Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa
File:                     5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa (raw, json)
Hash identifier:          yAYdlEVwN9wvj3sadUXHPv2sieCCcRuxDaBerVEpyWE=
Subject key identifier:   89:B9:EE:D3:AA:FD:98:D4:78:5D:D3:94:21:ED:6A:1C:FB:0D:C4:EB
Certificate issuer:       /CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5
Certificate serial:       010D0C9F4328584D49108E1A9BF0B3A616C2C700
Authority key identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa
Signing time:             Wed 25 Mar 2026 12:08:56 +0000
ROA not before:           Wed 25 Mar 2026 12:08:56 +0000
ROA not after:            Tue 23 Jun 2026 12:08:56 +0000
asID:                     46920
IP address blocks:        199.229.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:10:8e:1a:9b:f0:b3:a6:16:c2:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5
        Validity
            Not Before: Mar 25 12:08:56 2026 GMT
            Not After : Jun 23 12:08:56 2026 GMT
        Subject: CN=c42af020-4645-4187-93ea-be2fd866caca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:01:c9:d2:ae:6e:73:25:4b:54:06:a3:ec:
                    1b:bf:28:38:d7:9e:43:52:0a:c4:8d:e3:d2:5d:9c:
                    66:de:17:26:aa:84:c8:07:0c:72:68:58:b4:24:4b:
                    da:2b:28:34:2c:f3:e4:9b:7c:1a:48:eb:fb:b2:1b:
                    38:71:e3:11:f1:ba:fd:cd:84:7a:f1:5a:38:77:2e:
                    fc:ec:d9:dd:27:59:f9:4b:54:05:35:32:6d:32:95:
                    13:fe:e7:61:aa:7d:fa:ce:1a:73:6a:ce:e9:66:29:
                    c1:60:2c:06:cd:57:51:0d:64:9c:22:95:ce:bd:76:
                    60:74:a2:6f:13:0d:a6:48:6d:7a:c1:64:5e:d2:83:
                    32:68:f6:c8:04:1d:98:c8:19:b9:00:50:50:45:67:
                    e6:81:0a:4b:df:91:b1:9d:72:b7:b4:6e:3a:9a:8a:
                    e7:41:3d:9e:3b:23:16:74:03:f1:f0:9e:1e:a1:31:
                    6c:03:5a:01:fc:ea:59:cc:40:e8:48:72:41:55:26:
                    62:19:bf:0b:b9:8b:69:fe:e7:e1:65:dd:cd:32:ba:
                    2e:a9:93:85:33:ba:97:d2:ea:be:c3:ae:d0:f4:25:
                    3a:dd:e6:77:2a:47:0e:e4:77:c7:87:e1:72:4b:fa:
                    71:1c:73:c7:ef:f7:6d:58:ea:ba:f2:eb:5b:d4:e9:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B9:EE:D3:AA:FD:98:D4:78:5D:D3:94:21:ED:6A:1C:FB:0D:C4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl

            X509v3 Authority Key Identifier:
                keyid:36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.229.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:b1:92:24:15:ca:a1:9e:2b:b3:9f:65:26:6a:c2:0b:0a:
         f8:60:33:02:47:05:39:a3:d8:b3:15:e8:6c:2b:92:5c:bf:63:
         8d:d6:3d:09:df:e3:e8:28:b6:bf:90:a3:6c:28:07:e8:13:ac:
         fe:cf:48:d1:32:75:29:98:73:40:38:55:da:f4:35:4b:8c:b1:
         9a:97:fd:75:00:04:15:ab:61:72:ae:e5:5f:01:c0:16:11:59:
         b3:f0:64:66:66:ab:f6:81:a7:ac:c2:a4:b3:16:0f:7c:2e:25:
         78:2f:fa:7e:35:57:c7:07:40:98:8c:fd:f1:b3:fb:c3:30:3c:
         96:f8:27:40:c5:b4:1a:12:f6:63:9e:17:cc:1b:08:1f:38:27:
         7c:7a:5a:c0:e0:5d:41:38:22:c5:ca:f3:e9:18:66:7b:d4:c5:
         a2:45:50:04:bf:93:52:5a:fa:3b:a9:84:9e:1b:47:46:9c:db:
         28:ca:ab:81:0b:e3:dd:b6:18:ec:58:52:3a:e8:2d:12:bf:41:
         db:91:a5:4b:98:50:4c:9d:64:e0:7b:60:c8:a9:29:c7:a2:d0:
         05:95:82:3f:d6:9e:b1:2b:c4:82:bd:02:d5:5d:07:13:3d:3c:
         c8:91:25:2c:db:86:cc:cf:ea:96:dc:11:f0:66:bb:36:6b:fd:
         76:d4:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:35 2026 by rpki-client