Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa
File:                     359dc980-81b0-3d41-b6bd-af61207d8a5c.roa (raw, json)
Hash identifier:          yYVOseKFkBZ1DlQ8gb4MsY/zqykJ02oxUkhAIHUJ49M=
Subject key identifier:   FA:26:04:F5:BC:B7:CF:E3:E8:4E:23:AE:7C:19:4E:96:8C:98:4A:7D
Certificate issuer:       /CN=35f2e41c-a886-4dc4-b326-e3d684666794
Certificate serial:       010D0C9F4328584D3DFFA1528740E741CEFA1440
Authority key identifier: FC:27:30:ED:87:B1:19:31:D0:DD:C3:78:B0:33:C6:17:38:74:5F:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16912
IP address blocks:        74.115.228.0/22 maxlen: 22
                          208.84.113.0/24 maxlen: 24
                          208.84.114.0/24 maxlen: 24
                          208.84.115.0/24 maxlen: 24
                          208.84.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a1:52:87:40:e7:41:ce:fa:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35f2e41c-a886-4dc4-b326-e3d684666794
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4cfdcdd6-e7cd-4ec6-9456-42598ffebcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:6b:f4:d3:79:64:a2:b4:26:6f:f1:62:c5:
                    ec:04:d7:5d:e6:69:3a:81:f5:81:9b:7b:98:0d:9b:
                    83:fb:4d:b9:08:ad:8b:1f:17:ab:ba:0c:e8:1d:6e:
                    db:8e:6a:9f:56:0f:1a:ba:8c:c2:04:c6:f4:eb:3a:
                    01:41:e6:5a:b3:50:f1:7c:1c:a3:25:c0:48:04:0e:
                    01:47:cf:97:04:1a:05:b9:24:dc:b0:18:90:4d:43:
                    49:e2:23:61:61:a1:20:4b:26:94:d2:1b:b1:1e:91:
                    59:34:16:52:84:8b:98:cb:fd:d5:0f:a2:85:96:f3:
                    f8:d6:b3:2b:61:ef:68:39:31:b3:e5:e0:82:c3:22:
                    8d:d5:95:0f:ca:c0:e7:96:35:90:62:d2:91:7f:7d:
                    dc:6c:97:5d:00:be:a3:d9:e7:1d:fa:27:12:d6:21:
                    c5:00:4b:3b:36:0d:d8:a3:e3:3e:8a:a0:7b:b8:3e:
                    98:ff:d4:49:7d:ff:70:1b:b7:dd:1a:70:78:71:86:
                    cb:b8:ff:0c:05:25:30:24:4b:2e:64:2f:6e:88:1b:
                    12:64:46:46:2c:9d:83:26:a2:26:24:32:bd:05:e8:
                    16:0e:48:0d:19:b5:02:38:fc:c7:75:72:1f:a3:f3:
                    74:38:c8:1d:d2:51:b1:21:de:79:26:76:75:f3:a6:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:04:F5:BC:B7:CF:E3:E8:4E:23:AE:7C:19:4E:96:8C:98:4A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/359dc980-81b0-3d41-b6bd-af61207d8a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794/35f2e41c-a886-4dc4-b326-e3d684666794.crl

            X509v3 Authority Key Identifier:
                keyid:FC:27:30:ED:87:B1:19:31:D0:DD:C3:78:B0:33:C6:17:38:74:5F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/35f2e41c-a886-4dc4-b326-e3d684666794.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.228.0/22
                  208.84.113.0-208.84.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:b1:ce:e2:a3:f0:d0:e0:c0:63:03:a7:0c:3f:4e:2c:0b:
         d0:df:7f:b0:da:7e:07:0e:35:73:9f:ba:2f:96:70:6a:79:61:
         92:e0:e9:f5:49:f7:fa:3b:94:c0:e8:6e:38:bd:22:c4:34:34:
         2d:c2:13:01:18:0d:6d:1f:b4:f0:06:b5:7c:c8:b4:d8:4e:85:
         2d:8b:88:f8:95:34:dc:71:a5:80:4e:f4:6e:08:03:d0:02:2f:
         f4:7b:6c:3a:93:a9:5d:a8:90:8c:11:e0:02:3c:b7:84:80:c0:
         32:02:d2:7d:4b:8d:17:e4:eb:58:fa:df:ce:b8:cb:29:dd:4a:
         96:98:ad:c2:66:49:b0:84:20:01:82:c7:d0:f0:a4:f7:67:15:
         7a:29:f6:cb:08:55:b6:05:ce:a1:7b:58:2d:7e:99:c7:4f:d9:
         e3:00:19:93:b7:f1:c3:a7:b8:a6:26:96:86:b4:2c:70:ac:eb:
         3e:d4:59:31:7e:ad:b4:2c:6a:c6:54:eb:cc:06:ba:bf:34:c4:
         2e:83:60:c8:73:3f:4f:30:b1:ae:74:15:d8:3e:7f:fb:00:5a:
         1e:09:e2:df:39:0e:29:11:92:0e:ac:b5:93:12:93:9f:6b:be:
         44:00:46:85:62:c0:79:d7:f0:be:d4:ca:0c:87:29:a9:48:91:
         f2:c0:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:08 2026 by rpki-client