Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa
File:                     4878aafb-f0b3-3adf-82fa-32982696a4e0.roa (raw, json)
Hash identifier:          MZctAJwYsgYER7oLvW2YoH90L5spT2UUi0ubCeQD0zE=
Subject key identifier:   7A:28:F9:4A:BE:15:6C:59:EC:D0:93:45:BE:25:B5:D8:29:5D:85:32
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584D59EA588E2FDD3E5CF4327000
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        162.252.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:58:8e:2f:dd:3e:5c:f4:32:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=e0f86337-d028-4279-9e25-b881f9d507d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:4a:2d:68:6b:4c:fc:2b:5b:3c:b0:76:8b:
                    67:90:77:77:81:4c:8d:ce:13:2e:c1:22:67:c9:2a:
                    4a:4d:d5:eb:00:cf:f7:93:68:76:de:03:b3:00:a2:
                    bb:0d:6a:28:42:3e:57:e8:e9:ae:5a:d0:dc:5b:f9:
                    62:c5:3d:26:ac:22:75:fe:5c:1f:a1:aa:e6:11:f5:
                    45:41:71:e1:37:d7:6d:d8:e1:d3:44:fd:f4:df:2c:
                    15:d4:06:10:13:83:19:98:d7:9a:01:0b:22:4a:e8:
                    3c:c1:19:21:79:f3:6a:e7:4b:ea:d2:b6:6b:64:f3:
                    e5:76:0a:51:4d:14:1b:74:25:39:a4:e3:d2:ef:a0:
                    f6:ee:f1:12:88:fe:68:d4:61:a4:30:cf:48:7e:61:
                    24:73:b5:03:a9:8a:fa:44:6a:cb:25:99:8a:c3:99:
                    cf:71:33:9e:78:30:09:56:61:1d:64:6e:25:83:c5:
                    52:ec:e7:30:5d:2a:18:e2:b7:7f:3c:e2:45:9b:2f:
                    8e:5b:90:cb:d4:f6:d9:f9:d5:d7:d0:4b:ca:bd:73:
                    42:11:cc:d8:bd:ea:7c:5f:81:08:7d:94:65:83:24:
                    dc:8a:02:e7:86:7c:41:ed:04:42:8a:4a:b9:c2:a1:
                    4d:de:b2:c5:d0:75:1d:90:7b:5c:f2:1c:54:17:b7:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:28:F9:4A:BE:15:6C:59:EC:D0:93:45:BE:25:B5:D8:29:5D:85:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:2f:c0:34:54:f0:53:25:55:af:f0:38:06:da:ee:78:fb:
         fd:bc:30:0f:c5:6e:f8:c4:66:fa:fe:be:a7:bf:3f:dd:a8:a0:
         fb:c8:10:07:20:c2:c2:f7:b4:ea:3c:c8:c4:5a:7f:3a:2c:88:
         d4:45:52:8d:a0:08:46:eb:ef:3e:72:08:cf:c4:99:c3:30:34:
         54:08:a2:d1:6b:12:86:3b:64:7e:f6:d1:19:dc:60:33:33:21:
         6b:62:ce:59:0b:ec:66:fd:83:e6:40:1f:cc:d2:23:42:6f:3c:
         fb:fe:fb:12:d9:1a:66:21:84:8e:b5:ed:12:6d:e7:d2:c2:61:
         5c:30:c6:e5:31:7b:62:b5:f2:6c:c8:f3:64:5d:8f:a4:b3:2e:
         3a:52:21:ea:09:2e:f7:28:23:3e:00:6c:c6:1f:b9:1d:75:ae:
         de:9e:69:6f:7b:ac:11:d9:37:76:e3:8e:88:8b:d9:9d:24:68:
         c5:54:eb:12:ee:ac:fe:f2:a4:8a:d9:23:a7:6d:76:2f:f9:57:
         94:56:1e:60:b9:6e:4d:5d:19:8d:c4:fc:f8:fb:d4:db:40:92:
         b6:eb:87:be:a6:0f:97:9e:fd:b5:be:4f:b7:4c:07:0e:d1:08:
         48:a5:bd:3e:1f:9e:b9:5a:63:a2:3a:f4:f1:88:c8:1d:ea:a8:
         ec:9a:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:30 2026 by rpki-client