Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
File:                     2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json)
Hash identifier:          /v1Dsg0myxTG7FPwSacirEFmGU3lKZFNyJTUtzEgwso=
Subject key identifier:   DA:F1:5C:7B:F8:4D:13:64:A3:1E:56:6B:AA:A9:3D:7B:84:58:36:BA
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584D4D5A6AC744AABBD6F17DA9C0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     11260
IP address blocks:        66.103.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6a:c7:44:aa:bb:d6:f1:7d:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=f19e66f9-2239-4df9-9d9b-945ee194aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:e3:a7:be:89:40:da:19:d6:73:1d:aa:18:
                    5a:de:ef:fc:55:08:29:56:7d:b9:da:e0:84:69:42:
                    42:a2:ec:4b:ac:4d:c6:0f:a7:0d:43:ab:11:55:9d:
                    6a:3e:94:2a:5d:08:75:2b:8c:75:35:ce:99:ac:03:
                    df:f1:a1:13:5b:b5:8a:45:73:1e:60:71:2f:00:7c:
                    63:c8:d9:fb:0e:1f:80:ee:9e:1d:f9:22:29:02:c4:
                    e1:99:2c:10:5d:e2:b0:fb:99:b4:01:63:54:ed:d4:
                    0e:30:7b:b1:d2:35:32:2b:32:57:c3:14:96:80:de:
                    e4:f8:41:04:4e:e3:0e:2f:71:a9:70:33:4e:54:de:
                    d2:8f:b9:9d:26:85:82:09:8f:e8:48:94:c7:f0:06:
                    aa:7e:bb:82:78:6f:12:5e:e6:b1:52:2f:7e:b9:a1:
                    90:26:d0:b6:fc:24:f8:17:ba:b5:6c:5d:be:22:64:
                    f6:ca:51:6a:8f:3f:72:6a:41:bb:48:16:10:e7:5f:
                    54:51:8a:7e:cd:f5:cd:e7:98:47:89:7d:63:a0:46:
                    0f:e1:bc:c4:c3:6b:49:1d:16:86:ed:b6:dc:08:bf:
                    95:bd:0d:53:2f:9b:bb:33:f2:7b:58:fe:f7:95:b9:
                    7c:85:50:73:cb:07:e0:88:51:38:3a:6d:59:62:77:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:5C:7B:F8:4D:13:64:A3:1E:56:6B:AA:A9:3D:7B:84:58:36:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:1c:6b:61:72:dd:c2:c2:da:54:5f:d3:6f:11:ad:1d:4f:
         2a:c3:1b:24:7f:71:c2:cd:74:9d:e7:b1:c9:06:4e:d9:fa:b5:
         0e:97:16:fb:58:f8:54:8e:d2:85:a8:c9:a5:e5:85:b9:30:d3:
         78:17:ca:bd:48:69:a6:f9:55:3c:a5:79:0f:49:c1:5d:d5:4a:
         d1:8c:30:7b:d4:9d:60:39:b7:bf:13:76:95:e6:69:f7:2d:ab:
         be:af:bf:7b:30:d2:77:1b:69:f0:bf:58:19:ff:a8:82:b8:e8:
         cc:79:29:45:89:94:c1:b8:e7:75:6b:06:98:d2:4f:16:77:36:
         fb:56:c9:22:91:a8:8a:49:92:ed:7f:9c:57:cc:57:89:d6:eb:
         6d:8f:53:ec:d4:be:91:70:38:dd:ce:f0:39:78:51:c7:be:dc:
         ce:59:75:62:e5:e4:a9:68:d6:26:ca:4e:8a:78:bf:c6:ca:91:
         9b:05:82:5a:cb:35:60:c4:d9:b5:b8:a9:82:cc:60:3b:e0:e1:
         59:ad:3c:87:66:a9:e3:1d:8e:2b:fc:81:97:56:66:91:5d:89:
         49:1a:7c:45:21:b8:58:62:f5:93:ed:bc:2e:45:38:df:3b:fc:
         e4:31:59:b1:97:64:bb:dc:ec:de:31:91:0c:7c:28:bf:c3:a0:
         2e:42:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:57 2026 by rpki-client