Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dfb22d5-8d58-35d7-b2df-be42d02b65ab.roa
File:                     5dfb22d5-8d58-35d7-b2df-be42d02b65ab.roa (raw, json)
Hash identifier:          JFYrUkFZrnuHWoaKEub3xzA65y8JfNgTIS0LOO3zEkI=
Subject key identifier:   47:69:5C:CA:FE:EC:DE:A3:29:3F:1C:5B:0C:3F:FF:A9:D8:6F:6F:FE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBE33BDA7D5590C66E000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dfb22d5-8d58-35d7-b2df-be42d02b65ab.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        97.69.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:be:33:bd:a7:d5:59:0c:66:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2766886f-2523-4ed9-a499-8a18c3bbaa3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:b1:36:64:ce:e7:c2:64:c5:95:ac:2b:5c:
                    9e:af:c2:14:06:66:1f:d6:e4:4d:d9:71:fc:5f:c4:
                    f6:0f:fe:bd:32:6d:ac:bd:50:d5:c0:69:c0:1f:38:
                    f3:51:8e:00:04:48:8a:4e:55:04:c3:54:b0:5c:ad:
                    5d:93:29:90:b1:f0:35:12:6c:6d:0c:70:d4:f0:bd:
                    73:7c:4b:ad:e7:e4:48:83:cb:7b:6c:9c:27:b6:25:
                    4e:a3:ac:06:5f:bc:96:56:53:be:b3:83:67:0f:95:
                    53:41:61:0d:bd:02:c6:fe:28:54:b8:7c:6b:f8:42:
                    73:0c:56:7b:4b:4a:a1:a8:bc:05:55:6c:97:25:50:
                    ba:23:fa:69:9b:46:0a:d5:9f:ed:dd:87:f2:b1:79:
                    41:86:6e:18:12:76:0b:b8:aa:e2:76:a9:40:3a:69:
                    5e:2d:6d:dc:e5:d7:9c:48:fc:79:8a:9c:fb:be:df:
                    e1:8b:8b:3c:05:78:57:e0:3c:2a:13:94:62:6e:09:
                    02:a7:79:f7:6f:79:d0:00:95:bd:f1:e8:ca:f1:3e:
                    b0:9d:4f:f7:cd:1b:45:9b:ed:68:58:43:46:62:aa:
                    2d:8d:6d:95:67:16:41:6d:8a:de:90:98:4e:84:0c:
                    43:29:db:c7:6a:84:e6:dd:7f:82:93:d0:e9:45:f4:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:5C:CA:FE:EC:DE:A3:29:3F:1C:5B:0C:3F:FF:A9:D8:6F:6F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dfb22d5-8d58-35d7-b2df-be42d02b65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:d2:5b:17:a2:c7:ba:b5:fc:3a:d3:e9:57:8c:1f:6c:ef:
         b2:84:b8:dc:cc:97:eb:8f:38:f6:e7:66:6d:40:51:6a:ae:26:
         db:c6:94:cd:cb:69:10:88:76:4f:e3:89:41:5b:a8:df:78:23:
         c8:3d:3a:6e:30:29:7d:d2:00:8c:46:a2:fa:b3:7a:d8:47:54:
         99:40:10:29:59:f4:08:62:92:10:96:33:65:84:72:cc:79:19:
         e5:a9:f4:9c:dc:81:8f:f0:c1:52:37:59:ab:8d:eb:7d:0c:69:
         a9:d4:f4:5d:0d:f0:6d:02:bd:d3:30:90:6a:29:a2:9e:6b:41:
         5f:66:0d:67:09:15:37:dd:e0:1c:20:5a:ae:e6:aa:6d:20:39:
         72:94:80:13:2c:de:c8:b7:65:b9:2c:ac:e5:9d:d8:62:6e:ec:
         04:6c:3c:95:6b:9d:76:90:34:9e:5d:ef:b3:40:77:0f:0e:0b:
         53:96:a1:33:6c:4c:07:f7:8a:2e:ae:cb:6d:78:25:46:8d:57:
         c2:29:73:84:17:88:2c:1c:03:c7:9a:ba:2d:5d:84:7d:a4:e5:
         51:f4:f9:8e:da:99:07:79:3a:6c:8d:8f:a4:fe:3a:98:6a:99:
         75:9d:41:d1:47:fd:e8:fc:59:62:da:1e:ef:7e:ab:02:cd:e3:
         08:41:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:15 2026 by rpki-client