Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa
File:                     3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa (raw, json)
Hash identifier:          uWOQ4Pj+0ibfdtf/zhM6kDook+gSX7UPKGtgrA5Dz7M=
Subject key identifier:   AA:FF:CE:0E:01:68:0E:F8:B4:55:C4:0B:08:B9:FE:A8:DE:F0:B5:FE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D0217B127CFAEF3A12B53EA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     396549
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b1:27:cf:ae:f3:a1:2b:53:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=8d081d2c-eee2-4a45-b912-8c3c947bd8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:77:ef:f5:b4:5b:5a:a9:1b:97:49:c7:fd:
                    0f:e2:cc:ea:69:b6:e8:5b:2d:91:9b:e3:db:d0:78:
                    c6:87:2b:bf:e4:e0:34:e3:c0:6a:47:f5:da:04:6a:
                    4f:13:0f:86:11:f1:f8:d0:39:fd:18:2a:00:28:19:
                    d7:ac:ff:bd:d1:7d:6b:11:2a:51:00:25:19:2b:c2:
                    d8:bd:04:f6:a4:78:b1:51:53:39:4b:64:6d:5b:b5:
                    f3:44:d0:0a:41:6a:e5:08:1b:36:99:eb:48:99:22:
                    7b:da:6d:5e:7b:bb:2e:3e:c8:2c:35:aa:8d:04:ab:
                    16:da:52:d1:1b:df:05:eb:c8:4a:d6:77:b9:6a:b6:
                    cd:93:a1:d5:5b:ca:1b:e9:98:ec:15:cc:b2:45:cb:
                    26:82:1a:f9:cf:4a:9a:05:66:95:11:58:70:ae:b4:
                    9a:76:6d:27:d1:55:b3:d8:99:72:82:27:ad:2e:ed:
                    dd:44:e1:aa:89:78:71:4d:e0:29:45:af:95:6b:da:
                    0e:3c:0a:ca:07:f3:36:6c:59:45:b3:32:5a:59:69:
                    ff:1a:01:f2:28:b9:d1:ce:81:be:2a:fc:5f:4c:34:
                    28:cc:45:36:5b:db:4e:be:a5:49:67:07:de:df:83:
                    45:4a:2f:b4:bd:1d:bd:47:b2:13:1c:42:23:d4:b8:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FF:CE:0E:01:68:0E:F8:B4:55:C4:0B:08:B9:FE:A8:DE:F0:B5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:81:3d:3c:3d:b5:f0:d1:a0:74:43:84:ac:18:70:13:73:
         c6:62:86:e4:cf:1f:84:dd:ba:df:89:da:3b:8d:33:a3:d8:32:
         6f:de:a6:a7:ac:04:81:39:21:64:4c:93:91:03:03:88:bc:2d:
         ee:99:da:f3:c0:cc:b1:a9:1d:35:b6:c9:82:76:fd:1b:3e:a6:
         ae:34:40:8a:94:c6:8d:ed:8d:77:9f:2f:60:6c:27:df:e6:ac:
         fd:5e:f5:83:38:b4:8f:65:83:7b:94:e0:44:3e:f5:2d:ad:6a:
         ca:cc:40:ad:37:61:64:a2:8b:be:c8:ee:e4:6d:28:c6:67:11:
         f7:7f:e8:6d:ec:61:23:3b:5d:c9:27:15:76:25:1d:f3:af:5c:
         07:12:c7:54:6e:39:1c:85:6c:87:80:b7:cc:34:b5:66:d5:f0:
         01:da:a9:81:f3:51:7e:66:20:98:ad:11:11:94:56:ff:76:ed:
         61:5d:de:b2:77:f7:52:7d:63:e9:4f:1a:57:f5:73:0d:d0:c8:
         97:2e:a3:30:a2:17:b5:71:83:5f:1d:92:43:40:d7:db:63:b8:
         fb:3e:25:ef:9d:cc:b6:ca:44:6a:cf:ba:db:f3:6d:ea:bc:4d:
         d9:f7:ad:b1:dd:34:37:09:47:4c:31:2c:2c:97:c1:8a:97:f9:
         5f:4a:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:27 2026 by rpki-client