Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa
File:                     b362f402-f840-31ad-9a3b-aed78a08f528.roa (raw, json)
Hash identifier:          OyAiwokcmhw5JItIZ//pgKqFOOSbPvq8EBdkigMxLew=
Subject key identifier:   37:E6:DD:79:FD:D6:76:2A:A4:F2:78:6B:64:5C:6E:CE:73:55:7E:C3
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D0EA7BC68BDB073466EEEB180
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     211321
IP address blocks:        192.228.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:bc:68:bd:b0:73:46:6e:ee:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=e2b7c4d3-ea1c-468a-bff1-6aae4b04d829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:fd:5a:38:9a:2c:94:26:c2:4a:c9:18:1b:
                    0a:5f:21:2d:43:b1:e7:ff:db:42:09:8c:ec:89:8b:
                    12:45:2d:16:44:d9:33:6d:66:a5:61:fd:08:d5:80:
                    04:5b:46:d0:8c:7b:f9:7d:a2:8f:cc:50:b7:79:11:
                    f1:76:7a:e6:ef:df:3e:c4:8c:89:3d:d9:75:75:3e:
                    9f:ea:89:42:2a:10:ea:af:d0:19:d7:2c:bc:e5:19:
                    68:f7:6f:79:bd:78:4d:94:f2:f3:97:a2:66:e0:f9:
                    d3:43:57:50:d1:47:f4:14:9d:a8:e2:42:7b:7f:4f:
                    f4:3f:c8:05:9c:aa:fa:5f:a8:51:c3:6d:67:18:84:
                    08:19:b2:38:63:56:23:f2:1b:57:f3:af:4a:aa:c1:
                    6a:62:50:f8:6d:06:73:e7:d5:a6:40:c0:d0:c5:f4:
                    b2:67:1a:64:4c:82:a0:83:47:8f:3f:f8:2b:3d:5a:
                    be:5d:24:fd:94:db:4b:2b:bd:90:a4:ad:bf:c6:7f:
                    11:7c:01:30:65:14:3c:71:a7:df:04:83:c5:f0:00:
                    19:39:40:79:16:78:f9:5d:5a:a6:b3:23:0a:b8:f4:
                    c8:f6:e4:e7:fd:43:87:3c:65:3f:07:60:64:8d:ac:
                    25:6d:56:a9:44:23:e6:60:dd:0e:bd:c0:4c:8a:7e:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E6:DD:79:FD:D6:76:2A:A4:F2:78:6B:64:5C:6E:CE:73:55:7E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/b362f402-f840-31ad-9a3b-aed78a08f528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:a3:0b:dc:37:d7:83:a5:80:26:66:99:44:9e:eb:9d:f1:
         5d:66:f4:e1:52:92:4e:2a:25:76:b5:34:bd:b6:3f:48:91:a3:
         40:85:4a:6a:46:ec:c3:30:41:ef:70:ca:16:c2:97:47:17:5c:
         60:ce:89:15:26:54:2f:e1:66:12:03:56:f0:f4:c0:b5:7b:54:
         71:c7:2b:2d:93:62:05:d8:5f:e8:3f:db:1c:8e:78:5b:4d:6c:
         18:80:c7:9f:8f:7f:da:16:c4:e2:cd:0c:a6:8d:5d:73:ff:16:
         1a:f2:48:01:b7:2c:4b:2f:76:d1:68:4f:1b:27:28:d4:0a:8e:
         85:1f:7e:c5:26:97:01:17:6c:8e:82:ae:ea:df:06:78:02:9e:
         d2:82:9b:00:2b:88:d9:b6:59:d7:3b:ee:39:a2:d6:a5:76:16:
         db:82:be:45:78:a1:e7:b4:8b:86:cd:d8:6a:98:59:42:a5:6e:
         f7:28:19:48:5d:bb:1e:34:04:39:05:3d:63:69:23:a2:d2:84:
         24:3e:c7:07:2f:c4:a2:d0:a7:b9:bc:4e:a8:f6:54:ce:4a:f4:
         1e:98:af:f2:42:d8:57:6b:ad:47:a6:e6:17:8f:06:f7:94:f6:
         98:65:d1:43:d8:bd:61:2c:de:09:81:c2:93:35:88:4e:4d:1e:
         bb:28:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:12 2026 by rpki-client