Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa
File:                     8f64503e-a39c-366b-89f7-6527525b2675.roa (raw, json)
Hash identifier:          QFy9WRjd2HUDAYaWSSLksBAgdT3Z3oOOrv01LFnrZKc=
Subject key identifier:   D5:3F:A6:F2:5A:68:C9:DD:C7:4B:29:54:A6:5A:90:EA:55:2D:93:16
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328584D19B4B0653D00A75366FFCB00
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     399672
IP address blocks:        169.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b0:65:3d:00:a7:53:66:ff:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=5b2571a6-2b0a-42a7-8487-7d48beccb326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:c2:24:c2:bc:f2:b0:f9:86:cf:8f:06:2f:
                    bb:7f:a0:0f:8b:24:ad:10:3a:48:46:6f:1c:68:d4:
                    dd:2a:4f:b3:07:f6:97:0a:95:ba:6c:15:26:2e:68:
                    0a:13:c7:da:9d:79:88:ec:c8:d7:08:27:c8:97:4c:
                    6c:3b:68:87:e7:82:dd:a3:a9:70:1a:95:da:d7:97:
                    0a:f8:69:83:6c:ae:62:93:50:9c:88:04:04:8d:32:
                    d0:0f:92:96:3f:cf:d7:22:57:44:50:3c:f0:35:98:
                    59:05:32:b8:ee:82:76:d0:2f:7c:23:a1:23:16:54:
                    b0:1f:74:5e:9c:87:59:f8:19:60:33:8e:d2:39:2f:
                    1f:93:7c:83:3d:a2:6c:31:a1:0e:0e:d9:43:dc:d8:
                    0a:3b:3d:73:3a:ff:5e:0c:51:88:87:9d:49:23:26:
                    12:32:28:3d:0a:02:a2:94:42:01:6d:b4:95:57:ff:
                    6a:3c:26:93:c5:3d:5d:25:0c:cd:b7:ed:87:15:f5:
                    b7:82:94:1a:05:40:09:8b:98:96:12:89:31:86:bf:
                    ad:6c:12:2f:15:71:5a:a5:46:c2:b4:2a:d1:10:3b:
                    d5:95:b7:dc:8c:d5:c0:d6:c7:ed:b0:b1:88:4b:f2:
                    73:79:14:b6:1d:ef:9a:b2:53:74:d7:f5:41:ab:52:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:A6:F2:5A:68:C9:DD:C7:4B:29:54:A6:5A:90:EA:55:2D:93:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/8f64503e-a39c-366b-89f7-6527525b2675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:43:4e:00:66:0c:16:a4:88:24:cb:a8:04:b7:5d:88:8c:
         b9:6e:af:6d:a3:37:33:75:12:95:e8:e6:8a:2a:de:66:13:de:
         a0:2c:54:c1:3c:9a:e3:44:4c:fc:0b:fe:34:27:6c:0e:2f:04:
         cc:db:d3:8e:b4:cc:96:7e:2e:f8:7c:1f:b8:30:6f:4d:0f:89:
         ec:c1:86:26:4a:7a:9b:6c:5f:b1:67:72:80:7a:1d:ec:36:6f:
         9c:a2:c4:40:8c:4d:f0:40:e9:3c:f0:08:93:b7:10:b6:0b:cc:
         5e:b7:fa:7a:80:55:52:91:62:b3:bb:9d:23:98:92:9b:83:31:
         54:ac:ff:89:6c:4d:7b:16:39:a3:04:4c:84:16:b0:4d:70:bb:
         94:e4:6d:f4:bc:a6:be:e9:54:ca:3b:4a:83:61:52:ff:64:14:
         b8:cf:85:90:34:fd:3c:19:4d:0f:9a:8a:ee:7c:89:25:cc:04:
         d2:2b:de:e3:19:1d:0d:c8:33:22:48:68:9b:b2:47:0d:a8:69:
         f7:a1:c6:54:f1:c4:d6:f6:11:88:fa:a9:20:5b:87:00:68:96:
         3c:88:4a:b2:a6:55:c3:a3:a4:35:99:75:6c:71:ea:4e:cc:ed:
         f9:33:75:04:94:7b:ca:51:11:62:90:97:42:d9:b0:ad:29:0e:
         90:56:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:16 2026 by rpki-client