Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa
File:                     16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa (raw, json)
Hash identifier:          2cbn+y/pZrupP7ryIZWeN3mo7MkXX0CkA6qAgxCFvhU=
Subject key identifier:   27:7F:60:9A:CA:2E:EA:42:D3:56:23:F0:37:FC:ED:DB:4A:4C:EB:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFEA02B94A7621F30D9B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        71.44.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ea:02:b9:4a:76:21:f3:0d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1a38c29a-f60d-442d-8fb2-83d080ddb4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:e0:c6:c6:ae:81:03:ba:ec:be:44:80:f3:
                    ab:18:5a:42:47:a0:8c:b6:0e:a6:aa:31:f7:71:12:
                    ef:6c:d9:68:d2:e2:08:8e:74:5d:8c:76:99:0d:e2:
                    70:fe:1f:55:70:b1:3a:0a:46:25:c4:2f:8c:e0:f1:
                    3a:af:87:5a:a3:9e:a3:15:45:c2:4b:09:d0:02:76:
                    cf:04:e6:fc:f6:3f:b1:57:8c:49:9a:56:5e:e7:21:
                    78:0f:a4:13:b7:5f:c8:7f:50:82:d5:1b:bc:ac:ce:
                    3b:11:9b:cd:44:cf:b2:11:3a:b3:a5:a9:00:b0:ce:
                    06:42:8c:1c:57:89:b4:ff:86:89:9a:a5:91:b6:b3:
                    4c:ee:34:d9:3b:be:38:d6:30:5b:0f:19:ac:99:b1:
                    af:4c:ae:d6:c0:cd:d7:13:12:ea:64:99:25:b1:1b:
                    a2:3c:43:1b:b9:60:c0:84:d7:0f:83:bf:30:32:b7:
                    9d:ad:ae:c4:9c:b5:ef:81:1d:29:7f:6d:5d:81:02:
                    81:dc:b3:d8:db:7c:be:66:3b:0a:9e:af:26:8f:76:
                    21:5b:1b:3b:16:d3:78:ad:5b:b6:87:5b:78:60:a2:
                    71:54:56:30:57:66:b7:bf:a2:d3:67:99:e6:a9:3f:
                    d7:09:e1:47:44:fa:11:b0:fd:c3:53:bd:73:ca:89:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:60:9A:CA:2E:EA:42:D3:56:23:F0:37:FC:ED:DB:4A:4C:EB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:da:bf:69:e9:4d:ec:76:66:45:14:e5:8d:68:a1:a5:ca:aa:
         60:71:2c:32:54:92:8a:0c:0d:53:80:af:8e:de:12:d4:49:4e:
         7f:5f:55:d8:78:0c:99:2f:72:b3:c7:2e:4d:31:be:64:d5:b4:
         06:80:b7:34:2b:9a:93:12:1b:07:f8:ee:67:fd:66:0b:a2:d7:
         a1:75:f7:4c:65:50:36:a5:da:47:5a:6b:ef:09:bb:7d:ea:d8:
         32:e6:b4:65:3e:7f:8b:e5:b1:bb:ba:05:d5:a6:b1:42:5d:17:
         79:ad:f0:0c:aa:59:78:58:7d:da:95:2e:17:3e:81:eb:aa:64:
         b1:7e:e0:d3:67:bc:f0:cc:3c:09:dc:d5:ea:40:b0:b6:df:70:
         a1:4d:89:93:26:ba:6e:ee:cc:fb:32:01:99:75:b1:4b:9b:ad:
         38:22:c7:b4:70:9a:1a:a0:77:f8:2f:a0:c4:01:ad:88:ea:3c:
         7d:ac:9c:74:ea:bf:cd:03:22:63:cd:6a:92:c7:3a:69:99:a5:
         ca:cc:1b:74:44:31:5c:9b:c0:a6:f3:97:eb:27:a8:35:76:ea:
         95:64:0c:ad:97:c5:36:34:e0:42:19:2d:9a:22:10:7f:84:9b:
         1f:85:04:b8:a6:0f:10:9f:d8:7b:a9:fc:c3:f8:8d:76:8d:15:
         b2:1d:00:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+oCuUp2IfMNm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MWEzOGMyOWEtZjYwZC00NDJkLThmYjItODNkMDgwZGRiNGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZDgxsaugQO67L5EgPOrGFpCR6CMtg6mqjH3
cRLvbNlo0uIIjnRdjHaZDeJw/h9VcLE6CkYlxC+M4PE6r4dao56jFUXCSwnQAnbP
BOb89j+xV4xJmlZe5yF4D6QTt1/If1CC1Ru8rM47EZvNRM+yETqzpakAsM4GQowc
V4m0/4aJmqWRtrNM7jTZO7441jBbDxmsmbGvTK7WwM3XExLqZJklsRuiPEMbuWDA
hNcPg78wMredra7EnLXvgR0pf21dgQKB3LPY23y+ZjsKnq8mj3YhWxs7FtN4rVu2
h1t4YKJxVFYwV2a3v6LTZ5nmqT/XCeFHRPoRsP3DU71zyom/rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCd/YJrKLupC01Yj8Df87dtKTOspMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTY1ODE4ODEtNWViNi0z
YmQ2LTg4YWItZWNmOTM4YzY0ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRyx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDav2npTex2ZkUU5Y1ooaXKqmBxLDJUkooMDVOAr47eEtRJTn9fVdh4
DJkvcrPHLk0xvmTVtAaAtzQrmpMSGwf47mf9Zgui16F190xlUDal2kdaa+8Ju33q
2DLmtGU+f4vlsbu6BdWmsUJdF3mt8AyqWXhYfdqVLhc+geuqZLF+4NNnvPDMPAnc
1epAsLbfcKFNiZMmum7uzPsyAZl1sUubrTgix7Rwmhqgd/gvoMQBrYjqPH2snHTq
v80DImPNapLHOmmZpcrMG3REMVybwKbzl+snqDV26pVkDK2XxTY04EIZLZoiEH+E
mx+FBLimDxCf2Hup/MP4jXaNFbIdAF8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:33 2026 by rpki-client