Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa
File:                     f3921f03-5708-3b15-bf8b-ccffe95880ab.roa (raw, json)
Hash identifier:          ++u2MkfZzFF0FOvxe9A2MJR43KXa5GjaPPTpABSxnrw=
Subject key identifier:   7B:DC:1E:5B:C5:E1:58:00:75:08:E3:D2:1B:F5:97:3A:D6:85:F0:AC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CF42213B7552B2C80AA341A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     834
IP address blocks:        172.111.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:13:b7:55:2b:2c:80:aa:34:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=88df5da9-d3f7-40d0-8ca1-7fd74969f5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:db:05:d0:4a:a2:00:e0:8f:a4:4c:57:22:
                    cd:0d:33:8d:b1:d2:da:42:7e:83:c0:e8:16:c0:16:
                    b6:38:3e:28:51:49:f2:dd:f1:95:09:aa:38:31:44:
                    98:e6:c1:02:98:7a:17:c9:95:75:13:11:b9:80:01:
                    c7:ff:94:0c:4a:fe:d0:d8:bf:ad:c7:24:59:6a:6e:
                    97:ba:39:85:90:a4:c5:e9:cc:c9:1d:7e:ff:5f:6c:
                    92:a7:b0:41:ce:8a:d2:71:12:a9:86:87:61:a9:3c:
                    63:ae:d7:0f:29:3b:f0:1b:e1:08:2e:c4:36:8b:87:
                    9f:0e:e8:4a:71:cf:08:62:c5:5e:22:79:e6:90:a1:
                    5c:bf:a1:87:6c:65:58:61:d9:63:c8:0f:0c:55:cc:
                    2a:f9:31:dd:ae:02:a1:05:f7:a8:1f:db:93:c7:c4:
                    9e:ed:23:93:a3:46:c4:01:78:e2:96:a6:e8:60:e2:
                    81:70:1c:f1:24:98:3a:4c:77:36:4e:bf:a9:de:af:
                    f4:83:f0:37:80:3e:22:27:fe:48:3b:53:5f:61:cd:
                    0d:8e:4f:23:57:35:81:cf:63:64:4b:c3:44:82:bc:
                    e6:c1:bb:7f:66:91:27:d1:b5:00:a4:81:e9:04:ab:
                    88:97:96:e7:37:ae:72:1b:39:6b:b8:5d:c7:36:cd:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DC:1E:5B:C5:E1:58:00:75:08:E3:D2:1B:F5:97:3A:D6:85:F0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3921f03-5708-3b15-bf8b-ccffe95880ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:03:f8:7f:e7:7c:33:d1:1b:3f:94:6f:4d:47:0d:fd:b7:
         b4:50:04:14:26:82:0c:be:41:32:ff:05:59:97:10:0f:7e:5b:
         10:95:87:86:f8:21:86:a0:86:14:cc:52:5a:fa:f2:bb:56:e6:
         12:54:99:ef:82:97:d4:f2:66:06:aa:c3:f2:b2:01:3e:79:29:
         da:ca:6c:2c:0d:15:de:70:d7:e4:0a:70:a7:15:c8:4b:aa:86:
         d7:d4:98:d1:16:e2:f8:58:d9:45:92:a7:15:b1:36:f0:0b:c7:
         f6:94:f5:13:21:54:47:99:f0:df:7e:ad:a5:60:fa:59:a6:5d:
         cf:b2:98:93:0f:75:02:7b:7b:03:8b:07:e7:6f:a2:27:eb:1e:
         2f:26:18:ce:6b:51:06:33:fd:2a:2e:b9:aa:4b:db:7d:5e:e0:
         e7:7b:9e:8e:fe:14:4e:9f:db:a4:c1:4a:e7:91:a9:79:42:db:
         b0:2b:5f:93:c7:51:e6:2e:76:f0:5e:5c:63:6c:f4:f7:27:c3:
         1f:f8:17:90:a1:e6:2f:31:0c:28:ff:b5:9a:a8:77:93:b6:60:
         b9:dd:c9:14:78:28:4b:f4:fd:22:f2:66:6a:01:60:09:b4:2c:
         75:70:4d:cf:0a:8b:b3:82:c3:f7:4f:c0:fd:46:26:c3:01:14:
         7f:58:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:45 2026 by rpki-client