Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9131874f-4e4a-3091-9e5e-dcc718d33dc7.roa
File:                     9131874f-4e4a-3091-9e5e-dcc718d33dc7.roa (raw, json)
Hash identifier:          702uqGDmg2HqydIF6GCYPcFWOnMDV0ZSJnQ13MdCOg4=
Subject key identifier:   66:4C:F6:8D:37:0F:21:54:39:FA:06:C3:9C:F5:08:73:6F:DF:FE:CF
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CFC822B9C069E7486BBF27880
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9131874f-4e4a-3091-9e5e-dcc718d33dc7.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     11377
IP address blocks:        216.20.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:2b:9c:06:9e:74:86:bb:f2:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=452f4a16-a310-471b-9802-fcd2dcd55710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:84:b7:e9:5e:9c:3f:c3:fa:bd:b9:a6:3e:
                    5e:50:88:c5:7d:c4:c9:63:45:c8:a5:15:35:07:b2:
                    7f:9c:ac:f0:c8:e6:49:ac:80:ef:23:19:85:b3:4b:
                    09:c0:14:36:bb:b3:38:42:d8:23:36:f8:c9:cf:34:
                    2d:61:eb:18:2a:30:c0:d8:ec:23:c7:0a:b3:b5:09:
                    b1:0a:7b:69:c0:1b:59:dc:a0:fd:86:d3:73:6c:cd:
                    5a:af:26:59:ca:a4:11:8c:ab:c2:2c:95:83:71:28:
                    7b:7d:c8:1c:4a:e3:f5:94:b4:f6:0b:34:b2:99:cb:
                    0d:0c:eb:1c:40:73:9f:aa:9a:78:ae:26:99:ce:5d:
                    c1:05:ee:7e:37:10:07:d5:8c:ba:aa:43:f5:29:75:
                    74:7c:1b:5e:97:95:03:be:bc:db:11:88:ca:51:e8:
                    06:17:eb:58:84:67:09:c6:e3:d6:3c:1b:ae:49:53:
                    e6:73:7e:18:4e:bd:c6:c8:88:86:e6:59:79:8e:51:
                    e7:3f:a6:7c:ca:ea:5b:53:2f:85:c3:86:45:6b:79:
                    63:ec:23:ed:7c:ea:ea:54:d9:f9:8e:dd:80:aa:e0:
                    61:e3:ad:7b:74:5b:87:08:02:30:8a:9e:cf:62:59:
                    78:b3:22:9c:c3:43:fe:0e:a2:f8:da:18:ff:cd:40:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:F6:8D:37:0F:21:54:39:FA:06:C3:9C:F5:08:73:6F:DF:FE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9131874f-4e4a-3091-9e5e-dcc718d33dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:02:59:22:cb:72:e2:a9:63:80:07:ca:52:d1:b1:33:0d:
         34:17:3d:31:a9:76:94:07:c9:60:4c:89:03:74:50:c5:b8:d3:
         48:1c:f4:40:79:ff:dc:d2:6d:43:0d:44:d7:8c:1f:b6:74:44:
         b8:5d:4f:cb:1b:f0:5a:df:fb:5e:d9:14:bb:55:53:89:4d:c3:
         e9:1e:01:1e:bf:95:76:38:18:47:74:f2:99:76:b4:40:6b:52:
         74:f1:89:74:3f:ed:62:1a:f2:33:60:d6:0d:a0:69:48:26:f6:
         81:29:77:d2:d7:8e:41:d4:d2:1a:07:4a:58:18:37:3c:94:5c:
         89:1d:a0:b5:cd:e5:f5:1f:ab:8e:d7:63:ea:27:95:67:20:e0:
         09:3e:61:0e:4e:e8:0a:51:25:9e:20:25:e8:15:6c:6e:ee:2f:
         c7:40:32:2b:e0:6f:8a:f0:3a:3d:67:e5:84:c8:bf:46:72:74:
         9a:a9:1b:3f:d1:0c:1a:10:25:05:f0:c8:44:b0:5a:27:2b:95:
         9a:5d:85:ee:6d:1a:28:5a:b1:50:51:c9:7c:21:d1:bc:14:c7:
         27:c1:a5:d5:c6:bd:16:fb:55:e9:9c:c0:ed:56:9d:25:b0:9b:
         4a:f7:dd:7d:c6:18:15:08:08:7a:76:23:22:2b:e4:b7:2c:83:
         01:57:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:37 2026 by rpki-client