Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa
File:                     3454a476-0091-3626-aca7-01c8ce27057a.roa (raw, json)
Hash identifier:          1bBzHOYvC8vMlDIIT/2mrKg/H0+k6MwbUZastqrjxP8=
Subject key identifier:   CB:F7:BF:16:D5:ED:1F:0A:6D:D6:3F:D5:9E:00:C1:73:6F:11:6E:16
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5E1A8754308D158A4BA8B880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        72.255.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:87:54:30:8d:15:8a:4b:a8:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=b0e873e8-9014-4c88-b0b1-afed6d0dfa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:15:57:87:e2:b5:59:c3:70:a8:6d:a9:9a:
                    94:52:6c:98:20:12:77:2a:4d:8a:91:f7:6d:2e:94:
                    f5:1f:2c:e3:e4:1a:ad:67:51:55:1e:95:f3:63:b9:
                    27:f4:f9:5e:8c:9f:bd:b2:ca:65:20:29:d9:f4:b8:
                    c2:18:71:a6:90:45:f2:ad:03:5c:59:de:bb:79:5e:
                    dc:b8:e5:e7:4b:c3:81:49:1d:c1:28:c0:97:4e:4d:
                    75:69:18:9f:03:3f:17:19:df:5d:63:47:81:0b:ad:
                    23:5c:e2:7f:44:2b:90:61:4f:68:05:e7:d6:ba:5a:
                    dd:66:02:9f:ff:2d:76:92:8b:50:b9:00:c8:59:9c:
                    e4:7b:0d:00:1e:11:61:b1:22:95:69:9c:ba:54:95:
                    be:d2:7b:13:a2:3c:aa:26:63:61:b8:eb:60:c5:5a:
                    15:25:99:c1:03:a5:78:51:38:52:40:cc:fd:23:94:
                    22:80:65:91:73:76:1a:10:95:38:dd:41:7c:24:65:
                    04:63:d6:ed:61:d4:ba:93:78:d4:b6:68:ee:0e:59:
                    42:47:2d:be:33:68:37:87:5c:12:c4:d2:75:42:a9:
                    fc:cb:33:d9:75:cd:1c:53:09:1f:9c:4d:65:1d:b9:
                    6d:36:e9:a4:01:23:75:45:9a:00:4a:c6:79:4e:67:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F7:BF:16:D5:ED:1F:0A:6D:D6:3F:D5:9E:00:C1:73:6F:11:6E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3454a476-0091-3626-aca7-01c8ce27057a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:45:91:d7:14:29:eb:c0:a1:51:01:bc:38:ce:82:28:db:80:
         c5:5f:1e:52:fe:b6:29:b1:f5:5d:42:95:a5:b6:a1:58:67:b1:
         f1:b3:d9:5e:d3:8f:b7:2f:10:9d:c9:4a:c5:aa:a8:01:98:e9:
         bb:b2:6f:58:2a:1c:d0:2b:e0:d1:15:70:80:b0:2d:f9:43:79:
         ce:c4:08:05:98:53:49:d4:da:f0:ac:60:69:65:f7:9f:00:f8:
         ac:5b:0d:6b:b6:7f:96:08:92:d5:a3:34:b4:9f:54:f4:d5:4c:
         24:77:08:ec:6d:ce:06:39:04:63:19:ca:8c:ad:30:82:2f:68:
         e9:b7:7e:33:16:51:95:dc:11:a9:76:d4:3d:54:0f:9f:00:14:
         f7:74:1e:65:fd:ed:f1:02:08:8f:06:23:e4:a7:9b:97:a2:ce:
         c0:90:ad:7c:b7:5c:c1:f9:5c:41:b7:54:a5:8e:d3:a9:7a:0f:
         48:e0:8f:4d:4d:9c:52:a6:8f:f6:74:40:95:a9:83:75:4c:aa:
         75:3c:f3:dd:33:be:d7:33:7b:c4:54:3a:b1:05:20:70:a8:d2:
         dd:de:ef:fd:29:08:08:91:ee:3d:cc:4e:fe:c7:a5:11:d4:60:
         1d:ea:b1:25:fe:4a:03:c6:8a:28:26:56:8f:7b:f7:75:2d:a8:
         1c:e4:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:58 2026 by rpki-client