Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
File:                     61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa (raw, json)
Hash identifier:          +5PHPDMlbGk1lnPOS95CRi9M+Ds47FOhqFWEe2IlN6s=
Subject key identifier:   C2:3E:C2:02:C1:A2:3D:79:5D:70:E1:1A:65:60:89:ED:3E:B6:7E:E7
Certificate issuer:       /CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
Certificate serial:       010D0C9F4328584D651527D3FC55288803D6DF00
Authority key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     55082
IP address blocks:        162.252.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:27:d3:fc:55:28:88:03:d6:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=02b8c2d9-415b-4579-bcc1-59c77138835d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:7c:27:94:d9:ff:42:9a:5b:cd:40:0e:4e:
                    10:1b:2b:a7:be:4d:6f:b4:88:32:cd:81:e8:b6:93:
                    b5:d7:e2:8a:93:78:bc:20:50:4f:1e:ee:dd:44:f0:
                    60:4d:2e:31:a2:60:06:cf:1a:51:b3:d8:37:37:86:
                    22:b9:a2:53:6e:31:6f:a2:eb:0d:e1:5f:e2:5e:99:
                    6f:8b:11:eb:67:a2:80:fc:f5:7d:55:fb:3f:11:13:
                    5e:9d:e9:b3:59:32:75:4e:ae:83:15:4d:8e:56:d9:
                    d0:30:15:b2:b5:98:10:e9:d5:3f:66:b3:5d:fb:df:
                    91:0d:08:2a:55:fa:d0:92:f0:3e:7f:60:61:12:cb:
                    b6:55:8e:46:34:43:7a:ba:a5:31:d9:3b:89:78:28:
                    ce:72:b2:94:fa:cd:5c:a0:ef:9e:01:c3:91:8e:0f:
                    70:b9:92:2e:27:9c:4c:10:e5:c9:fd:3e:59:c4:8a:
                    8c:66:e4:c5:17:28:68:fd:92:f2:54:80:64:40:bc:
                    61:f0:5a:ef:a8:82:1b:85:1a:36:bb:d7:16:70:a5:
                    c6:2a:d1:1b:cc:b6:f1:bb:67:de:9c:60:fb:d0:05:
                    1d:af:08:00:e1:25:99:13:59:09:90:b2:76:03:18:
                    5c:ec:48:ac:bb:6d:93:0a:2f:c5:1e:c2:7e:05:b5:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:C2:02:C1:A2:3D:79:5D:70:E1:1A:65:60:89:ED:3E:B6:7E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/61b42efb-16e3-3657-9b2f-39c0ebd257e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl

            X509v3 Authority Key Identifier:
                keyid:9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:03:26:1b:9a:12:67:8e:85:68:34:31:93:28:e4:10:80:
         af:c2:d3:42:ba:98:0b:66:ba:fe:a4:21:07:45:c6:89:db:4f:
         a4:5a:aa:d7:9c:ed:2d:20:70:0d:a0:02:f6:a8:00:20:56:2a:
         58:76:e0:01:38:bb:94:29:7e:fd:af:97:c0:7c:ba:ba:05:cc:
         e6:16:e4:e2:b3:7f:e9:6d:57:72:ea:f5:94:4c:3e:4a:3f:5e:
         91:b2:93:28:e9:c8:42:13:eb:df:62:de:8c:2f:5f:a7:10:39:
         95:df:8e:b1:40:1e:13:73:7f:c2:23:e9:8b:19:71:15:5e:42:
         77:3e:a5:cc:d1:aa:3e:1a:6c:0c:b2:09:fe:f6:37:2d:73:09:
         ca:49:8b:54:bd:e3:9c:41:5d:4a:d6:76:c4:39:bd:55:a7:aa:
         30:2a:1c:6e:3f:2d:fc:7e:6e:e6:6e:27:46:d6:57:29:84:52:
         3d:7a:31:74:3d:23:fc:0b:4e:55:39:ee:97:a7:4a:34:0d:a8:
         c5:5d:f1:2b:b1:57:70:ca:85:f7:f4:a4:92:82:d0:59:92:81:
         62:45:a4:cd:7c:6c:b0:cc:86:ad:1e:38:f9:37:e5:3b:8f:af:
         df:41:d0:61:85:f0:66:84:e6:ec:b4:cf:b8:2a:11:45:65:70:
         a7:bf:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:36 2026 by rpki-client