Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbe38ee-cca1-342d-8222-9f91b7c98723.roa
File:                     9bbe38ee-cca1-342d-8222-9f91b7c98723.roa (raw, json)
Hash identifier:          k47PnHeovHTrVsgCEDdwIHQ6kEa3j/sEj8kp2oja+cY=
Subject key identifier:   B8:AA:4F:EB:1C:17:2C:EA:2F:28:3F:35:22:53:ED:39:C8:3C:91:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D39CF9346321EA3F3BC974B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbe38ee-cca1-342d-8222-9f91b7c98723.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     36183
IP address blocks:        172.225.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:93:46:32:1e:a3:f3:bc:97:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=d64e5a56-9dc8-4c41-af2f-cebbcfb86671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:a1:20:b6:76:7b:64:d2:31:58:00:b2:40:
                    ad:2b:56:a9:08:68:d9:19:e6:42:a0:bf:6f:14:24:
                    5f:a2:42:d3:d8:82:32:8a:1b:43:62:6e:21:c1:40:
                    63:a4:8e:1e:1c:68:17:2b:33:94:47:91:84:11:ca:
                    6c:a9:a6:c3:d7:e0:8b:6d:c0:49:2c:b7:38:0a:6c:
                    2a:16:c0:a1:6b:74:d6:8f:f4:1f:d1:8e:c2:fb:46:
                    e0:a3:e1:4b:0d:c6:20:cc:5d:cf:9b:f1:61:74:b3:
                    16:9d:be:d8:72:89:b0:a7:a8:1e:c0:5c:9e:f3:6a:
                    5e:8d:4a:7f:9f:29:19:d7:8b:8e:38:f3:7b:1c:5e:
                    78:34:e4:39:7f:f8:89:83:b9:d5:52:b0:55:bc:9b:
                    a5:4a:7f:77:e7:7b:c4:4d:e9:b7:91:c0:6c:f9:3a:
                    a7:04:0f:2c:55:89:f7:0c:b9:86:69:3b:f8:ab:a9:
                    67:7f:93:c7:7d:a4:07:8c:bc:8c:d0:9a:5a:fa:4b:
                    90:e4:6b:2a:d9:f8:64:88:c8:88:65:fd:3e:51:84:
                    83:97:14:47:3c:df:16:e0:f1:ac:eb:6e:68:d6:ad:
                    85:c8:80:55:ec:d7:44:c0:da:de:58:b2:a1:34:48:
                    71:92:42:7c:6c:85:1a:77:ec:47:e0:70:2e:49:29:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:4F:EB:1C:17:2C:EA:2F:28:3F:35:22:53:ED:39:C8:3C:91:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbe38ee-cca1-342d-8222-9f91b7c98723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:b8:39:65:29:19:82:45:a7:94:16:03:82:ce:e0:d6:5c:
         22:70:6e:c1:7a:9f:aa:ce:55:d6:27:01:73:5a:1d:23:15:4f:
         62:42:34:a1:dc:9a:12:b3:cd:2a:1e:0d:d9:3f:44:51:95:71:
         b9:52:54:6d:d5:f6:9e:6a:48:85:af:cd:5c:45:7a:06:8a:02:
         b0:7f:9c:50:fe:08:64:3d:a9:cf:74:a7:92:fd:eb:17:d6:d8:
         9e:64:ff:6a:fc:f9:4c:c2:ab:31:17:33:51:e1:13:8c:41:f1:
         69:0b:a4:3f:23:db:01:39:9f:93:13:37:2c:98:bc:3f:be:7b:
         5e:c5:73:98:fe:5f:59:48:c2:bc:37:4a:10:ec:41:32:a1:d2:
         d0:1e:90:16:c7:f0:33:d4:72:05:5f:fc:24:dd:b7:c4:c9:07:
         61:64:4b:87:c8:d0:2c:2f:2b:1a:b5:54:55:3a:1b:d5:d9:72:
         e0:12:8c:bb:fa:d0:c8:39:23:13:d4:53:d5:09:4a:14:fe:0d:
         41:57:f6:6c:1d:96:2f:0b:26:52:9a:3b:e9:12:b6:cc:2b:cc:
         a4:ed:37:26:1e:cf:03:6d:86:2f:30:ac:f1:65:0d:8e:7c:d5:
         bd:e8:6c:b2:d9:d5:5d:3b:a2:3e:6d:a1:b1:9f:66:94:d4:16:
         8c:dd:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:51 2026 by rpki-client