Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e44d99b-bcdc-35b9-8456-7c3025a9a006.roa
File:                     1e44d99b-bcdc-35b9-8456-7c3025a9a006.roa (raw, json)
Hash identifier:          1gx+FYLMgPjCC6FpxriwkZ26MyDMv8JpQu3lguFRRTg=
Subject key identifier:   59:9F:62:BB:2F:35:D6:04:FA:7D:62:E5:FA:BE:ED:F1:42:35:2F:3A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D3E000220AB145AAEC33CE570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e44d99b-bcdc-35b9-8456-7c3025a9a006.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     36183
IP address blocks:        172.225.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:02:20:ab:14:5a:ae:c3:3c:e5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=30db7bfa-1168-4964-8a70-af7ae36eefd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:67:33:49:dd:f2:b4:cb:5a:eb:dc:d8:01:
                    90:e6:d8:f9:96:d4:4f:71:5d:38:02:1a:e7:a9:61:
                    1e:55:d8:23:80:99:ce:f2:94:ee:1f:b7:42:7b:29:
                    9a:58:e6:55:c2:da:75:2e:68:e2:17:fc:05:77:4a:
                    7b:38:70:dc:8d:f8:45:8c:92:50:cf:1e:db:b7:ef:
                    c6:5c:0d:62:1c:a2:ed:eb:1d:95:76:71:16:62:82:
                    e4:26:64:fe:a9:ef:30:7e:7a:e3:5a:31:52:13:9f:
                    82:95:8d:2d:41:8c:66:0f:9e:3f:fa:b1:94:d7:1f:
                    94:2b:eb:88:b5:12:dd:c6:6a:ce:21:43:a6:ce:fc:
                    30:7f:4a:0d:32:c4:83:61:94:a0:56:74:62:f3:1d:
                    57:39:c5:5a:22:4c:d0:51:c6:80:06:10:f0:d8:9a:
                    71:b1:04:1a:df:fe:22:77:ad:6a:44:82:eb:75:b0:
                    56:41:69:2b:cd:23:da:1d:c1:e6:d0:f8:45:76:d3:
                    95:a7:bb:4c:72:9f:04:2d:c2:a3:80:11:74:6a:73:
                    b2:2e:21:a4:41:82:5c:b5:81:9b:be:16:b3:14:2b:
                    ce:7a:dd:c9:59:24:59:dc:b8:f8:87:b8:6b:1f:46:
                    8f:ee:a7:f5:6d:bf:ab:f0:b8:4e:06:a3:73:d2:7f:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:62:BB:2F:35:D6:04:FA:7D:62:E5:FA:BE:ED:F1:42:35:2F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e44d99b-bcdc-35b9-8456-7c3025a9a006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:f2:df:21:c3:b9:44:50:bb:a9:76:92:bb:ce:f8:83:36:
         66:1b:82:48:b5:66:8c:ed:98:2e:ca:8b:e2:bc:c4:62:60:79:
         46:bb:6a:76:58:79:ae:80:6c:c7:0b:f0:9b:00:27:bf:25:b6:
         04:77:76:1f:dd:92:c3:7c:12:5b:ea:0d:cd:aa:c3:36:45:55:
         fe:34:e5:50:b9:0a:17:f2:d3:cc:89:a2:e7:3f:3b:c3:6b:83:
         91:fc:c9:d0:8b:ae:1c:39:8f:aa:cf:07:db:c5:8c:d5:e6:18:
         76:ba:15:37:e5:68:2f:48:80:61:c4:b8:52:3c:99:f8:72:1f:
         60:71:a3:7b:58:04:a9:c9:f8:be:4e:a4:27:5a:d5:80:e1:2b:
         3d:e4:86:2e:54:1e:4c:af:ad:89:d8:ef:7b:df:75:e8:a5:43:
         0f:0c:f3:a1:1f:4a:b0:bd:4b:2f:18:17:fc:71:6f:89:6d:83:
         96:95:c2:d6:ca:88:bd:63:02:1a:79:65:23:ef:7d:27:9b:69:
         37:f0:87:97:dc:7e:5a:58:36:e4:19:2d:3d:0b:e3:a1:3c:f2:
         f3:d3:10:21:f3:e1:2b:a6:2a:99:3f:ae:a8:d0:ac:6c:8f:e8:
         9a:25:0c:e3:f5:59:0a:6d:04:ef:12:bb:cb:fe:c6:28:41:0e:
         75:52:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:35 2026 by rpki-client