Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
File:                     921fd0ed-93df-36db-807d-72ec839c9541.roa (raw, json)
Hash identifier:          bcrFbubFn4KwwIQrOP/VJeBmlVL4VVixceSpD+QYKxI=
Subject key identifier:   7C:71:DB:D7:53:AE:C9:2E:E0:3B:50:A4:52:EB:9C:42:14:25:08:74
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F4328584D1F4A374C840D837B1FA00700
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     14537
IP address blocks:        162.250.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:37:4c:84:0d:83:7b:1f:a0:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=e2bd8c83-5a78-42f8-971e-07fda379f687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:1f:44:7f:8a:b8:ff:96:7d:11:9c:82:47:
                    a0:64:09:7a:72:0a:21:03:9c:14:79:c9:02:df:13:
                    15:1b:ab:6c:75:e6:d6:68:14:83:b0:bf:38:86:ef:
                    dd:ad:df:61:57:ec:98:9b:e2:47:6a:be:b5:da:90:
                    e9:7a:08:82:d4:62:b7:c0:af:d2:b1:ce:9a:ab:95:
                    52:35:6e:e6:19:6b:aa:62:bb:41:e3:2a:de:ac:47:
                    bd:e7:24:32:9a:40:fc:19:e8:38:c6:54:f0:b7:da:
                    99:37:63:db:3f:21:b1:8a:d3:8a:7c:68:28:d7:36:
                    a3:61:2b:80:6b:30:2c:03:68:89:fa:eb:98:78:f5:
                    d7:80:3b:4a:d7:90:7e:38:40:a9:06:97:0e:35:0a:
                    f9:e0:99:22:82:01:a1:7a:98:88:09:b5:3a:09:a4:
                    44:d4:7b:51:41:ed:e3:f7:45:cf:f9:37:70:56:a2:
                    ce:2e:2f:b7:93:6e:ba:93:56:8f:20:68:1a:38:d1:
                    a8:e2:79:16:8f:15:e1:b0:e2:f6:3b:ed:41:b0:72:
                    9a:f9:ce:84:ea:f3:75:5d:4c:02:bf:fe:d9:b0:b1:
                    f4:fd:74:01:c7:a0:29:2b:99:bf:45:84:0b:9e:37:
                    3c:7e:79:90:0a:f1:25:a9:45:82:0a:ef:49:b9:0f:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:DB:D7:53:AE:C9:2E:E0:3B:50:A4:52:EB:9C:42:14:25:08:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/921fd0ed-93df-36db-807d-72ec839c9541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:af:3b:6b:2d:eb:2e:75:ea:37:49:a8:9a:6a:c8:08:cc:83:
         7e:6f:b0:50:79:b4:de:db:a2:b9:7d:a3:52:70:8d:2c:ca:4b:
         7d:bf:cd:65:3e:a8:5f:16:3f:b5:9f:68:b1:cf:95:f2:f8:9e:
         a1:6f:c2:62:a3:23:98:b5:ae:28:71:77:78:fc:e6:f4:77:88:
         50:59:16:b8:91:ad:25:cd:46:70:bf:c6:fa:6b:47:3e:53:8f:
         97:ec:27:93:1b:29:7e:0e:fe:8d:06:fc:43:37:4f:58:2d:e8:
         56:1e:14:02:90:b1:b8:62:60:9f:37:3a:fa:f4:6b:4f:62:38:
         ab:df:85:f5:71:33:eb:65:9f:dd:e8:02:48:26:e5:7a:4c:97:
         19:df:01:91:d2:f1:a0:25:00:6f:8b:cf:2f:1a:75:9e:36:a7:
         98:05:4c:12:2d:8a:f5:c5:43:d3:19:ba:32:61:21:78:63:ae:
         b2:e1:8b:a6:5f:88:02:63:fe:ba:79:d4:eb:80:b4:12:37:02:
         7e:53:64:38:1d:3e:33:f4:65:d2:16:a9:7d:09:9d:48:b9:2a:
         24:05:5d:5d:50:a1:72:a9:09:fa:20:85:a9:00:67:24:1b:aa:
         2f:c0:ba:b7:2d:f4:ed:6a:87:b0:a3:58:b1:0f:e0:93:47:70:
         d5:be:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:03 2026 by rpki-client