Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa
File:                     632ed596-c745-3b4c-bcc9-794802c128a8.roa (raw, json)
Hash identifier:          hVxGVQ8B9TPL1OKHyuVkYmFNbulQpidWeVsJWWMY1CA=
Subject key identifier:   A5:46:17:24:72:27:D2:CE:F6:D4:29:F2:2C:74:81:41:64:2F:D3:B6
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584D8D8FE73DFB2045236290A180
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     16433
IP address blocks:        167.224.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e7:3d:fb:20:45:23:62:90:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=57b7f477-da93-4369-9dc1-76aa91125480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:9f:50:57:83:7b:65:9c:a5:6c:0f:82:21:
                    0d:62:ce:16:3b:71:89:32:7b:0e:fe:b8:b2:da:cd:
                    b4:40:76:86:8f:05:91:ee:bc:98:54:72:5e:c1:23:
                    5c:9e:d8:6b:e8:e4:06:ee:d6:d7:43:03:19:61:42:
                    0b:00:46:34:77:a8:47:f9:4a:de:8e:66:0c:bc:70:
                    91:32:7f:c6:0a:81:04:9b:45:13:72:78:f1:33:c7:
                    71:22:f4:be:d3:d6:3d:29:17:3d:8d:45:22:6e:cc:
                    ad:78:00:e4:4b:e0:7d:d6:31:19:cf:d1:b9:4b:12:
                    6c:59:92:3a:69:4a:1e:f5:27:40:5a:ff:fe:99:b5:
                    84:0b:a0:9e:d6:7e:21:9e:12:c4:e5:0a:13:30:1b:
                    e9:53:37:8e:54:ba:10:b5:a0:6a:0f:b2:20:2e:f5:
                    8f:e2:2b:f0:51:d0:15:8f:c7:47:6d:ba:1e:31:84:
                    33:2e:66:4c:2c:38:6a:83:a8:b2:73:dc:cc:ec:95:
                    b2:a4:c8:e8:a0:f7:9c:e1:d8:ff:47:a1:0a:2a:b2:
                    a1:45:0e:00:88:f1:32:2d:22:e3:c1:3e:32:1e:cd:
                    21:8e:6a:a8:f9:9a:2b:13:fc:a5:1b:01:04:61:33:
                    59:7b:33:0c:bc:74:5c:41:f2:7e:65:b2:1c:6e:da:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:46:17:24:72:27:D2:CE:F6:D4:29:F2:2C:74:81:41:64:2F:D3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/632ed596-c745-3b4c-bcc9-794802c128a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.224.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:37:d3:56:aa:9b:d5:d7:a8:6b:7f:b4:89:2b:7d:66:4f:bb:
         ca:01:56:c1:e5:65:3d:16:e3:0e:bf:37:1d:f5:49:89:08:ad:
         8f:89:d1:7c:90:eb:e7:74:e0:ff:d0:d8:e4:8b:d8:63:b7:dd:
         57:70:8f:85:19:94:67:af:43:6d:1f:23:fd:8b:f0:83:38:1e:
         ae:80:9c:88:ed:19:49:72:c7:02:4a:f7:10:ff:d4:32:3f:80:
         8e:84:39:45:99:8f:d8:ab:07:96:39:b5:b6:ee:06:ab:e0:ac:
         26:62:84:ed:49:ad:6a:3d:05:25:17:aa:a9:a8:4c:a5:f5:cc:
         98:70:4c:6f:35:dd:3a:fb:f9:2c:c3:a7:f6:40:df:05:2c:af:
         be:a6:6e:1a:29:e9:69:fe:1e:ef:cf:60:fd:1b:58:82:64:cf:
         ef:05:7c:47:0c:09:6d:f6:d7:56:c5:9e:07:db:c1:32:84:76:
         65:40:67:b9:2a:85:17:5f:c6:c0:0b:85:34:f4:73:a0:42:42:
         02:92:d5:da:2e:f7:55:8d:f2:b5:e7:c1:01:fa:7f:f6:e3:b3:
         15:dc:9c:d8:b5:ab:da:7c:93:69:70:a5:b2:14:da:46:be:b7:
         4c:95:b8:4a:7f:43:82:5a:e6:ff:c0:11:0e:33:bb:6e:47:a6:
         d2:54:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:28 2026 by rpki-client