Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
File:                     482cda7d-a110-3978-a093-87780ba15fd4.roa (raw, json)
Hash identifier:          Hw9uRMFyy71gohXmHqbLcl6po4F+4Duck7LMnyooU6Y=
Subject key identifier:   44:D6:0A:A7:61:61:5F:8B:52:2D:89:3E:A1:2A:AF:1E:99:CC:1F:B5
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F4328584D00B27D381FD15B340BAC2800
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        204.16.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7d:38:1f:d1:5b:34:0b:ac:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=51642535-5dd3-49cd-817b-cdaea307b3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:f4:fe:7f:45:1a:36:a3:24:8b:ba:84:32:
                    9b:0a:4b:64:dd:e3:5c:6a:b8:21:4e:80:fe:a8:66:
                    f0:09:f4:05:17:6f:46:aa:0e:0c:48:e7:c4:6e:4b:
                    0b:df:0b:92:16:09:6a:c9:cb:f4:e6:7b:ca:63:75:
                    f5:3f:63:b5:80:80:89:c3:f1:9f:66:68:cb:66:fe:
                    a1:79:f7:3f:02:2f:10:e8:5d:c9:a2:dc:1e:5e:e2:
                    49:37:aa:ce:b4:9e:95:c3:79:ad:50:20:61:0b:d4:
                    7b:17:17:49:e5:00:9b:06:52:c2:72:6d:86:28:4e:
                    a9:98:a6:1b:53:c8:4f:a4:9c:30:38:da:6b:fe:fe:
                    88:73:af:52:df:81:1e:dc:e5:89:a1:5a:ac:cb:9a:
                    c5:5b:f8:6e:46:a7:a6:2c:9d:e1:58:60:41:a3:6a:
                    0d:02:ae:f5:bd:26:6c:7f:c1:d0:6d:14:49:41:5f:
                    09:35:89:91:f9:eb:d2:01:61:ae:98:72:8b:90:f8:
                    b5:3b:9d:4a:34:6b:65:07:89:b9:4d:55:3f:19:33:
                    7a:c2:cd:b3:ab:f3:c5:04:53:55:ad:7b:e3:3a:51:
                    ea:49:83:4f:56:3d:06:bf:ee:98:46:3b:3d:03:4d:
                    8d:1c:0d:1c:75:22:f9:30:86:3b:d5:c3:d9:74:1a:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:0A:A7:61:61:5F:8B:52:2D:89:3E:A1:2A:AF:1E:99:CC:1F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/482cda7d-a110-3978-a093-87780ba15fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:b4:8f:4f:7e:47:e8:7e:8a:29:0f:87:90:7f:a5:2b:f1:
         31:fe:a2:97:bc:8e:44:8c:8d:38:10:e8:c2:25:cb:30:b3:51:
         76:bf:14:42:15:a0:96:c3:92:35:f1:45:20:f8:15:e4:bd:85:
         1a:e5:91:a6:f2:3c:58:fa:3a:a0:f3:86:e4:3f:17:35:14:3b:
         dd:e6:70:a9:d9:fe:02:c4:9b:ad:f0:2a:1e:ab:7b:b4:e8:e3:
         aa:f3:da:bb:4e:8b:ac:c9:95:08:90:1a:91:7e:ca:92:bb:bb:
         d0:6d:8c:d4:b5:7a:73:e7:9f:0f:0a:b1:99:63:1c:3c:8b:1b:
         ed:6e:bb:78:9d:d0:4d:35:0e:9f:d4:91:9c:f6:1c:3e:fd:bf:
         3b:0b:d1:49:0f:e9:51:4b:84:0c:48:59:48:fe:1e:99:e5:db:
         3e:71:70:51:59:ed:89:2e:d4:43:64:07:8b:17:f9:36:b3:cb:
         6d:18:9d:a9:6a:e0:07:8d:7f:f0:99:87:df:cf:16:d3:12:e7:
         ce:75:a7:c4:ef:71:22:18:79:d6:f4:f9:4b:15:56:e3:38:b2:
         6a:ea:a4:4e:5a:aa:6a:c9:58:1f:12:2c:63:ad:69:d6:12:e1:
         bd:cf:7a:d3:58:a5:6d:a8:ee:5b:43:6c:36:a0:a1:85:0d:9e:
         cf:38:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:01 2026 by rpki-client