Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa
File:                     3fa4a444-d4ce-3503-b060-20450537e4a1.roa (raw, json)
Hash identifier:          IkjR2JHdA1jTP+riGMcAi+eA0NqHDOEWDA3Gk7irXT8=
Subject key identifier:   F2:5F:BB:EF:42:FF:05:EF:AE:F9:F7:22:5C:7E:10:A1:B0:5A:F8:C0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDAFB44CE2CEF62192080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     397630
IP address blocks:        192.171.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:fb:44:ce:2c:ef:62:19:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=47c2aba1-53de-4f31-b8ae-b6e45572a06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fe:c3:30:c7:c5:f7:83:12:8d:03:46:37:7f:
                    55:85:3f:7c:a2:0e:a3:6c:78:85:5e:90:fa:4a:29:
                    2e:90:9c:39:59:c5:d7:8f:78:e7:24:3b:04:91:c4:
                    58:94:6e:06:d1:d8:6d:ba:88:c1:36:b0:20:db:6d:
                    3c:ca:e0:57:4b:8d:c3:f7:8d:b7:f5:58:7a:5d:d1:
                    f6:95:96:42:b7:e4:e0:da:a3:2a:6e:18:37:99:5b:
                    62:c5:c7:63:84:b5:c0:85:b8:e5:5f:7c:ed:cc:00:
                    92:e1:d8:a8:5a:18:f4:f8:31:c7:dd:86:67:6f:b2:
                    d0:6c:8c:cf:80:8b:ca:05:4b:e6:07:a8:f1:92:93:
                    9c:17:08:90:47:c4:1e:3b:06:24:90:a3:c3:73:ed:
                    38:8c:e6:5c:1a:ba:ac:f8:47:69:5a:86:c9:df:9e:
                    1a:d3:13:7d:c3:a9:da:3f:a7:7b:45:0b:5b:d6:cb:
                    b5:e7:a4:06:e2:f5:98:fb:20:36:89:41:cc:5f:44:
                    89:a8:8d:97:73:41:f2:5b:1e:fc:27:53:7a:d9:89:
                    ee:e3:f4:3a:d2:ca:82:42:0f:07:0d:dc:e0:94:e2:
                    73:6e:1d:a3:48:7a:41:d2:2e:c4:16:e6:49:48:44:
                    ad:e8:0e:5b:0c:3e:5a:44:f1:8d:a9:7a:a6:4e:13:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:BB:EF:42:FF:05:EF:AE:F9:F7:22:5C:7E:10:A1:B0:5A:F8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:dd:4c:78:40:82:88:23:e5:53:64:19:35:1a:85:25:22:
         a9:b1:9c:e4:85:e0:6a:8c:de:9f:db:d1:35:37:08:93:bf:34:
         65:20:e4:93:7f:d7:68:bd:22:a7:a3:2e:7c:ea:0b:90:5a:a7:
         a9:60:17:1f:7a:0a:c9:a6:07:74:aa:7a:e5:f8:cf:5e:f4:3c:
         37:51:da:37:56:a8:a2:d5:16:da:93:9a:0e:ae:5f:68:d1:0e:
         3c:40:09:6e:e7:75:64:15:85:66:e8:66:2c:cc:01:9b:de:7b:
         d8:d2:c2:91:d1:34:15:26:f4:4e:e1:c0:2c:2f:3b:48:18:e0:
         27:e3:7e:8b:86:dc:23:19:c5:33:4a:85:dc:f4:57:94:96:6a:
         21:c6:c8:8f:85:24:6b:78:b3:f7:b1:dd:a9:0e:79:94:1f:19:
         36:2a:2e:57:14:59:46:bc:05:c3:2b:8a:4e:0b:06:72:d5:9d:
         71:c3:e5:3d:65:c2:f0:7e:1d:da:bd:45:ba:51:a0:24:d7:23:
         f2:32:9b:5d:a3:76:cc:11:89:ac:15:2c:29:21:d6:0b:1e:50:
         37:75:46:7a:23:26:2f:6a:ba:f6:f3:37:41:9a:23:68:ce:8a:
         d5:22:8b:be:9d:d9:b0:00:0d:2e:0f:46:a2:53:42:a3:98:3d:
         07:df:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:12 2026 by rpki-client