Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a247a90-ae5e-3924-8478-d087dbcfbe7a.roa
File:                     3a247a90-ae5e-3924-8478-d087dbcfbe7a.roa (raw, json)
Hash identifier:          eOq33aDRP9Eb6p5rGzSyzfxInJYtLDf4PS8fY/Txef0=
Subject key identifier:   6F:5B:46:93:32:A5:56:6E:B0:97:31:E1:6A:1A:67:E2:B0:29:B1:3D
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584D07ACF9BC0189C5877738C000
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a247a90-ae5e-3924-8478-d087dbcfbe7a.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     401405
IP address blocks:        216.147.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f9:bc:01:89:c5:87:77:38:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=00d4af26-0001-4a42-baa7-6fd11623e7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:87:f0:e8:12:84:b9:70:63:fc:96:1b:27:
                    f6:ac:a2:63:8a:13:07:8d:59:2c:5c:0d:d5:ec:f0:
                    0c:5f:12:36:30:a2:fb:3b:5d:73:d4:c4:b0:e8:fb:
                    3a:cc:c3:9a:2e:70:8b:6b:5a:9a:df:31:a4:e4:6d:
                    0b:de:31:d0:33:b8:47:15:3a:c9:32:88:2b:c5:41:
                    f4:f3:23:91:61:fc:77:32:19:73:2e:13:fa:0a:cb:
                    c1:2a:d2:b5:89:cd:98:b8:74:f8:77:8a:eb:cf:cb:
                    36:04:ec:d2:21:fe:0a:c3:d5:42:e0:9d:f2:cc:d7:
                    a4:47:c5:25:a0:ab:7c:47:f9:9f:86:46:13:50:e0:
                    09:24:0f:2c:fc:2d:7f:55:eb:bc:90:4a:2c:61:9f:
                    c2:48:21:63:82:45:ed:86:e6:77:1f:d5:2a:e8:be:
                    f3:c6:1c:1b:04:c5:39:79:62:64:9f:8a:a7:cd:ed:
                    b4:9b:8a:d4:c2:b8:9b:7c:2f:19:b7:f4:83:76:fd:
                    d4:c5:36:7f:9b:39:b0:b2:86:a8:4d:97:ad:4f:e6:
                    51:23:56:cc:da:41:27:2c:2b:a4:7f:c6:36:67:7e:
                    c9:e0:90:28:8b:2e:fb:2c:f3:81:09:d2:74:bf:4d:
                    77:58:8b:3a:55:35:61:5c:7d:35:8b:59:98:00:4e:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:46:93:32:A5:56:6E:B0:97:31:E1:6A:1A:67:E2:B0:29:B1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/3a247a90-ae5e-3924-8478-d087dbcfbe7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:2c:8e:b0:a4:bf:65:ae:d2:0b:f9:17:be:3a:49:d5:53:
         fe:49:bb:19:f4:3c:74:82:e7:b0:e0:50:12:89:2f:70:2c:2d:
         72:82:01:9d:50:9e:31:4b:e7:e4:c4:d9:9f:eb:be:a5:0c:eb:
         1d:77:3d:17:c6:ae:7e:9b:30:8c:fb:61:a0:1b:c3:75:dc:24:
         cc:b5:9b:d5:90:4b:93:2d:50:2f:a4:1f:af:0a:0a:76:9d:9f:
         96:d6:75:e2:e4:15:63:e0:8e:8e:9e:c1:3e:a5:44:1b:51:f4:
         c1:19:da:e1:32:38:94:37:bb:85:d5:00:99:ed:ec:dd:37:4e:
         e5:55:75:39:cb:2a:68:a6:4c:ad:97:f0:66:56:6b:82:55:7c:
         d1:5e:5e:68:0d:7e:99:f5:85:1b:3f:aa:27:00:c6:71:fb:9c:
         93:8d:bf:21:c3:e7:5b:55:5a:f6:f4:39:fb:0f:70:81:ed:6d:
         fb:7a:04:4c:9a:d7:79:ea:1f:37:9a:af:6b:e2:a5:01:af:f1:
         3a:12:c1:a5:db:c7:08:e3:b6:3f:15:f8:52:22:06:c3:f8:ff:
         6e:81:9c:80:2f:6a:53:8a:b9:d7:ea:27:ef:fc:a0:5d:00:66:
         cc:75:42:de:28:4c:ca:f6:f6:a1:b6:10:b0:53:cd:45:1b:eb:
         ac:68:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:28 2026 by rpki-client