Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
File:                     5c1ac775-846b-34c5-befd-aa1852377b7f.roa (raw, json)
Hash identifier:          OhzhxETz5dIjlYPBtJU2nnLJEKX1bfHsm77P3IbkV4A=
Subject key identifier:   33:F2:E9:23:12:2A:1F:F4:16:B4:63:33:D4:5C:9C:B6:B2:EB:00:D8
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584D300A2E59E9289C420B67C400
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     174
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:2e:59:e9:28:9c:42:0b:67:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=03c1165e-24f6-4013-bfc2-e52c52ad8742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:fa:a3:89:9d:73:f7:15:6f:9f:7c:b0:a8:
                    1d:7d:78:83:8e:a9:32:a8:e4:10:ec:fa:78:d1:c2:
                    d9:d4:1d:06:00:1d:dc:9d:27:16:7f:51:9e:89:10:
                    dd:29:35:db:9c:04:37:62:c7:88:55:ce:5e:20:d5:
                    b3:f6:8b:46:aa:6c:c3:af:f2:03:2e:4b:49:a7:f1:
                    fc:8b:9b:d1:8f:d7:f9:75:af:ec:17:a7:92:7c:0a:
                    76:f9:f3:21:b1:65:6e:a3:ef:50:7a:83:c6:2c:53:
                    ab:f0:02:ae:b0:b9:87:e3:28:5e:ab:98:09:09:d7:
                    52:86:e6:7a:3f:0b:0b:37:1e:0c:68:59:61:1a:d0:
                    b7:a5:e2:ab:20:62:f0:db:44:c2:dd:56:3a:75:69:
                    85:85:83:85:41:08:a7:ab:91:41:90:ce:2a:11:77:
                    8b:38:7e:38:1e:f1:9d:f7:dc:aa:ce:5e:30:e5:f2:
                    a0:f4:ac:3c:c2:91:b5:67:50:a3:56:fe:d5:5d:2a:
                    b8:cb:a1:40:cf:71:50:6d:4c:8f:f5:af:1e:26:80:
                    f7:f5:83:79:48:38:cb:9d:fb:dc:4b:46:03:63:a3:
                    b5:e7:49:b8:63:43:81:11:7c:70:f6:f4:55:bf:34:
                    3f:6e:36:48:f8:a2:c1:38:4f:4d:6b:70:87:44:35:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:E9:23:12:2A:1F:F4:16:B4:63:33:D4:5C:9C:B6:B2:EB:00:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:05:c3:8a:aa:a0:f9:38:0f:4d:1e:f6:4b:de:73:bb:5c:e2:
         1f:d6:23:05:2f:14:d2:6d:e1:41:94:32:ce:b1:50:6a:29:b3:
         7e:e5:01:99:4f:a5:4b:f9:ac:84:c7:7c:b9:7a:16:ac:cf:9a:
         eb:82:3f:1e:12:9e:14:cb:4c:e5:c3:e1:2f:c0:77:17:ee:b1:
         af:83:37:c2:43:be:4c:46:3f:66:ad:aa:a1:18:fb:d1:e9:b8:
         bf:e5:85:dd:b9:3a:c2:52:5a:28:af:d6:a8:92:44:9b:2a:4f:
         38:c8:4c:28:5d:49:a8:30:bc:37:8f:89:87:d2:1f:a7:fb:1a:
         03:40:7c:73:a7:5e:ee:23:91:78:a8:d4:ec:ae:30:ab:a9:a3:
         9c:a1:73:c6:a2:9d:fc:75:53:04:97:6d:38:be:af:45:72:b7:
         f3:d9:73:ed:a4:1c:6b:f9:e6:61:70:57:d7:a2:d1:c9:16:fa:
         a8:28:5b:c0:76:b5:37:fb:52:64:5e:d9:a6:2f:5f:6c:42:81:
         9c:eb:f1:d7:44:95:a2:bb:bb:68:4f:92:a8:5a:06:b6:37:c8:
         0d:4d:83:06:c5:57:db:9f:1b:5b:4d:6b:d6:f9:7e:63:70:d6:
         1b:4d:58:5d:02:47:aa:ed:cf:7b:5e:72:55:08:99:49:c0:56:
         35:8b:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:14 2026 by rpki-client