Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa
File:                     d902b0fc-d046-326a-8911-3ba38f451be2.roa (raw, json)
Hash identifier:          /pFLcPG3mZ+jBDnhz0iaUxxbFTXM7T7cGlX//AVYhZs=
Subject key identifier:   F5:FD:FF:E1:07:1D:EC:37:CD:9D:05:CD:F3:8E:F7:18:40:C1:5E:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA8D962FE34748E5D75C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        207.164.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:8d:96:2f:e3:47:48:e5:d7:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ed37c339-a028-498e-9448-5744ceb91c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:a3:37:16:a0:e2:7a:e0:69:1e:bb:97:da:
                    47:81:19:cf:3e:b9:87:84:53:a5:55:90:3c:f5:c5:
                    c0:51:2a:a4:af:2a:93:c8:5b:ca:97:cd:ef:3f:53:
                    14:25:0a:dd:c1:75:00:4d:d1:a3:5e:42:39:e6:30:
                    99:e4:bb:e1:17:ea:d6:23:39:32:f8:90:f7:f9:95:
                    19:c2:9b:43:91:b8:09:ea:10:c3:d2:ae:47:e8:64:
                    0d:ae:e3:b5:f0:49:0c:e5:06:8a:d9:34:a4:3c:24:
                    00:9a:27:5c:69:c1:d9:22:2c:2a:b4:78:b5:ea:a2:
                    94:89:00:c5:0c:49:6b:56:35:cc:46:8b:ad:ca:43:
                    c0:ab:72:91:43:88:9f:58:79:9c:fa:0c:78:61:56:
                    05:1f:3f:f2:87:fe:3f:80:ee:78:82:dc:70:86:88:
                    30:cd:d2:f6:e5:e2:6a:d2:2c:82:ab:52:f5:ba:0d:
                    56:24:9e:97:67:93:20:0d:16:3d:c1:23:bc:ab:51:
                    86:e1:bb:9d:3a:7d:0f:66:a1:56:ba:e0:85:6c:d9:
                    1f:89:03:a9:b1:44:c6:95:ce:9f:e7:23:62:d3:cc:
                    a8:44:af:68:76:64:26:ed:24:f1:d4:28:80:d3:32:
                    cf:c5:41:93:a9:b6:4c:b9:3f:05:66:93:a6:4b:49:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:FF:E1:07:1D:EC:37:CD:9D:05:CD:F3:8E:F7:18:40:C1:5E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:8c:18:f9:b0:00:c3:0e:15:1b:74:a6:b2:9c:1f:49:1f:
         d2:27:5f:78:31:ee:5f:9f:67:58:9e:16:8c:43:76:5e:16:c3:
         40:ed:c3:b5:8f:53:1c:4d:c0:fb:19:e0:16:b5:57:60:99:08:
         6a:dc:97:f3:b3:84:a8:09:1b:b5:8d:44:af:6b:ea:ca:cb:3e:
         62:69:ba:46:ed:69:6c:42:6b:d0:11:b1:65:28:74:62:37:03:
         68:9f:b6:a4:d7:7a:91:c7:ae:17:38:07:48:a2:72:cc:e6:94:
         58:c9:04:1f:d2:a0:c9:2d:4e:95:b9:6e:52:5a:c3:61:bf:da:
         7f:72:7f:c9:24:53:11:2d:0b:25:18:4d:5b:66:8b:74:4a:86:
         9c:cf:09:33:1d:f3:f4:ec:35:b5:e1:c3:c9:b3:57:c8:1a:61:
         05:ab:f1:e3:ca:7e:42:1f:11:07:bf:17:3d:a2:4a:a7:a6:cb:
         db:4f:ef:44:be:ed:6e:4a:d3:cd:31:bf:74:64:bf:7d:f5:a9:
         ad:c3:5a:e8:ee:cd:f4:57:f5:8a:2b:26:38:c8:53:1b:b4:8d:
         36:40:fe:ba:fd:23:50:63:bf:5e:ec:f5:82:ed:83:22:62:a3:
         53:85:4d:1d:ea:a5:11:c1:b2:80:fa:f1:2e:80:84:94:ad:11:
         05:55:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:29 2026 by rpki-client