Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa
File:                     3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa (raw, json)
Hash identifier:          8RPGeeXfA71OwlEKI3IVd67bV8hJaxQpH6100BxqK0k=
Subject key identifier:   6E:F0:19:52:96:A2:A6:2E:79:61:3F:68:D8:0E:E3:2B:C3:27:8B:72
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CFC822C8260750892F01A8A60
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     11377
IP address blocks:        216.20.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:2c:82:60:75:08:92:f0:1a:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=86315d30-27bc-45e0-84d9-123a08616525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:f7:a7:78:b5:3a:50:75:c4:9a:52:5d:80:
                    fe:7b:ec:70:d8:c4:32:9c:e5:e3:8b:88:2f:0b:9f:
                    19:c1:78:a3:70:b7:a0:1f:27:fe:d7:64:9f:04:7a:
                    97:ec:fd:2c:7f:57:dc:32:9a:6c:84:f3:72:45:c6:
                    ba:6a:c0:36:ad:a2:ad:4b:c3:01:85:cb:f5:ac:52:
                    d9:62:64:4b:20:78:7b:13:06:c5:07:71:39:bf:9f:
                    ed:b9:45:49:c1:49:32:3a:8d:e5:9d:7b:d8:ef:c6:
                    ad:fb:6c:e0:50:57:b8:cc:e8:3b:73:3a:13:f0:4a:
                    6b:9d:20:44:fe:f8:4c:53:9e:81:01:35:e0:08:4e:
                    16:4f:98:54:99:0b:23:e2:c8:f2:9d:a7:23:78:5e:
                    26:a2:29:cd:22:e9:0f:85:54:7e:38:cc:61:d5:31:
                    ef:c0:83:58:b4:6c:44:bc:c7:50:5e:d7:2c:34:7e:
                    bf:74:50:47:72:e2:a1:12:45:c3:d2:3d:1e:fe:1b:
                    98:54:25:e3:a9:94:ff:e1:ec:34:27:a5:7c:51:8c:
                    26:80:34:41:f3:17:74:aa:52:f0:6c:74:64:1c:f8:
                    77:f2:a9:f7:6e:4b:f4:81:af:8f:16:6c:01:eb:8d:
                    da:49:68:50:f7:a0:d9:e8:86:9c:d1:87:2d:ea:70:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:19:52:96:A2:A6:2E:79:61:3F:68:D8:0E:E3:2B:C3:27:8B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/3a5ce221-8f9b-348f-9b51-2bd163e99c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:00:0e:f0:c8:52:ec:fb:53:3f:45:83:36:79:75:67:b3:
         9a:e1:c6:df:b6:60:eb:14:21:87:1a:ec:8f:ed:3d:5c:0b:06:
         ad:79:30:6f:6d:21:fa:80:ce:3a:66:10:0e:d5:b3:ad:34:74:
         e0:fb:e4:aa:94:78:cf:2b:2b:69:30:62:5c:01:91:27:13:8b:
         25:bc:11:51:33:88:e8:67:e4:3f:d7:03:d3:2d:8b:f2:85:f4:
         58:01:68:4f:e2:24:96:4e:a9:c1:e9:6c:b6:d7:f7:12:c6:44:
         ae:ed:49:d3:40:ca:3a:e9:6a:50:9a:0b:e4:e7:ed:15:60:d3:
         83:46:69:17:71:15:39:0a:78:f3:60:ff:ed:1f:b6:e3:0a:f0:
         7e:cb:46:4a:03:9c:cf:29:ad:b8:ae:20:df:be:8b:5e:78:61:
         d1:49:1e:57:74:9a:7f:ef:bc:74:2c:2f:e3:31:84:0a:82:ad:
         1b:aa:1d:24:d1:54:d4:af:95:96:18:46:0a:01:65:09:d4:10:
         ff:b5:b3:74:fd:c1:4d:91:fd:69:f3:c9:49:3c:6b:2e:ac:9b:
         4c:29:3b:51:81:e2:c3:10:7e:72:8c:4c:12:d5:f5:ee:b2:6a:
         fa:28:c5:00:00:ad:53:63:c3:68:49:01:8b:a8:7b:3a:04:91:
         51:f0:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:27 2026 by rpki-client