Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa
File:                     44924e0a-deef-3257-a202-f20fac287530.roa (raw, json)
Hash identifier:          30GSZK+Kj+lYeHVbg7IISMCsCvT+CIWWOI8/A2h5AZo=
Subject key identifier:   2B:97:07:44:42:A7:47:35:BF:D4:02:94:27:A0:A0:1D:29:25:7E:DF
Certificate issuer:       /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial:       010D0C9F4328584D5E1A49E76E79639D6099CF20
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        208.91.36.0/24 maxlen: 24
                          208.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:49:e7:6e:79:63:9d:60:99:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=efe7c1e2-3661-4a3e-92b8-2526d95f3864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:71:85:08:19:f1:3e:8b:39:13:04:91:c9:
                    37:c5:9a:2d:79:d3:50:11:de:31:85:9a:ed:e0:8b:
                    33:1d:a0:6f:d1:65:8b:a6:56:c5:b9:ea:8b:51:a9:
                    53:e3:76:1c:2b:d3:23:5c:c2:2a:a8:2c:60:62:57:
                    4b:6f:cf:85:65:2d:b9:6f:71:1f:43:32:26:1d:96:
                    5b:0e:6e:aa:d5:d6:d1:28:cc:b7:4b:88:ab:42:50:
                    b5:08:d3:dc:dc:7d:bc:8b:be:bf:c1:78:66:18:3c:
                    bb:2c:da:f8:b7:1a:7b:5f:65:7b:16:d4:02:62:7f:
                    93:35:f3:58:7e:29:e6:9b:bf:9d:2e:75:62:ee:8b:
                    54:55:ad:67:33:9e:19:67:e0:d9:19:25:86:85:23:
                    e4:c8:d9:8a:50:56:1d:7b:55:f7:ee:1d:98:aa:18:
                    93:e4:8a:b1:21:e2:98:83:be:33:fb:7f:9d:1a:f7:
                    d7:37:ca:5c:f7:a5:52:02:a4:59:6c:d5:f5:fa:31:
                    7d:00:bf:7c:10:aa:4e:ed:34:06:52:31:e1:c4:39:
                    1e:d4:8d:32:88:3f:5d:c5:d1:ee:95:63:af:d0:75:
                    e8:fe:45:1c:5a:d0:04:24:49:79:df:fe:e1:6f:41:
                    6e:76:ac:94:f5:c1:b5:98:78:38:dd:a1:cc:52:29:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:07:44:42:A7:47:35:BF:D4:02:94:27:A0:A0:1D:29:25:7E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl

            X509v3 Authority Key Identifier:
                keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:bb:bd:9d:93:79:26:bf:41:87:79:b0:36:be:ec:f6:8d:
         b5:37:86:f0:99:3b:52:80:30:a6:80:41:5c:a0:f2:7c:0d:6a:
         e2:f6:61:1f:52:60:24:b7:9b:ff:c5:6c:5e:d8:37:6d:53:d5:
         62:76:d5:5a:9c:4e:1f:a6:2d:47:a3:3d:11:c7:09:e1:e3:99:
         d8:d6:3e:09:6f:c0:68:bb:17:24:11:46:a9:9b:88:bf:19:e8:
         f7:f5:85:d3:1d:eb:89:10:70:a5:c4:9f:7e:54:ab:6c:9f:6f:
         07:25:15:19:1e:6f:12:44:d6:fe:2f:a7:77:e6:7b:13:57:8c:
         48:9f:74:3d:c8:b6:01:c1:dc:81:52:80:59:eb:7b:fe:45:89:
         0f:90:de:a7:61:fe:0b:e3:48:8e:c2:68:63:ca:fb:f4:0f:79:
         b9:90:e1:ef:4a:38:f2:2a:52:ea:80:3a:5c:ab:4c:58:66:fe:
         d4:5d:05:34:a7:ad:95:27:03:e0:a3:b3:f8:95:8e:24:26:10:
         c7:9b:ed:19:c9:59:ca:c4:2a:10:f8:4a:16:50:3b:b8:5e:cc:
         48:2b:ae:6a:b7:ce:48:81:36:34:df:0f:5a:d5:a7:88:8c:aa:
         61:70:20:29:e3:b5:7b:c8:37:f9:5b:cd:91:c3:96:f2:6c:dd:
         1c:06:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:14 2026 by rpki-client