Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa
File:                     3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa (raw, json)
Hash identifier:          K5c/Q0r96vh8WuL1A/zr85XaRM6hiUQw0Iev7OygBYQ=
Subject key identifier:   45:07:0C:10:F9:C0:7B:34:F8:92:5A:55:FC:9E:C7:F5:3A:3F:FE:E7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D47C504B6DBA5DA5AFFB1B320
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     5065
IP address blocks:        216.231.32.0/24 maxlen: 24
                          216.231.33.0/24 maxlen: 24
                          216.231.34.0/24 maxlen: 24
                          216.231.35.0/24 maxlen: 24
                          216.231.36.0/24 maxlen: 24
                          216.231.37.0/24 maxlen: 24
                          216.231.38.0/24 maxlen: 24
                          216.231.39.0/24 maxlen: 24
                          216.231.40.0/24 maxlen: 24
                          216.231.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:04:b6:db:a5:da:5a:ff:b1:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=3ec7b173-6159-493a-964a-456854572bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:a8:67:2b:e0:9c:9f:1f:79:b3:6f:2b:bc:
                    6d:62:00:8a:c5:a5:04:95:fa:de:c5:c9:77:52:80:
                    83:66:a4:66:c2:dd:f2:a3:7c:b2:6b:ef:f7:7d:0b:
                    1f:22:64:df:e6:9c:57:df:80:79:08:fb:42:69:96:
                    a1:90:0e:f9:45:9b:a5:cf:23:c4:2e:5e:c2:f2:da:
                    1a:3e:eb:00:ba:71:6d:3a:22:4c:0c:11:9b:de:23:
                    fc:71:0b:73:fa:fe:8d:c5:9e:0b:af:5f:13:b2:f4:
                    25:ef:ac:80:d2:d4:9a:58:88:fe:7c:df:15:5c:a1:
                    ad:c6:39:83:39:e4:9f:49:0c:9a:5b:a4:db:88:7f:
                    52:79:c1:e3:01:3e:12:76:c9:3c:05:1e:1f:05:e3:
                    cc:ab:e9:19:d6:72:b8:2f:2c:11:a6:c0:91:68:a3:
                    44:36:fb:88:75:f2:0d:9e:28:29:c0:bc:54:0e:3e:
                    47:42:46:64:4c:7a:be:73:f7:31:9a:02:93:60:cd:
                    fe:aa:d8:c7:52:65:19:d3:1e:ce:40:5a:71:23:ff:
                    2b:70:5f:69:ae:47:9d:d7:2e:90:7a:d0:fc:16:17:
                    51:13:03:2a:b5:d2:07:4d:38:d6:b6:5a:a7:42:4a:
                    02:80:8c:a7:1a:a9:86:f5:85:7d:93:40:41:9d:d2:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:07:0C:10:F9:C0:7B:34:F8:92:5A:55:FC:9E:C7:F5:3A:3F:FE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aa7e7d9-bddd-37c8-acff-d780ef9f600b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.32.0-216.231.40.255
                  216.231.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:02:f0:01:01:40:67:d7:69:c7:81:c1:3c:4d:2b:a2:a0:ec:
         83:4c:d4:55:cc:a6:45:ca:50:2a:db:80:f9:7f:aa:b4:e3:08:
         9b:8d:0b:ce:f3:54:a6:9e:a1:23:04:24:a8:05:0f:0e:a3:17:
         36:c7:82:dc:a4:95:b3:4a:4d:b8:a3:50:1d:57:5d:e8:fd:6c:
         44:c1:40:5c:3a:f5:5c:13:b8:c0:23:d2:70:12:be:e0:8d:64:
         26:61:f6:a0:40:d0:ac:5e:53:1c:4b:8d:46:29:f0:2a:fa:be:
         0f:5d:8a:a4:bc:10:9e:9b:e1:7d:23:2e:5d:0d:06:98:c3:ad:
         48:b2:35:9b:76:f4:09:d0:0f:e1:b1:15:88:a8:a0:c1:07:02:
         14:d4:f1:f2:69:8b:1d:04:c3:68:7b:f7:5a:d6:81:5f:46:73:
         8f:51:b6:8d:9d:70:ad:b8:d2:fb:6d:df:83:d2:25:86:7b:df:
         ca:f0:3e:40:c1:de:54:65:68:ed:d2:ac:9e:ed:9f:2f:2b:bb:
         ce:b0:10:0b:0b:09:16:1e:24:f3:d5:81:e2:6a:3f:cd:68:7f:
         59:29:db:af:13:bc:12:07:76:f8:54:8d:d5:1f:33:b5:d3:d6:
         82:06:f5:a1:f7:87:31:43:48:ac:99:26:d6:1e:6c:82:12:ce:
         11:48:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:12 2026 by rpki-client