Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
File:                     3a306480-c08e-3e60-bdf7-f87037f23621.roa (raw, json)
Hash identifier:          0X2w0bufOzrqelxfUz6QOHM5bLzNkbLnuwpCMGA5IiI=
Subject key identifier:   B9:A1:E5:10:04:C7:F6:12:4A:DF:FA:48:76:43:FA:BF:78:5C:B3:ED
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E7E828D356CF928500C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        162.212.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e7:e8:28:d3:56:cf:92:85:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=d6777d9f-a7db-4009-ac5e-c623d8d13eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:ca:cf:af:20:26:76:73:f7:2c:97:b0:0a:
                    b4:5b:cd:1b:ac:a6:dc:2b:6b:52:dd:b6:72:09:ee:
                    43:72:68:d4:59:40:53:21:8b:2e:fc:1f:e9:59:c2:
                    9d:c5:58:d3:2b:95:91:99:5a:b1:3b:99:6e:57:a7:
                    f6:e9:3d:c2:94:3f:7b:56:ef:3f:d2:25:0a:2e:43:
                    2a:0d:a8:27:f6:f9:49:89:b6:e2:00:29:a8:ec:50:
                    5c:86:bb:ea:5d:36:4e:e9:93:43:0b:64:71:ac:5d:
                    33:63:c0:37:dc:e4:99:2d:27:5f:0b:14:86:39:e2:
                    25:5c:a7:41:b0:0d:d6:7b:d6:c1:78:5d:af:84:d9:
                    38:17:36:41:dc:3a:23:e0:c2:e2:15:84:d1:7a:f6:
                    07:ab:8c:a0:e6:a6:77:f3:1e:f5:b0:a9:1e:3b:dc:
                    94:c5:8f:87:00:22:cb:dc:a3:9d:49:8f:ee:ce:3d:
                    3d:92:aa:9f:83:be:93:4d:14:0e:c8:dd:ec:64:82:
                    2f:80:f7:fe:d5:fe:1b:8d:a4:11:3b:c5:78:5d:a4:
                    58:42:6b:e6:23:62:37:b7:c2:8d:6d:6c:bb:92:4b:
                    1d:d9:bd:a8:87:67:14:fa:8c:1a:8a:6d:57:30:98:
                    d3:5c:2a:c6:96:65:58:99:e2:12:f8:4c:ca:9c:c1:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:E5:10:04:C7:F6:12:4A:DF:FA:48:76:43:FA:BF:78:5C:B3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:5c:5f:01:74:29:97:66:9b:74:75:83:42:4a:79:99:03:
         7b:47:de:78:8c:8f:ad:29:73:94:d2:8e:d6:db:93:7f:87:50:
         b1:52:d8:26:b7:d0:30:40:a4:2f:f2:de:60:30:12:01:32:3a:
         f4:d0:c4:13:4a:78:bd:ee:54:c6:1b:f7:70:fd:3b:b1:32:aa:
         3a:6b:33:1b:16:de:55:9c:32:4c:ee:4f:7f:fd:dd:f0:d5:a5:
         60:be:c7:65:8c:17:1f:c5:79:2e:44:be:37:32:fd:7f:08:9e:
         a3:d2:f6:19:c2:66:ce:6e:a4:66:61:cf:8b:52:05:23:9c:24:
         f5:0a:98:4c:87:7d:16:44:ba:e0:02:d6:4d:7d:d8:e3:97:82:
         e1:86:85:bc:9f:ff:c3:8e:bf:f7:53:02:9f:ab:1b:39:e2:bc:
         0d:a8:e9:e9:53:ef:82:9b:ba:e5:b6:74:7d:e7:16:60:ab:4f:
         6e:8f:23:43:aa:86:62:b6:19:47:b2:3b:fd:cf:e9:1a:45:95:
         ca:53:50:9c:35:2b:c9:9d:26:a3:8f:bd:7b:b8:90:5f:3e:69:
         62:d0:e4:1b:e4:99:71:fe:9f:e5:ff:91:20:87:66:35:e2:df:
         f5:35:62:8a:fd:64:49:c9:e2:1f:0e:b6:16:2f:4d:ca:04:ed:
         d3:9b:3e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:54 2026 by rpki-client