Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
File:                     a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa (raw, json)
Hash identifier:          Q0ABedTKfuFY9PiNu3pdLsNjE7MABV7szlSYC8w6olQ=
Subject key identifier:   ED:D4:55:15:91:5E:8A:EF:02:3B:DF:5F:B3:16:CC:A4:E0:3B:6A:37
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFF24FBA81B57BBC00DF80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        71.44.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:f2:4f:ba:81:b5:7b:bc:00:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=cc51d204-9825-4083-b314-d73ee8b74653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:8d:35:16:d1:c6:d9:7b:cf:77:a0:65:11:
                    07:ef:25:d3:38:f6:e1:62:23:a2:1a:df:29:68:c4:
                    97:95:1a:4a:a0:81:9e:18:7a:93:7a:f3:9b:ce:14:
                    10:3c:50:cb:21:61:e9:0e:09:24:52:e8:5e:1d:53:
                    1d:dd:2a:b1:d1:fc:42:91:9f:52:95:74:96:7a:3e:
                    a7:d8:d4:4a:17:18:21:47:6a:8e:69:be:96:ae:25:
                    8d:43:a2:ad:92:be:b0:df:b0:1b:71:38:74:6c:e7:
                    14:f4:94:0e:98:49:68:cc:b9:e5:6f:0f:a8:67:50:
                    64:ec:22:9a:81:36:22:d9:5b:ed:99:c8:47:fa:b2:
                    a0:08:e4:fe:bd:5f:85:17:a8:a5:9b:0c:e8:d9:85:
                    27:b2:1a:46:bc:4d:f8:c7:d0:1b:78:f0:e4:b1:87:
                    ff:86:7c:58:11:bb:f3:1e:c1:fe:23:47:b6:08:bb:
                    c2:50:6f:5e:e2:4b:7b:3d:01:f5:c3:8e:c9:81:e2:
                    48:a8:c5:3d:26:ca:c2:34:5e:3c:ff:df:a0:1c:56:
                    4f:7f:0e:02:6a:46:82:84:9d:2e:33:95:3a:87:5a:
                    89:62:99:b9:21:04:5e:0f:9f:58:58:c5:22:af:75:
                    48:78:e8:ea:4f:0b:6f:06:c0:ff:23:a1:30:23:bf:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:55:15:91:5E:8A:EF:02:3B:DF:5F:B3:16:CC:A4:E0:3B:6A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:aa:69:69:31:54:ea:87:a2:80:1b:90:c0:b7:29:6e:a0:
         c5:37:6a:ca:4d:8a:f6:25:04:1b:b2:96:e4:dc:e1:7e:ea:26:
         d7:7d:e1:e8:51:fa:02:8b:65:e6:86:46:4e:fa:29:97:b7:b8:
         39:9a:e7:c5:4e:a3:e3:96:a8:b3:5f:26:5b:38:98:b2:9f:ac:
         72:67:c6:5b:11:94:6d:14:52:ed:d1:44:ab:71:6b:df:a9:3e:
         0b:74:ae:6b:1e:57:ef:10:a7:77:a6:23:1b:79:f8:f2:68:96:
         0f:6e:d2:83:3e:0c:ba:e7:68:76:ac:1d:d4:7b:2a:ed:50:5d:
         d2:22:09:02:04:73:6a:85:0c:5d:82:c0:af:b6:41:3a:77:ae:
         21:a3:f2:a0:6b:b2:7c:13:47:fe:e9:aa:de:4c:87:f8:5a:be:
         70:c8:bb:bd:79:39:b7:8c:7b:69:6a:32:94:44:00:bf:f7:f6:
         e6:c5:c9:d3:2f:cb:29:e6:2c:72:ef:f6:0a:58:6a:cd:8b:5c:
         84:dc:c4:20:ad:ef:82:b5:12:f0:fb:49:8f:17:8c:31:52:58:
         c3:cd:1a:42:6a:28:ac:fb:0a:cc:12:61:d9:43:ea:82:0b:5b:
         39:16:d8:9f:1f:d0:36:4a:e3:88:70:ba:66:a5:9a:88:3e:36:
         d3:d2:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:47 2026 by rpki-client