Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37b77e95-a55d-3971-bfc1-ba0428e22164.roa
File:                     37b77e95-a55d-3971-bfc1-ba0428e22164.roa (raw, json)
Hash identifier:          ztBySP15v6Ct+QPT/0XDJZZEcM2O5DcL4HBEJA0lYOY=
Subject key identifier:   8A:99:8C:36:3D:68:B2:4C:0F:47:3E:55:39:13:75:37:1F:CB:35:04
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584C619213EEB4037D5A86ECE000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37b77e95-a55d-3971-bfc1-ba0428e22164.roa
Signing time:             Thu 01 Jan 2026 14:00:38 +0000
ROA not before:           Thu 01 Jan 2026 14:00:38 +0000
ROA not after:            Wed 01 Apr 2026 13:00:38 +0000
asID:                     10796
IP address blocks:        24.160.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:61:92:13:ee:b4:03:7d:5a:86:ec:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jan  1 14:00:38 2026 GMT
            Not After : Apr  1 13:00:38 2026 GMT
        Subject: CN=4a093874-5d28-4d58-b6ba-26624f58d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:e8:d5:71:2d:b2:c7:2e:6a:8d:21:4c:46:
                    69:fb:7e:9d:3e:de:b7:a6:3e:94:bf:34:bc:7e:9e:
                    50:cb:c8:df:c3:50:95:1e:6a:f7:15:99:c1:bf:81:
                    b6:e3:ee:0e:bb:4a:da:f9:ac:9f:31:03:72:2b:4f:
                    6e:d0:74:62:ce:ee:5d:2e:64:4c:cb:0d:94:d0:db:
                    55:9a:e8:0d:a3:e4:0d:b1:32:cf:f1:c8:21:2f:2a:
                    53:10:55:27:fe:d2:a7:ac:54:6c:cb:2e:b1:b7:6c:
                    e3:8c:4f:c7:11:7f:3f:84:dd:02:6b:d0:e4:93:6c:
                    40:eb:53:94:b0:ce:f4:3c:1e:8a:58:9c:3e:65:af:
                    78:4f:cd:5f:77:61:d6:ff:a3:78:fc:5e:26:92:22:
                    5b:5d:18:e7:63:69:4e:8d:43:bb:73:37:2a:1d:46:
                    a8:48:9c:d7:49:a4:be:3c:8c:c0:47:1b:8c:a8:6a:
                    a8:a8:b3:94:5c:f2:f6:4e:5a:30:41:7f:fa:1a:d0:
                    0f:01:3f:58:f4:f8:44:a6:ff:5e:40:60:68:41:ff:
                    fb:a0:42:d3:f3:1b:10:00:1a:44:78:6b:01:b6:05:
                    e5:37:56:1e:e8:a3:69:a9:cd:bd:e5:43:8a:db:5c:
                    c5:85:90:21:a6:e4:11:df:d4:a1:22:1e:73:3f:6c:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:8C:36:3D:68:B2:4C:0F:47:3E:55:39:13:75:37:1F:CB:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37b77e95-a55d-3971-bfc1-ba0428e22164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:87:6d:13:e6:82:d5:6d:b0:4b:d3:f8:f5:66:25:81:0f:2f:
         64:4c:a1:6d:59:a2:c7:78:90:87:64:09:23:18:71:b1:e6:fb:
         b5:05:0c:05:07:28:37:29:ed:e6:8e:09:09:c1:37:1a:d1:50:
         24:d4:4e:6c:94:a4:51:f4:db:40:db:74:ef:27:13:a7:45:49:
         5f:ac:93:b2:3b:01:59:5b:4a:94:f9:2f:06:14:6a:bf:ba:31:
         52:2d:9f:55:2e:e5:44:b8:c7:19:c2:3e:d6:53:be:b0:e3:b5:
         22:93:b6:d5:7e:fd:28:ad:c4:6e:de:39:8f:81:09:70:ff:3c:
         7e:88:8c:14:ad:a0:4a:3c:d4:cf:82:c2:af:c5:ab:6a:fc:df:
         2b:8b:7b:9b:9f:08:6d:c0:16:b9:94:34:26:01:1a:ce:f3:5b:
         91:25:7d:15:fe:79:a8:41:2f:9a:31:a3:09:6e:86:5f:3e:5c:
         9e:11:3a:ca:63:91:08:fb:7b:80:41:67:4e:1e:7e:78:bc:97:
         8c:f9:11:e8:7e:39:13:fb:28:7f:79:18:dc:b2:88:04:a4:80:
         99:6f:40:bc:f1:5a:d0:5f:89:f2:4d:74:24:f6:53:16:48:02:
         fb:55:c4:d5:46:39:00:15:3b:5a:64:39:63:89:fe:fe:21:af:
         bd:6c:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:48 2026 by rpki-client