Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa
File:                     04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa (raw, json)
Hash identifier:          FslmApuBCVNeL7bav/OWKaFjRgHm3phnkHSw0c1KrR0=
Subject key identifier:   7D:8B:7A:90:01:4E:81:9B:DF:7B:47:3A:56:A3:F2:94:FE:4E:3A:7B
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584D5243C849122B62D2B2521180
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     21928
IP address blocks:        172.57.114.0/26 maxlen: 26
                          172.57.114.64/26 maxlen: 26
                          172.57.114.128/26 maxlen: 26
                          172.57.114.192/26 maxlen: 26
                          172.57.115.0/26 maxlen: 26
                          172.57.115.64/26 maxlen: 26
                          172.57.115.128/26 maxlen: 26
                          172.57.115.192/26 maxlen: 26
                          172.57.118.0/26 maxlen: 26
                          172.57.118.64/26 maxlen: 26
                          172.57.118.128/26 maxlen: 26
                          172.57.118.192/26 maxlen: 26
                          172.57.119.0/26 maxlen: 26
                          172.57.119.64/26 maxlen: 26
                          172.57.119.128/26 maxlen: 26
                          172.57.119.192/26 maxlen: 26
                          172.57.120.0/26 maxlen: 26
                          172.57.120.64/26 maxlen: 26
                          172.57.120.128/26 maxlen: 26
                          172.57.120.192/26 maxlen: 26
                          172.57.121.0/26 maxlen: 26
                          172.57.121.64/26 maxlen: 26
                          172.57.121.128/26 maxlen: 26
                          172.57.121.192/26 maxlen: 26
                          208.54.157.0/26 maxlen: 26
                          208.54.157.128/26 maxlen: 26
                          208.54.157.192/26 maxlen: 26
                          208.54.158.0/26 maxlen: 26
                          208.54.158.64/26 maxlen: 26
                          208.54.158.128/26 maxlen: 26
                          208.54.158.192/26 maxlen: 26
                          208.54.159.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c8:49:12:2b:62:d2:b2:52:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=47813a39-99fc-45e5-a58d-9b4963c4d06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:83:c0:39:54:7a:0f:de:1a:42:cf:4d:e5:
                    40:f3:5c:e3:a9:3c:a4:f8:69:fa:e3:dd:ff:6d:57:
                    19:e4:9b:ed:97:30:9e:4c:f7:da:3d:02:da:37:76:
                    f2:f9:b9:af:e1:3c:6b:2d:96:b0:aa:45:a5:6d:69:
                    17:cc:30:03:30:7b:68:df:60:05:7e:bd:69:a0:23:
                    15:f0:35:5c:d2:3e:25:7d:af:f4:90:2a:e7:c1:06:
                    2f:2a:98:06:fb:90:52:79:74:87:0e:46:fb:72:ba:
                    fe:d5:3c:b8:9c:d2:18:43:7c:b9:52:59:b9:57:e9:
                    42:45:44:1a:c0:f8:d4:2b:72:80:da:e5:f1:40:79:
                    37:77:db:3a:0c:45:96:ca:54:1b:c4:d2:6b:7e:d3:
                    82:c5:ef:0f:ac:50:c8:2f:d4:02:cf:2f:85:3a:23:
                    87:55:47:bc:84:7d:7b:23:1b:99:f3:bd:02:73:97:
                    f4:9e:f0:fc:1f:78:ba:30:02:2a:41:f5:74:cb:ed:
                    e0:c7:6d:30:ed:84:d5:cc:1a:8b:e9:70:36:83:4c:
                    c4:23:3f:1f:3b:9f:8e:f0:64:84:8d:5d:61:17:e9:
                    2c:8e:16:3a:0b:52:93:e3:64:68:cc:6f:e0:03:1d:
                    e9:8e:d8:16:3c:78:88:cf:df:4c:f8:21:3a:74:1f:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:7A:90:01:4E:81:9B:DF:7B:47:3A:56:A3:F2:94:FE:4E:3A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/04d880c2-f4ce-3ee2-bb68-def12c7bc2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.57.114.0/23
                  172.57.118.0-172.57.121.255
                  208.54.157.0/26
                  208.54.157.128-208.54.159.63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:23:00:6d:c5:ff:e4:ab:88:10:4c:16:ac:cf:a0:91:9b:d3:
         5d:79:03:e2:08:54:ad:9a:77:b3:e3:9c:90:68:a4:b0:5d:a8:
         4e:ad:38:1a:cf:27:af:89:45:45:cf:39:8a:cb:f8:70:db:5f:
         c4:7b:c3:a6:40:8c:01:34:40:96:7e:54:9d:af:0a:2d:11:e3:
         9d:f2:88:39:e8:e3:40:8c:a1:03:b3:84:01:8b:c6:af:68:0e:
         56:32:a5:ad:63:8a:b5:88:e5:ae:cd:43:9b:85:11:96:29:28:
         22:3e:eb:86:2c:4d:34:65:04:3a:aa:08:22:a0:a4:f8:68:4e:
         b7:cb:e5:ef:f6:d5:6f:f9:43:07:77:ed:3c:6b:e3:3b:d2:86:
         35:86:3f:bd:aa:79:25:b9:1e:fc:d3:fc:18:63:ba:dd:18:94:
         28:ff:5e:1b:e8:23:f0:85:63:19:67:01:98:68:ee:e9:62:9d:
         92:2a:b0:b8:68:1a:bd:f4:76:4d:55:b2:21:8b:7b:d9:ba:aa:
         83:ed:a0:8e:fc:db:d5:8d:a7:ac:2d:11:85:c2:b1:ac:ad:44:
         88:79:b3:0a:c3:75:1c:9c:ab:72:fa:7e:15:86:01:1e:48:54:
         7b:f3:e0:9b:67:da:a1:4b:19:14:35:a9:55:d5:28:64:c5:e9:
         d2:78:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:06 2026 by rpki-client