b8:b8:c5:fd:80:e3:e0:ef:63:57:a6:c7:4c:d4:24:
         38:30:94:e1:75:cf:ba:96:ff:29:19:30:9b:44:a5:58:6e:b7:
         64:61:5d:f7:de:92:3c:0f:67:51:f9:9e:e3:fd:15:f9:2e:a1:
         1e:53:ea:b6:84:fe:c3:2b:74:4b:f9:4b:1d:0a:45:1a:be:2a:
         7f:c9:98:01:ca:18:69:da:63:4f:50:03:8c:c4:a9:73:81:f2:
         12:fc:c1:d2:8d:eb:ea:a6:27:c7:e4:6b:f0:68:bd:d2:cb:ef:
         4e:b4:83:10:bd:d2:d4:f9:04:f5:1d:a7:8d:c7:16:db:2c:51:
         59:3c:8a:9a:fa:83:22:4e:09:6a:7d:3a:20:f3:3e:cc:1d:8b:
         fe:d7:06:e4:43:53:7e:0d:df:5f:aa:16:40:c2:bd:2f:ad:77:
         1f:b2:8f:3a:30:57:d8:6e:e7:d4:d8:de:ef:f5:b1:5f:01:db:
         03:08:f2:5c:16:0f:03:51:b0:00:6e:6b:ae:82:65:25:2a:9a:
         6c:75:53:d9:5e:00:36:16:5f:e0:04:3e:47:7a:73:62:5a:a2:
         53:4f:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:50 2026 by rpki-client