Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa
File:                     d1656d04-2463-3789-a064-97c719b35806.roa (raw, json)
Hash identifier:          2YlN1gxeDlXPZ7abC1Bg4gyIwyfHfCDG1RS8yi+HKH8=
Subject key identifier:   B4:37:7D:3A:8A:C2:D0:32:9C:5E:59:7E:4A:75:28:C0:7C:F3:4A:E8
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584D67DFC482D891814CA3370300
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     5744
IP address blocks:        151.207.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c4:82:d8:91:81:4c:a3:37:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=c3893173-e4f7-45f6-96ca-64834ba8d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a1:b8:25:d9:95:22:0a:49:61:9a:d2:b7:85:
                    3e:a2:56:e1:21:32:9d:78:f4:91:cd:69:9e:80:1a:
                    03:bd:96:b8:5a:b0:b4:a6:12:c1:a1:07:b7:2d:e6:
                    b3:67:fb:0b:de:af:f8:f2:6f:e7:7f:ba:5d:dd:d0:
                    cc:ce:a6:26:23:46:79:d1:56:4d:14:9c:0b:26:4a:
                    ed:22:49:f5:a9:47:16:78:35:bc:a8:1d:58:cd:c4:
                    9c:9e:50:0c:9b:83:30:ab:35:d5:54:16:b1:04:95:
                    56:c4:b5:38:bd:e5:c1:07:82:90:d9:ea:f8:bd:55:
                    54:ad:87:a9:e4:34:f6:d8:82:7b:7b:5f:88:d1:83:
                    72:9a:a6:b7:b7:2a:cf:44:8d:37:01:46:9c:cf:83:
                    d5:a3:0f:ae:3d:76:60:66:44:74:3b:96:2a:31:18:
                    e3:6b:64:b1:7e:f6:8e:0e:4f:e4:a7:02:cf:b5:89:
                    92:c8:ab:7a:5f:e1:d5:41:83:dd:61:93:dd:4b:28:
                    27:7d:1f:89:27:9e:04:63:49:28:52:b5:15:46:38:
                    be:50:ab:18:e6:7d:06:52:75:bc:4d:78:1b:30:60:
                    8a:67:1d:71:bb:d4:9f:9f:4a:3e:3a:1d:6e:0d:ea:
                    5f:b0:90:a2:62:48:33:4b:9e:3f:29:d1:8e:d4:63:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:37:7D:3A:8A:C2:D0:32:9C:5E:59:7E:4A:75:28:C0:7C:F3:4A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d1656d04-2463-3789-a064-97c719b35806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:0e:2e:9f:ad:16:e6:40:a5:76:33:46:10:1b:fb:f1:8e:
         e3:ac:9b:cd:91:c3:62:9b:a1:43:2f:c2:b0:e0:be:60:f4:73:
         44:f8:3f:20:67:57:a8:ca:3c:a7:ce:b5:e2:dc:11:01:c8:f5:
         f7:c7:c2:0f:21:14:c2:7f:41:20:80:de:54:f6:7b:38:36:a5:
         9c:f0:d4:87:92:c6:3c:1c:81:44:98:b2:e3:a8:67:e9:f3:c1:
         12:a4:54:2b:1a:27:2e:c5:6e:4d:19:79:37:45:95:88:08:f7:
         fb:17:fb:5f:cc:9a:c4:6b:8e:b3:f0:85:dd:f8:7e:95:b4:7c:
         02:67:81:83:82:8f:b4:d3:59:15:a9:b5:f5:49:bc:67:ab:cb:
         56:1d:e3:18:f1:8a:a6:39:8a:1e:46:df:4a:2c:c7:9c:7e:d5:
         50:24:ac:9f:ca:aa:16:9d:4d:1e:08:ab:b2:54:41:9d:d4:c4:
         38:5e:b1:e3:f2:91:48:37:a7:6e:74:05:f0:7d:09:c1:bc:f4:
         4c:d0:63:f7:22:84:d1:94:3e:4f:cc:a3:57:67:af:d9:50:a4:
         60:e8:8a:7f:0e:74:6d:db:90:fa:94:96:87:3d:f9:af:e1:d2:
         47:0a:fa:c3:3e:e4:8f:dc:1e:27:38:56:e2:57:4b:34:f2:04:
         49:01:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:15 2026 by rpki-client