Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa
File:                     3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa (raw, json)
Hash identifier:          LcCHMfdS1j7cpDtgax0/m8SIzi26a1y6dD+ANj6EwSY=
Subject key identifier:   94:F3:0C:C7:EB:90:45:5F:FD:A0:5B:71:03:A0:A9:EB:4C:C6:41:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D3B34EC6158EA65B2CC60F7C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        172.253.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:ec:61:58:ea:65:b2:cc:60:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=ff7d7ec1-4c34-4a8d-a9c2-fd4eebd39ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:8a:6f:6f:ea:e9:31:11:ba:11:f9:46:77:
                    60:79:2d:0f:f4:03:9f:94:92:4a:d1:12:8d:75:61:
                    92:9d:b3:47:64:4d:ff:74:eb:fb:a1:46:b5:af:92:
                    47:69:cf:65:73:d6:f9:4f:c7:4f:1e:b7:48:9f:54:
                    d5:9f:3d:0b:94:03:f5:77:b5:95:87:86:17:1a:e2:
                    34:a7:21:b4:cd:49:6d:5f:01:0e:c4:48:a3:a2:42:
                    a6:6c:71:56:63:1b:b6:18:4a:eb:ed:a7:9b:cb:72:
                    5c:c7:4a:36:b5:87:84:a2:35:9c:44:d7:ba:17:ee:
                    7f:95:b6:21:86:4f:87:d7:7b:2b:ce:2f:15:2e:2b:
                    c5:f6:5f:12:6d:2a:1f:8b:45:95:22:f2:75:f2:8d:
                    de:01:2d:b2:6a:80:f3:4d:a9:d4:73:79:6f:a4:a1:
                    7c:04:f2:8f:e5:a0:4e:e5:7b:b1:55:5a:7d:72:ef:
                    59:67:a6:8d:7b:0b:90:54:1a:3a:65:56:1d:a2:68:
                    53:53:0d:f9:c2:5d:d9:f9:08:2b:bc:98:0b:57:16:
                    96:20:fc:85:0e:26:91:dd:d4:cc:4f:14:49:15:42:
                    b6:03:f3:d4:23:2c:a0:49:3d:24:68:0a:0b:3d:28:
                    fe:85:cb:c2:65:4c:e0:10:72:51:84:86:42:4c:e0:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:0C:C7:EB:90:45:5F:FD:A0:5B:71:03:A0:A9:EB:4C:C6:41:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:2e:97:c0:f4:6f:e6:8b:ca:bc:df:6d:ba:69:d1:c9:2b:
         f5:63:2c:1d:f8:8b:ce:46:da:9c:ac:ab:cf:2a:c5:22:5f:24:
         b7:b4:37:6a:35:18:bc:f9:a9:f9:bf:91:40:7a:94:5f:70:ad:
         65:64:2a:13:20:55:8a:7e:12:e4:8b:86:8d:d5:39:14:57:ef:
         48:53:70:46:4a:1e:d2:29:ec:a9:ee:62:c6:e8:52:d9:e3:28:
         50:b3:10:01:53:2f:09:a4:b7:a1:28:8b:5d:2a:d3:a3:28:69:
         09:4f:ed:20:2a:5c:80:67:af:71:82:ab:ab:35:b8:8a:d3:fb:
         86:87:df:6e:2d:ae:95:3f:7a:d6:4d:19:7d:92:a0:f5:80:ee:
         f6:ca:bf:99:46:4a:b1:38:cd:45:05:38:b7:72:a4:84:78:60:
         83:09:9c:71:1c:42:d8:1a:97:f6:e7:d9:d6:7b:a6:8f:3b:52:
         df:56:90:e1:01:e2:66:5f:3c:6e:8a:5c:cd:5d:78:ae:1e:5e:
         8a:be:74:65:ed:c4:ba:f4:50:bc:b9:44:fd:80:49:fe:ca:c2:
         b3:30:20:56:2f:41:91:39:8a:7e:c4:7c:f4:5a:ae:33:7f:52:
         ee:df:f2:c2:07:16:95:e2:db:2b:a9:7d:dd:ea:a3:0e:83:9c:
         a2:5b:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:25 2026 by rpki-client