Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/fdad9083-83a7-3361-b44e-5de2dfb3e26a.roa
File:                     fdad9083-83a7-3361-b44e-5de2dfb3e26a.roa (raw, json)
Hash identifier:          JjxFqweuwebgBAc3/Q+le0P+GhuuUeeihkibCvlaNt0=
Subject key identifier:   E4:F6:03:D8:24:6B:3A:D5:EA:D7:F2:62:2F:81:81:9D:41:C9:CB:B4
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584CEBC231746C6493C2F3251AD0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/fdad9083-83a7-3361-b44e-5de2dfb3e26a.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     50304
IP address blocks:        172.84.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:31:74:6c:64:93:c2:f3:25:1a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=6d0ccff1-4d74-46a8-9d9a-acb134eabc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:35:7b:ca:bf:53:81:31:54:c2:c7:7a:0d:
                    64:d4:8c:03:f2:d8:c4:86:8e:61:54:75:4b:0d:3d:
                    bb:b8:cf:21:92:3a:ec:29:33:64:57:11:44:89:15:
                    43:13:74:5b:99:d0:de:89:44:88:eb:0f:42:b4:6c:
                    ef:73:7a:a1:68:77:2f:39:02:fa:14:f4:00:6d:dc:
                    8f:25:45:63:b8:0d:0b:99:cb:03:cd:ef:94:50:84:
                    3d:80:ce:8e:12:99:b2:01:e4:29:56:0b:70:7b:9b:
                    aa:8a:3a:9e:9d:2d:59:bb:b8:cb:f4:5b:2d:ab:f4:
                    ee:1b:9b:5b:e4:c3:ae:e5:e4:34:6a:e1:fe:f1:37:
                    e3:bf:72:f7:9f:44:d3:e4:09:5c:57:fb:ac:6c:a5:
                    a2:2b:6f:7c:25:31:c8:55:56:20:3a:4a:e0:b3:d9:
                    86:32:d6:e3:f6:4a:f1:03:54:49:ae:60:7b:35:77:
                    80:0f:e0:8a:78:4a:95:be:fd:6f:d8:14:78:1b:87:
                    54:fc:57:f2:55:ab:04:59:8d:82:1b:f6:68:a1:c0:
                    4b:87:d0:6b:2b:0d:38:0f:b3:3c:e6:78:94:ab:37:
                    b7:35:42:da:de:7a:ba:67:a5:51:b4:eb:60:d5:01:
                    47:c4:1c:fa:42:60:46:2a:d0:8b:a4:1f:fa:0c:d8:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F6:03:D8:24:6B:3A:D5:EA:D7:F2:62:2F:81:81:9D:41:C9:CB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/fdad9083-83a7-3361-b44e-5de2dfb3e26a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:c1:cf:68:83:f2:67:1d:7b:08:cb:98:37:3c:85:03:79:
         d4:ca:2f:09:07:d3:11:5a:2c:1c:ab:b9:ca:45:0a:c4:01:36:
         81:a1:33:2a:74:d2:65:bb:f8:88:7f:14:b0:68:98:46:c4:75:
         a3:19:5a:46:03:a3:ed:9c:2d:0b:c3:e8:1e:97:8b:a9:88:db:
         2e:a6:cb:47:2b:9d:cf:85:c6:eb:02:88:45:8a:40:77:47:55:
         eb:4c:75:1d:53:fd:7f:ad:0e:04:da:f4:ce:36:8a:7a:8d:42:
         91:39:cc:34:85:a8:e4:6b:f8:3b:00:db:11:c8:41:6d:dd:c3:
         ff:06:53:3f:7f:58:5d:da:b2:26:da:a1:a4:97:23:9b:36:d4:
         33:69:f2:96:8a:54:d7:45:13:b6:a0:99:0b:a4:4c:38:6f:23:
         81:ba:a3:62:ad:fb:0f:d1:a5:88:78:26:a0:02:93:29:4a:a2:
         4b:97:6c:59:1b:6d:83:87:bc:9a:14:5a:34:4c:b3:2a:09:79:
         9f:8f:86:d8:ec:67:80:bf:2e:8b:16:e6:2e:77:77:20:1e:5f:
         3e:97:58:20:eb:1a:a2:69:c8:fd:0e:b6:38:44:57:44:be:c0:
         34:22:92:82:32:1a:a7:e7:85:e2:ea:7b:3d:4c:47:8c:11:0d:
         93:c6:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:45 2026 by rpki-client