Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa
File:                     32163c6d-537a-3a41-8227-c09c400f5f50.roa (raw, json)
Hash identifier:          SWbkTtEU6s0lxBbu4Kz8+l6dCLyArqM4pzkf3QqL1M4=
Subject key identifier:   1B:69:29:A3:6E:47:8A:BE:44:F0:83:86:CB:81:14:FB:C0:9F:A4:CD
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CFC823027E6DA61492AA6DC80
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     11377
IP address blocks:        216.20.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:30:27:e6:da:61:49:2a:a6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=15800209-4296-4f23-a9dd-13cdb3fb66ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:64:46:06:87:cd:18:ee:d1:11:9e:bd:eb:
                    64:8a:78:ec:5b:ef:00:e0:e6:05:8d:e9:1e:aa:21:
                    2e:55:a3:96:9d:40:ad:e9:4b:fc:3b:8a:8b:f7:df:
                    e4:73:87:0d:63:18:a6:91:7e:2e:7d:0d:d9:78:76:
                    bb:33:9f:0f:a6:a9:e7:9f:bf:fe:8d:eb:29:75:85:
                    ee:9d:9d:eb:d8:81:88:26:56:d6:03:b2:bc:06:5d:
                    8c:08:ff:66:3f:53:62:52:75:10:b2:cc:23:f2:3f:
                    92:0b:c3:62:4e:54:d2:5a:1b:80:3d:b0:68:23:5d:
                    cb:31:0e:9c:3e:ce:ce:2e:83:4f:65:7b:6b:0c:79:
                    d5:43:9e:c5:78:8a:d6:32:cb:73:37:aa:18:13:d2:
                    92:7c:90:e5:75:b1:1f:44:83:ac:87:ae:4d:6f:9f:
                    6f:7e:61:3c:e7:ae:70:90:9b:06:c2:86:a9:56:6f:
                    28:9b:74:6d:a1:11:d3:f3:45:5a:5a:27:5e:20:9d:
                    69:df:13:a6:e2:8b:1a:f6:7c:89:d6:34:c9:af:b6:
                    3f:86:bd:f1:85:e7:d0:1b:a8:d5:c6:8b:0d:7f:5d:
                    9f:1c:69:bb:cf:1e:27:86:e8:91:a2:02:d2:13:a6:
                    39:95:a9:ed:75:5d:5d:ef:d1:79:dd:a9:95:fa:3e:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:29:A3:6E:47:8A:BE:44:F0:83:86:CB:81:14:FB:C0:9F:A4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:66:2b:72:f3:06:d1:92:79:6f:04:ba:14:47:e1:25:7e:
         2d:5e:e1:3c:b0:ba:4a:ef:3b:44:bd:e6:e3:51:22:ec:69:2b:
         04:3b:3c:35:56:c8:dd:ef:9a:dd:e6:0e:25:04:ce:d9:00:f2:
         20:42:18:4d:52:a9:08:67:75:fc:ef:76:5f:db:07:24:6f:2a:
         46:14:f0:5d:22:56:bf:70:4e:04:a3:df:f8:cb:5a:b5:8a:78:
         6e:f1:9a:88:a8:b2:e0:00:e3:d0:82:7b:92:7d:fd:b2:27:27:
         c4:c8:f3:a9:11:42:71:b1:4a:2b:5c:c9:33:ef:d5:45:99:04:
         bf:74:7d:b1:a8:c6:78:c3:f7:03:59:06:cf:ec:50:b3:11:01:
         7e:a9:60:35:9f:cb:c2:79:1e:fe:1e:59:c1:3d:9d:72:e7:ff:
         f2:5a:5a:2f:de:22:9b:3d:9e:34:82:e6:9e:81:86:a2:4c:e3:
         86:4d:5c:fc:d0:0d:40:45:ad:fe:d0:6d:a3:8e:6c:0b:da:cf:
         d2:45:0b:3f:38:8b:93:8a:26:31:4e:84:17:ca:21:8d:ff:d5:
         32:f5:a1:fd:bd:18:57:35:92:2a:f5:bb:1f:07:47:00:7b:2e:
         74:a3:fa:30:49:dc:0e:f9:a4:51:4c:52:d1:1d:0b:a7:c4:c5:
         80:9b:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:18 2026 by rpki-client