Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/9d61cf2b-b2f6-38cb-858a-ef67fdd51760.roa
File:                     9d61cf2b-b2f6-38cb-858a-ef67fdd51760.roa (raw, json)
Hash identifier:          w23O/2lUMd8CiJtr+EMsvQNmQtqXfvqNQ8f5Tf1yZ94=
Subject key identifier:   74:C8:F3:08:3E:E9:09:52:54:F0:74:AF:9F:E2:69:71:C1:D5:E9:1A
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584D0D426F9642F35520415B8E3C
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/9d61cf2b-b2f6-38cb-858a-ef67fdd51760.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     395261
IP address blocks:        163.182.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6f:96:42:f3:55:20:41:5b:8e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=f1b272da-7bfe-45b0-9e6a-0093603b0a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:48:47:fc:b1:11:c2:53:c6:24:2b:0a:4a:
                    3a:4c:65:12:92:dd:ab:94:9f:42:ef:fc:3a:3c:12:
                    46:0c:5e:ee:4d:0f:66:d2:c3:67:79:2f:5f:8f:17:
                    61:2e:2d:67:72:93:0a:8a:ee:01:20:7c:44:2b:74:
                    d0:f2:45:e4:91:77:65:be:bb:4f:64:d2:01:3b:7a:
                    fe:56:1b:9e:5c:12:a1:7f:1e:87:db:4d:7a:0e:79:
                    ec:fc:21:8e:9b:d3:77:ca:bf:4a:13:60:75:53:c1:
                    52:7b:35:d9:9d:04:b7:81:cb:fc:3f:da:2d:5b:df:
                    bc:e4:00:b8:82:8b:8c:88:cc:c2:01:c3:34:64:4a:
                    b9:a2:3d:50:34:03:48:bd:25:97:a3:78:ce:49:cd:
                    0c:52:c3:4f:98:17:52:80:33:4c:16:ef:e2:a3:f9:
                    34:7b:87:44:0b:20:24:66:53:ae:49:3b:9b:b6:fd:
                    ff:d0:81:e0:30:37:fa:d4:38:fa:96:4b:1b:d7:7d:
                    f0:84:5b:d8:09:56:20:f0:49:94:99:af:b1:d0:01:
                    2f:1e:37:f3:cf:5b:5d:d7:18:99:dd:95:79:38:98:
                    12:cf:7d:cf:66:68:21:ff:f7:0f:d3:54:6a:75:24:
                    9d:95:e7:2d:3f:bd:31:cb:e3:4e:c5:49:00:10:d9:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:F3:08:3E:E9:09:52:54:F0:74:AF:9F:E2:69:71:C1:D5:E9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/9d61cf2b-b2f6-38cb-858a-ef67fdd51760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:21:c6:1a:11:2c:a8:09:29:1f:36:d4:48:31:3d:de:e7:5b:
         60:02:33:5b:75:2f:c8:4f:b7:08:bc:72:52:b0:f4:14:07:50:
         24:e5:ec:54:c5:07:45:20:fc:1c:8e:44:c0:8a:46:2c:ba:60:
         a0:92:ab:c6:6b:a5:42:e5:3f:82:c3:ee:7e:88:09:9a:50:5e:
         00:76:80:47:c6:a1:c5:db:2e:4c:b8:ec:73:d1:f5:5b:ff:0d:
         ca:b6:66:94:fa:19:c6:06:35:04:ff:73:e4:03:37:94:2b:c9:
         20:8e:cb:3b:c7:40:82:2a:9b:9b:c4:3e:b2:e6:fd:19:7a:a2:
         d0:9f:35:8e:5a:be:ec:33:f7:28:c1:23:7a:71:53:f3:66:9e:
         44:5c:56:03:10:68:42:de:c1:68:c9:52:ee:63:2a:86:8b:2e:
         eb:55:26:d0:9c:1c:78:c8:72:3d:f5:e5:ca:f2:dc:16:d9:5c:
         59:6d:a5:53:e8:7d:cf:a7:67:4f:7a:46:32:d6:31:38:94:c8:
         32:67:e2:4c:a9:81:21:7b:2d:de:11:2b:51:48:0a:04:81:8e:
         1d:d9:95:52:e7:ca:d0:d4:a9:b7:a7:12:fb:87:4a:4c:7a:1b:
         5d:6a:ad:9f:af:5e:eb:23:46:db:0a:3d:99:6e:21:3b:a3:99:
         a6:00:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:06 2026 by rpki-client