Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa
File:                     376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json)
Hash identifier:          qhB7kEWhSt/na+m2OOFgVhtAjOtj3M6+iPT1ZS28+VM=
Subject key identifier:   81:B2:30:AA:9D:8D:54:7C:BA:8B:36:B0:ED:D3:30:8E:D8:E5:75:34
Certificate issuer:       /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
Certificate serial:       010D0C9F4328584D15A2699FE10D2DBA8E53B100
Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     55159
IP address blocks:        64.89.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:69:9f:e1:0d:2d:ba:8e:53:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=7453ff9f-56da-425c-9695-af507c71385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:4f:19:50:fc:5d:2d:be:8d:0d:27:07:95:
                    8f:61:b3:1e:8b:5f:6b:04:87:3a:80:71:d6:84:1e:
                    4c:a6:62:19:2f:62:cc:3e:cd:51:71:6b:7f:2e:89:
                    e5:59:f9:3a:4b:d7:91:dd:c1:ad:e3:71:57:6a:fc:
                    a4:cd:6e:24:c8:96:bd:34:5e:97:68:76:a0:f3:5b:
                    15:c6:55:f5:71:4e:12:5e:de:88:90:7a:01:f2:2a:
                    35:40:e0:36:dd:75:a8:2b:16:84:be:ed:5f:9b:ee:
                    b8:62:29:3a:54:c5:32:4d:ea:63:f4:14:92:b6:c0:
                    05:c7:2e:8a:c6:91:a6:2d:cb:ca:ce:cf:86:c5:0b:
                    5c:c8:c6:33:fb:c4:fd:ce:b5:be:2a:3f:f5:c7:1b:
                    f3:2c:22:41:0b:d2:2f:0e:77:7b:94:09:b2:17:fc:
                    83:6c:51:82:22:7d:ee:9e:b9:17:6c:74:3d:87:c4:
                    07:80:df:7f:70:4a:eb:b7:0c:22:4c:c9:f6:6f:80:
                    29:4d:bd:97:2b:b2:1f:8f:f1:d7:fc:97:b7:a4:07:
                    4a:ba:eb:a9:a7:7e:32:c3:99:3e:2e:fd:6f:04:79:
                    f2:fb:4f:ee:b7:4d:91:4a:5b:67:0c:b9:ff:06:90:
                    33:c5:64:3e:57:7e:59:2c:5d:2b:80:90:c8:36:0b:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B2:30:AA:9D:8D:54:7C:BA:8B:36:B0:ED:D3:30:8E:D8:E5:75:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b0:37:a4:1c:16:e4:cf:6f:c0:f2:c2:21:82:21:0b:70:e8:
         2e:90:8f:a0:1f:d6:cc:63:c5:25:c2:4b:3c:de:3d:7c:08:5b:
         ae:94:1c:30:2e:44:53:0a:51:12:13:b0:1f:53:1c:a2:41:23:
         6d:dc:56:53:fc:9f:05:12:ea:19:0c:58:e7:94:41:a5:e2:e6:
         e9:ac:b1:18:d7:12:7c:48:59:d1:db:1a:37:df:30:a5:35:09:
         6a:31:cb:6c:9d:52:5f:29:df:65:aa:1a:0e:c7:ed:6e:c9:56:
         48:6f:a0:66:78:30:0e:0a:56:67:b7:7b:ec:bc:26:25:a5:6e:
         b6:71:18:ed:f7:a8:c2:d3:24:2a:88:75:3a:5e:9f:b3:40:a2:
         76:5b:4f:10:b1:9c:eb:34:a1:f5:45:d2:4c:9e:48:02:3c:e4:
         68:39:8e:d4:fc:59:71:01:5e:c0:42:49:13:c8:01:5d:e3:e8:
         9c:31:39:13:d5:d0:19:75:92:2a:fe:cb:db:6c:16:9d:ec:b2:
         49:48:39:2d:5a:0d:85:b4:6e:be:27:e7:2d:0a:3b:00:ad:79:
         89:a6:ed:10:58:b6:ac:2f:f5:79:98:b2:06:4b:35:eb:c8:e6:
         4d:29:5d:60:0c:39:ed:4d:33:e2:3f:7e:e9:bf:7f:17:b8:2b:
         32:e7:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:34 2026 by rpki-client