Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/2361b582-b822-360a-8a40-185833115ccf.roa
File:                     2361b582-b822-360a-8a40-185833115ccf.roa (raw, json)
Hash identifier:          YYBZVjQTlYBlLXBJaUN9vDqL/ul8H6hfaf9/PuUQ7zM=
Subject key identifier:   64:62:35:25:B2:94:61:8E:69:E0:93:69:81:B0:1D:81:51:81:D4:E5
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584CD13CB8BAAB75D889B96D53C0
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/2361b582-b822-360a-8a40-185833115ccf.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     14114
IP address blocks:        169.145.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b8:ba:ab:75:d8:89:b9:6d:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=301bb6c3-0be5-4be1-994d-e3f31093fddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:e0:90:57:25:81:28:40:38:3d:0f:f9:f1:
                    f6:36:d9:80:0a:b5:42:4c:71:b7:a6:b1:9c:39:35:
                    9e:5b:c2:eb:3d:74:50:79:6c:ec:70:eb:b4:64:93:
                    af:b6:25:bc:e6:73:bc:f9:3d:37:5e:9d:94:a6:ce:
                    7e:0f:1c:93:bf:84:f6:13:a8:39:d1:14:a7:53:2a:
                    39:7a:b7:e7:25:9f:6e:30:9b:d0:ce:b7:8a:8c:65:
                    b7:7c:42:8a:c0:94:14:c1:e7:39:29:b3:49:8b:ef:
                    70:d1:62:5f:cf:7b:fc:68:1a:af:51:7b:2b:36:f6:
                    36:f8:ad:54:e2:cd:94:91:95:04:f4:63:5f:a2:5a:
                    ad:0c:6d:80:26:c4:e5:9f:b4:d4:23:49:7e:0b:1b:
                    7d:f8:ce:5e:24:5f:a4:81:2f:bf:5c:5e:31:1a:b4:
                    5f:34:f4:02:7e:d5:2c:7e:94:b0:b6:cd:95:3a:c8:
                    e9:6a:02:8e:97:ff:cf:26:20:05:c3:78:f0:40:7e:
                    83:32:77:13:09:3c:a9:20:ef:4f:3c:88:24:a0:44:
                    51:eb:fd:fe:be:91:6a:e3:46:6d:90:4e:cc:0f:bb:
                    7b:40:ab:46:05:05:fa:6b:af:09:d2:e7:2a:3c:62:
                    50:83:ca:ee:97:a4:29:bf:5d:c6:be:9d:11:d0:71:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:35:25:B2:94:61:8E:69:E0:93:69:81:B0:1D:81:51:81:D4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/2361b582-b822-360a-8a40-185833115ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:d4:eb:c1:9d:01:f5:fc:de:0b:6e:f0:30:ab:3f:db:e6:
         7b:6f:e7:9a:bf:15:8d:fe:77:ef:24:43:fb:e7:fc:02:69:6f:
         d0:ee:11:6d:7e:b6:96:61:af:5b:eb:01:ae:ee:6d:67:89:8c:
         72:ef:b4:d3:9c:0f:bc:34:25:01:d5:8c:be:1b:59:ab:a4:48:
         e2:b4:6c:28:a1:d1:df:1b:0e:08:73:29:9f:14:79:08:65:b7:
         a7:6c:44:60:0c:18:d9:12:d7:ce:f3:be:a0:77:9e:56:72:3e:
         e7:ee:95:69:34:d4:15:86:f4:ac:f5:34:d2:b8:b7:e3:60:53:
         50:6c:eb:98:f2:40:8a:c7:c0:5d:d8:0c:77:f8:bf:90:62:f6:
         a5:9c:0f:3e:0c:9e:38:96:6b:8f:a0:0b:d0:62:cc:64:cb:e7:
         7c:83:41:32:5e:c6:11:dd:1a:e8:e3:18:32:bd:dd:e9:42:b4:
         e5:eb:93:b6:3c:49:32:6b:e6:15:c9:a3:1a:1f:f1:dd:ef:6d:
         80:5b:5a:08:7c:5a:28:fd:a1:27:a5:e0:56:bd:b7:c3:7e:29:
         55:16:12:42:c0:9f:92:41:a5:23:2d:45:60:44:a1:0e:97:27:
         b3:86:e0:3c:69:bf:bd:d6:40:a4:2c:b5:f7:99:b0:29:be:cf:
         8e:c9:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:05 2026 by rpki-client