Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/872ceb5e-1433-3720-9338-14ffacff3713.roa
File:                     872ceb5e-1433-3720-9338-14ffacff3713.roa (raw, json)
Hash identifier:          7L5/vTzszLNekkU0+J4nFCjEBRpkTmUZDQ/L9Y+1XQA=
Subject key identifier:   4A:3A:81:95:C8:AE:BA:77:7B:EB:E0:7D:5B:A8:8B:5E:7F:E4:62:7E
Certificate issuer:       /CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
Certificate serial:       010D0C9F4328584CF6615D65F16610A4D79BDE00
Authority key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/872ceb5e-1433-3720-9338-14ffacff3713.roa
Signing time:             Mon 23 Feb 2026 21:19:40 +0000
ROA not before:           Mon 23 Feb 2026 21:19:40 +0000
ROA not after:            Sun 24 May 2026 20:19:40 +0000
asID:                     397095
IP address blocks:        172.81.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:61:5d:65:f1:66:10:a4:d7:9b:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
        Validity
            Not Before: Feb 23 21:19:40 2026 GMT
            Not After : May 24 20:19:40 2026 GMT
        Subject: CN=222854b0-a1fe-4d30-a258-5e7b851f277d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:51:d4:14:90:ba:88:cc:e8:d3:d6:e8:a3:
                    f9:2d:62:00:7e:81:f4:35:e5:f7:cf:35:e9:89:78:
                    df:57:51:82:44:dc:34:c9:39:8f:8f:3b:35:14:6c:
                    87:90:e6:37:44:c9:b0:24:1c:d2:77:fa:69:03:27:
                    ca:e9:4d:23:95:20:ee:36:80:98:89:b5:81:3f:50:
                    58:66:e8:b3:65:54:26:bc:ce:1a:41:85:99:8e:d2:
                    59:b9:34:4e:b3:bc:05:a8:5b:01:a5:98:4a:f7:38:
                    b1:77:a2:c4:49:81:0a:d4:61:4d:62:68:31:06:54:
                    20:1c:a9:4e:a5:86:c6:74:7d:46:06:d7:7b:62:8a:
                    3a:02:1a:c0:21:6f:39:94:5f:31:f8:81:66:4c:61:
                    d8:61:9e:3e:28:10:e7:a4:cb:a3:95:4d:14:4b:26:
                    b4:b4:0c:0b:7f:2a:16:0d:6e:96:5a:ed:db:f1:ba:
                    82:05:f3:83:b4:a8:02:64:7c:2c:9c:f7:4c:8c:90:
                    c5:38:cd:3d:7a:4b:b1:4f:64:22:16:24:b2:2d:46:
                    9e:48:a7:e2:13:d4:d1:9a:14:ed:05:42:b1:2f:c5:
                    34:31:e9:6f:21:9a:4d:09:8e:05:7e:0a:c2:5b:27:
                    92:5b:00:02:c8:a2:41:37:c8:03:bd:03:2b:5d:54:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:81:95:C8:AE:BA:77:7B:EB:E0:7D:5B:A8:8B:5E:7F:E4:62:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/872ceb5e-1433-3720-9338-14ffacff3713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl

            X509v3 Authority Key Identifier:
                keyid:46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:43:b5:14:28:aa:39:dd:4d:09:f8:25:62:f5:93:5b:b2:3e:
         2f:77:77:76:d8:c9:9a:b1:42:34:c1:a0:c3:a1:67:c0:8f:28:
         38:3d:2c:b5:ab:d4:de:0b:56:e6:a2:10:d2:6e:58:28:3b:03:
         8d:6b:19:37:14:f9:b7:d4:5e:44:19:b4:09:53:db:5d:35:d5:
         e6:aa:1a:44:56:89:2d:6b:d5:eb:24:9d:46:2b:3f:be:15:f1:
         be:4a:7c:3a:84:a7:7c:b5:1e:c2:6d:03:e7:cb:59:3e:1d:5b:
         3d:e0:75:dd:b3:1a:ee:0d:7a:c9:fd:87:bb:c3:a9:84:89:cb:
         8b:b1:3a:99:30:a5:6e:29:41:5b:84:51:33:4c:48:05:a3:6c:
         18:91:c1:49:61:ef:8d:29:ea:36:75:fa:69:51:09:52:ec:2c:
         4a:02:c2:34:c6:e1:19:12:b2:e6:19:36:c5:d5:29:b4:e8:a4:
         62:89:d1:31:19:89:6b:fe:f0:02:3a:86:7b:c6:62:ab:4f:5c:
         70:fb:17:82:a0:36:87:f0:bc:b2:55:f2:3b:99:a9:90:70:d4:
         61:a5:89:da:92:67:c6:ba:47:d1:c3:e5:7f:0d:7a:0e:4a:e3:
         02:c0:60:81:b4:c0:84:22:d9:2c:cc:02:13:91:05:ee:ee:ab:
         0c:47:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:18 2026 by rpki-client