Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa
File:                     1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (raw, json)
Hash identifier:          i0TE8bHBroHVMJzjhS4S8z0lm++ndlNHk3LkzoXpw0o=
Subject key identifier:   78:23:49:38:46:46:4D:67:3C:99:80:E3:73:06:1D:F6:E9:2F:9A:99
Certificate issuer:       /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f
Certificate serial:       010D0C9F4328584D316F5CA93EDF9907F3FC1C00
Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     14965
IP address blocks:        158.51.216.0/22 maxlen: 24
                          199.241.44.0/22 maxlen: 24
                          2605:98c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:5c:a9:3e:df:99:07:f3:fc:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=53fa9bd3-e3cd-452c-96f0-c34f1136618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:69:94:47:8c:09:63:c5:07:29:19:47:ee:
                    6a:84:28:f8:a5:e0:2d:54:3c:60:f7:7f:35:42:8c:
                    cc:af:26:18:bb:e6:7f:b9:2e:8e:21:8f:85:bd:8f:
                    a4:a2:54:1a:3a:28:db:87:c3:26:b3:79:47:21:24:
                    96:f1:cc:27:c8:7f:ac:0b:bd:c0:3a:f8:94:85:96:
                    ec:9f:da:a6:78:67:c0:cd:2d:d4:2d:08:a7:ff:44:
                    76:f2:fb:d9:79:36:b9:25:7e:00:35:0e:c6:3d:e5:
                    1b:1e:0a:24:43:f1:78:eb:94:7d:13:b6:32:a0:59:
                    64:c3:12:cb:16:4e:3f:30:fd:33:9a:25:db:fe:57:
                    b8:45:6c:19:f1:af:6c:4f:00:d8:46:ee:d4:0f:da:
                    8c:33:2f:56:ec:81:fa:e3:c7:0e:9f:2d:10:b9:50:
                    81:3a:8d:e5:e8:25:b6:fd:5b:d1:5d:fb:e5:14:28:
                    24:32:e4:b6:5f:9e:ae:93:aa:59:1e:bd:c9:4b:34:
                    26:1a:59:f5:7b:9f:79:8b:42:a5:bf:0a:91:00:b9:
                    a2:74:85:41:7a:82:50:f7:1b:44:8f:07:21:b9:a3:
                    bf:e6:34:06:a5:40:32:92:b2:a2:3a:7e:a7:08:c4:
                    92:1f:41:79:c6:73:69:0d:1d:fa:33:f5:6f:ab:4f:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:23:49:38:46:46:4D:67:3C:99:80:E3:73:06:1D:F6:E9:2F:9A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl

            X509v3 Authority Key Identifier:
                keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.216.0/22
                  199.241.44.0/22
                IPv6:
                  2605:98c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:54:ab:0a:b2:be:90:c5:14:b8:e0:29:0f:02:12:79:4e:11:
         c9:a6:8e:f7:ff:94:c6:d2:79:c5:fb:5a:6a:86:97:3c:69:09:
         08:26:c4:ab:a1:0e:6e:e7:fc:65:0e:d3:f0:ba:6e:0d:5c:a1:
         19:43:a4:f8:87:08:21:5e:3c:c2:13:42:a0:a9:e8:ae:51:42:
         e9:cc:5a:31:d9:8b:4b:e7:a7:95:f9:35:ff:0f:91:f8:bd:91:
         9f:67:4e:43:f5:fb:db:a9:4f:2c:4f:ce:38:c6:dc:14:99:50:
         b3:8b:e6:e6:a0:ee:d0:c2:a9:9c:39:a0:ab:d1:95:98:c9:57:
         fd:9a:74:29:03:d0:a0:4e:f8:87:13:fe:34:ee:35:f1:3e:45:
         1a:4c:d2:df:82:a2:f0:b3:bf:07:74:ec:26:f7:eb:94:7d:ec:
         5d:9a:2b:25:27:0a:80:55:eb:18:66:a2:71:d7:6d:2a:e9:86:
         ca:21:0a:12:7a:37:e3:8e:3d:13:35:f7:0e:b1:a7:5f:1c:a7:
         09:d5:a9:3d:7e:34:ee:a4:81:a5:fb:fd:7f:05:6d:cb:f0:06:
         ec:15:17:c8:b0:30:db:b1:76:25:5d:0f:40:0b:70:56:64:8d:
         cc:e8:17:4b:bf:6a:ce:92:6e:b6:cf:15:36:c0:2d:7f:d4:dd:
         46:15:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:23 2026 by rpki-client