Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa
File:                     74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa (raw, json)
Hash identifier:          UxDwS1R/UMVmtnpwNYc9tNOiHV7Q7KcTGECc5kYYGTQ=
Subject key identifier:   1A:68:49:96:E6:BB:1D:1E:04:BD:BB:81:E7:66:5F:E3:A7:FE:7B:AB
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D0ED09E3FAC0F618D6EEC5C60
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa
Signing time:             Wed 04 Mar 2026 15:23:14 +0000
ROA not before:           Wed 04 Mar 2026 15:23:14 +0000
ROA not after:            Tue 02 Jun 2026 14:23:14 +0000
asID:                     55256
IP address blocks:        158.95.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:d0:9e:3f:ac:0f:61:8d:6e:ec:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Mar  4 15:23:14 2026 GMT
            Not After : Jun  2 14:23:14 2026 GMT
        Subject: CN=7ed184a9-9578-4d70-84af-da4ca374bb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:2f:27:c9:95:2f:70:b2:f0:0a:4e:15:db:
                    3b:60:0a:a4:43:7f:6c:28:58:83:16:cd:37:b9:8e:
                    a3:c5:25:37:38:44:58:26:75:3e:a0:38:21:e7:aa:
                    c4:73:9c:dd:f1:c9:ad:77:9d:7d:d4:fb:97:25:fe:
                    aa:da:ef:63:55:ae:fa:48:7f:e0:8c:45:c9:67:e7:
                    31:88:72:f2:97:ec:00:67:44:aa:e8:ba:a1:18:66:
                    0f:6b:77:68:a6:3a:7d:f9:3f:14:69:d7:67:33:56:
                    9d:3e:4c:4f:18:5c:17:eb:f1:6f:db:9d:d6:ed:f4:
                    3b:ff:87:ba:ab:d9:d8:32:47:95:b7:f6:4a:5b:84:
                    93:13:40:d9:31:2a:b7:fa:74:06:3a:c5:43:e6:fc:
                    e7:c1:72:87:bf:60:ef:b9:cb:64:7e:a8:05:1e:03:
                    bb:ca:bc:eb:9e:5d:9d:54:83:91:c4:88:09:87:72:
                    24:fb:73:85:c7:d6:64:5f:37:2e:9a:46:c8:91:89:
                    d4:06:e3:a4:b6:bf:b5:9b:9d:dd:d9:09:06:8a:ce:
                    bb:d5:98:7f:60:d7:87:37:d2:44:24:fa:82:1e:0f:
                    35:4f:8b:25:18:7e:bf:70:59:a7:8f:4b:f0:7d:90:
                    00:d3:4c:9f:ae:32:ed:49:a0:fd:cf:91:71:08:61:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:49:96:E6:BB:1D:1E:04:BD:BB:81:E7:66:5F:E3:A7:FE:7B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:37:ea:f2:5d:0a:99:05:8f:aa:e2:d0:bb:0b:6d:bd:38:cb:
         0a:49:8b:e4:34:a5:b1:09:53:53:14:c5:60:af:05:7d:f8:f3:
         9b:da:0b:61:d6:d9:d5:4e:33:37:1b:cc:06:d0:ef:95:f0:2a:
         1b:88:ab:4e:09:ab:e1:d3:54:07:3b:c3:e0:5a:5e:98:b1:75:
         0a:1e:d5:7a:86:f9:99:f3:c9:6d:2d:31:5c:59:51:6f:22:83:
         4b:a9:08:05:86:20:f6:93:4c:0a:bf:25:68:29:e7:ef:b4:7a:
         da:6d:65:5b:4a:4d:b1:d4:f9:20:2e:2f:3a:92:ed:18:94:76:
         a6:21:a2:bb:5b:f5:32:1a:e6:bc:82:7a:97:ee:60:63:5c:93:
         07:76:91:5d:42:2e:c4:e8:49:21:10:a5:42:a7:0a:6c:c8:6c:
         64:f5:65:dc:0a:78:21:cc:7b:c0:15:78:00:3a:af:b3:22:5d:
         10:93:6d:eb:8c:7e:d3:59:c9:cb:c1:47:ad:4f:96:92:93:c6:
         60:97:c4:44:6f:b8:88:09:b5:e4:32:1b:0d:1e:5a:36:59:29:
         d2:96:f1:59:b9:ea:c4:0e:ae:4f:f9:60:5e:87:36:b8:09:63:
         92:40:f6:fa:8f:07:e0:1e:18:77:56:f1:a7:ae:4e:66:56:8f:
         6b:26:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:27:08 2026 by rpki-client