Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa
File:                     d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa (raw, json)
Hash identifier:          QFZ4dqtHl+vOI4M+woQJfu43Vr9jnjbKUGrH7Q0Zxl0=
Subject key identifier:   37:8D:0D:FB:65:8E:57:F8:9F:AD:A6:56:12:28:58:22:ED:4E:2C:83
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584D2644B584C5A0BA027EBB7A40
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6453
IP address blocks:        174.35.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b5:84:c5:a0:ba:02:7e:bb:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=0532d533-79d9-4210-a87d-8dd3ac0f02ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:23:da:49:ff:77:64:51:6f:bc:7b:f1:55:
                    49:0e:ab:e6:4b:14:47:20:7b:21:07:4f:de:42:60:
                    95:24:2e:66:ea:f9:a9:38:08:79:15:5b:a5:a9:72:
                    2d:b1:7b:b1:59:1c:da:cc:3c:2e:af:9c:69:6b:0e:
                    ea:bf:83:de:8d:70:ba:68:55:0b:30:1b:17:b2:e3:
                    e2:ec:41:9c:de:09:e0:1b:e5:a8:38:2b:c2:9a:a3:
                    77:e8:85:5d:9d:f8:11:63:fd:61:79:08:e3:4d:21:
                    7c:c3:cd:81:93:2d:b0:39:83:b4:26:67:f4:e6:b2:
                    84:0a:f9:1b:72:cb:8c:10:30:16:2e:59:d0:ad:08:
                    94:08:60:db:2c:68:55:60:4a:e1:4d:90:61:f3:a9:
                    aa:4d:3d:ec:7a:ed:b1:0c:9c:af:a4:5e:6c:a4:8e:
                    ad:3a:5b:05:44:1d:90:4f:73:a3:4e:20:90:09:58:
                    26:27:d3:24:82:f5:97:c2:a8:88:43:26:88:1f:7f:
                    64:cb:eb:18:c0:45:89:74:a0:0e:42:6a:c9:f2:2f:
                    ec:c4:91:93:df:c8:aa:90:d7:49:f5:8c:f9:00:be:
                    27:7f:69:eb:7e:0f:36:fd:fe:14:22:18:03:99:05:
                    9f:fc:a9:06:b7:21:d6:59:5b:d6:af:3b:2a:71:55:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:0D:FB:65:8E:57:F8:9F:AD:A6:56:12:28:58:22:ED:4E:2C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:8d:8c:9d:41:6d:92:80:e2:c1:d2:76:f1:90:9e:55:a0:
         2e:ba:d4:47:1e:c7:2b:b4:88:ea:10:6b:53:73:54:43:ca:fb:
         5b:49:a1:51:be:b1:e2:11:b3:a9:87:21:3f:96:e6:d7:97:8f:
         a7:0a:8a:e3:c7:4c:fc:b1:c1:ba:c5:d8:2a:e7:36:bd:35:08:
         2b:e5:c9:f7:43:88:64:0e:a8:64:34:0e:a9:71:6f:d0:b8:0d:
         ce:94:e2:01:47:3a:02:cc:ee:7b:3b:a7:87:64:fe:4d:a3:5a:
         9c:cd:4d:c3:8c:d3:2b:26:59:68:e8:57:aa:26:c4:f7:5f:d7:
         d2:4e:04:e6:ad:6e:d8:ad:c9:ac:e1:02:4b:25:02:67:f6:f8:
         e1:84:53:1d:db:87:28:c8:98:36:5a:55:ff:35:94:15:f5:96:
         05:a3:bf:63:c3:c3:3b:2c:ca:80:a9:a9:f6:8d:2f:76:72:69:
         2b:89:92:65:62:33:57:15:d3:01:1b:6b:4f:de:31:b7:dd:94:
         d4:be:01:09:39:f3:33:a1:62:9d:4c:f9:c6:08:6b:32:8d:40:
         f1:8c:1b:86:e9:c8:14:d6:78:fb:ba:a7:49:9c:7e:8e:6a:8e:
         71:69:e1:17:be:e3:c0:0c:43:f5:bc:43:b3:83:a4:92:bd:d7:
         86:4c:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:34 2026 by rpki-client