Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa
File:                     aac4b3d7-382a-344c-bd79-c61663ab06c4.roa (raw, json)
Hash identifier:          KrSd4y5Q+UL5i1brfADiPFK9RHAcxign2mibzbBTPcQ=
Subject key identifier:   7D:5B:CB:0F:5B:A4:20:4F:B6:EB:97:B8:A1:64:C0:3C:39:BE:93:ED
Certificate issuer:       /CN=78d8ad5a-4674-49ab-87c8-ced6ef192bd1
Certificate serial:       010D0C9F4328584D037D06BE901F44B555258600
Authority key identifier: EB:F0:05:0B:30:96:19:41:1F:C0:18:7B:EC:AA:1C:44:4E:EC:64:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     50837
IP address blocks:        104.36.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:06:be:90:1f:44:b5:55:25:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8ad5a-4674-49ab-87c8-ced6ef192bd1
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=170a1705-f17b-472c-b4ce-e32f43fb54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:66:d5:90:d2:4a:74:59:31:5d:b0:53:1f:
                    95:c2:ea:f4:14:6f:a8:5b:8a:35:ed:d4:29:d7:83:
                    4c:4e:a4:37:ba:c0:bf:59:59:bb:15:22:1a:ee:b7:
                    22:68:02:85:10:c0:41:e7:dd:3e:5d:bc:73:90:da:
                    c3:b3:43:94:65:bb:a7:9f:c8:c1:e7:92:55:ba:2d:
                    0d:d7:eb:52:85:87:1d:9f:1b:a7:03:ba:8e:02:ea:
                    fe:f0:7c:46:b3:07:0a:ab:d2:46:93:c8:76:96:c2:
                    ab:7d:f3:fa:4d:35:0b:a1:29:2e:4e:e5:d4:28:c2:
                    2e:40:48:35:1b:32:a5:82:4d:e9:8c:35:41:42:63:
                    6b:75:fb:6a:a7:0d:15:f5:6e:ec:36:f9:10:be:9a:
                    8d:5e:5f:82:5f:d1:10:19:f6:be:2c:3e:04:c1:cd:
                    30:cf:5c:a0:56:12:7b:35:a6:19:ae:13:22:28:b8:
                    bf:25:91:38:7d:00:1a:88:51:e1:ee:f7:49:85:10:
                    a0:5f:cd:76:bf:71:00:8d:df:e7:20:fa:58:b6:65:
                    7c:6f:39:aa:bc:c8:51:11:4c:2d:43:76:85:cc:81:
                    2a:93:97:cf:a0:7e:f8:e9:64:3e:ec:0e:a8:00:b5:
                    c1:fe:89:d8:e4:3e:4e:2d:d1:d3:d4:a2:cd:ae:0f:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:CB:0F:5B:A4:20:4F:B6:EB:97:B8:A1:64:C0:3C:39:BE:93:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.crl

            X509v3 Authority Key Identifier:
                keyid:EB:F0:05:0B:30:96:19:41:1F:C0:18:7B:EC:AA:1C:44:4E:EC:64:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:62:a6:e8:b4:07:34:f8:fe:34:36:26:e2:9b:19:02:1c:
         98:45:61:52:93:bb:11:78:fa:a7:9f:df:61:ad:50:7a:af:25:
         79:d7:85:21:ff:b7:14:4c:bb:b0:46:80:53:a7:d7:b5:51:23:
         d5:52:f0:8b:b7:17:df:65:83:1e:f7:5f:a6:af:dd:c7:8a:b5:
         42:91:3d:0b:f7:85:d2:fc:f2:5f:b7:10:e6:e5:ce:36:2f:f6:
         6f:ee:7e:dd:76:b7:1e:d7:50:ae:ff:3e:fc:ed:98:25:c2:54:
         a2:0e:0e:55:a0:80:79:af:57:a9:43:87:a9:20:62:39:5d:d6:
         cb:4b:6f:d2:9f:2d:2a:cb:63:fc:f6:54:c2:c0:41:13:39:b5:
         e1:28:b3:66:19:aa:f2:91:f7:47:1b:df:ad:38:09:be:b6:c4:
         0a:33:33:21:9c:7f:db:03:ec:93:cd:a7:ba:e0:a1:cb:53:ee:
         c8:b2:ae:a3:5b:25:ef:85:90:b8:e4:91:56:6e:af:36:7c:c6:
         7c:89:04:95:6b:73:15:af:77:27:e2:86:06:00:06:b6:87:8b:
         8d:d8:5b:92:db:7c:e3:1d:41:15:85:94:9b:10:3a:68:62:ae:
         55:a4:f9:cb:5f:22:46:83:fd:91:ab:49:ff:75:18:24:f9:fa:
         c7:49:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:17 2026 by rpki-client