Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa
File:                     8d4e180d-b294-340d-8292-f0182164165c.roa (raw, json)
Hash identifier:          n1Qn2Dt7ghXQAPY78FzLffQnmNkVVayZwxhrhjyABsA=
Subject key identifier:   3E:81:0A:5A:D7:60:40:AB:01:B6:63:C4:6B:71:D9:01:CE:FE:85:7A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D0217BC595854549595C10640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     397201
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bc:59:58:54:54:95:95:c1:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=d9d550ca-2790-4503-b9cd-b777585fc0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:01:88:de:67:a8:78:20:4b:69:92:e4:bf:
                    85:13:73:0e:62:f6:b9:85:20:7a:98:db:e1:d2:00:
                    78:ba:2c:e6:20:8d:84:7a:d5:53:c0:fb:0a:91:19:
                    15:99:06:81:c3:51:e4:8e:88:39:1b:62:67:ab:aa:
                    a8:83:ad:ab:5f:e0:24:28:c0:7b:bf:96:2f:11:a8:
                    9c:df:68:a6:86:ef:b8:7a:a2:bf:4c:f8:01:b8:f7:
                    f6:94:8e:1c:67:02:0f:04:05:8d:a8:2c:ff:08:ad:
                    71:1f:0c:3b:4b:98:5c:2d:31:43:8a:6e:34:df:f8:
                    97:33:b0:8f:68:b0:ce:cb:bf:eb:26:7c:98:bb:d6:
                    ef:94:a4:7f:6f:e4:0b:9a:42:63:7d:c5:7c:5b:92:
                    f9:a2:e0:90:48:21:25:11:db:b9:ea:31:31:77:0f:
                    2b:cc:ef:e1:9a:36:60:22:9f:fa:5f:43:eb:02:96:
                    32:69:db:1f:9e:6a:e4:a8:4c:65:8a:36:2b:22:87:
                    db:9e:0a:20:4c:68:b5:ef:44:af:b1:a3:ce:93:89:
                    c5:aa:79:9b:37:4a:9e:f5:a5:04:fa:5c:7f:dc:e2:
                    52:70:76:d3:e6:9c:7e:c0:cc:08:52:1c:b2:9e:41:
                    15:13:23:19:c1:6e:e3:92:bd:ca:0f:6f:82:5e:a9:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:0A:5A:D7:60:40:AB:01:B6:63:C4:6B:71:D9:01:CE:FE:85:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:39:25:d5:bc:c1:4b:7a:5a:a7:12:59:19:ac:f0:ab:65:
         0f:b2:cb:38:f9:1a:1c:dd:72:01:c1:2c:e1:ae:e5:93:f0:90:
         3a:01:06:03:a7:b7:15:4b:f0:b1:16:bc:cf:39:20:ee:63:3c:
         df:f2:80:7f:ef:45:2f:24:2e:80:e0:2a:d4:f6:dd:9e:3c:7b:
         d1:00:5b:da:95:3d:f0:b4:75:3d:9b:7d:d0:60:45:ce:f5:e7:
         55:37:ca:7b:2f:64:4c:18:5d:e9:ef:21:ea:8e:6a:70:3b:99:
         f4:44:b4:0e:18:84:41:6e:1e:c6:c6:dd:6a:e1:8e:3b:47:07:
         d4:e6:df:3f:b4:2f:e4:35:f3:a5:d0:a2:e1:7d:89:9a:9b:2a:
         47:0c:0e:6a:38:7a:86:a4:b0:5f:a7:b0:59:a6:92:5b:4e:47:
         92:10:cb:72:80:9e:09:7b:7f:a3:92:e6:a5:4e:9f:d3:f4:d1:
         27:ce:a6:ff:5e:c0:68:74:3d:ea:3a:18:86:30:86:50:15:5e:
         57:72:9d:d1:7c:a9:c4:b7:7f:cc:6b:c2:b0:a5:b5:11:3b:3a:
         b1:14:79:c3:d0:d4:02:5d:19:0f:cd:3a:18:47:5e:09:75:76:
         d5:ac:e9:90:d5:62:f6:26:fb:55:ff:c1:2b:bc:49:7a:33:39:
         6c:97:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:16 2026 by rpki-client