Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa
File:                     4320149a-1d15-329e-9e7b-b61e5d89e602.roa (raw, json)
Hash identifier:          p45UsI2UwLCgVlRh8YqLZjl4BCO6Q8urxlJwKpvJE4c=
Subject key identifier:   FA:16:09:6F:15:06:6F:45:13:5E:CC:16:94:B3:07:09:46:EA:08:52
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584D07ACE40AB84B5AF44A66C780
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     400110
IP address blocks:        184.169.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e4:0a:b8:4b:5a:f4:4a:66:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=0ff23e0f-1381-4a97-a0e5-a51f4d36c472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:bc:b3:3f:7b:fc:d1:7c:31:c6:9a:82:f9:
                    fa:7b:a0:42:c5:0b:fe:91:bc:7b:b6:52:ef:f8:5c:
                    a4:7d:1e:a8:34:f4:76:34:83:33:01:d4:5d:a1:f2:
                    ce:e0:9e:ae:68:dc:93:ab:11:a2:ea:e1:3b:76:45:
                    f1:c9:29:65:8c:e7:f2:0b:46:e1:eb:48:9d:5c:97:
                    ca:61:b1:2d:02:0a:e1:d9:1e:74:2f:9b:d2:9d:ae:
                    ed:41:e0:3b:42:8a:ea:42:25:6a:4e:2c:97:8e:8b:
                    86:e0:6b:40:fd:90:ce:ce:8d:db:ed:7c:52:28:0d:
                    b6:0e:17:ce:bc:6c:f7:05:39:c3:59:c1:80:5a:d6:
                    e2:16:00:5c:98:fc:25:dd:1b:2c:a7:9d:64:41:15:
                    e2:f3:e6:96:6f:43:17:cd:e5:e0:b4:f8:78:d4:e2:
                    50:90:3b:f5:77:6a:38:cf:4d:3c:62:c8:53:7f:21:
                    06:8f:2d:0c:a0:6b:fc:11:ee:23:a6:d6:61:d2:97:
                    9a:bc:6d:42:5b:cf:73:6b:ca:da:2b:3b:d1:a8:aa:
                    0e:84:66:39:76:77:ae:f8:bc:03:af:ea:4c:f4:88:
                    68:89:dc:0f:06:70:dd:c1:9c:84:d2:44:2c:be:45:
                    f8:b5:8d:68:3a:6b:32:97:49:e9:ba:e6:92:28:5f:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:09:6F:15:06:6F:45:13:5E:CC:16:94:B3:07:09:46:EA:08:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:8b:dc:eb:e4:88:a3:f6:10:4e:c2:a8:ae:ae:31:df:98:
         0f:9c:9e:63:65:73:64:ce:53:e8:5c:44:1f:33:83:7d:b8:1e:
         9e:2f:a7:50:72:9c:e0:83:89:64:0e:04:e2:ac:bf:8f:f4:c0:
         b0:ee:d0:bf:84:5b:7b:c3:92:97:78:71:65:3a:62:fd:91:48:
         42:fa:bb:bd:43:e5:1f:b6:d3:1d:81:a6:36:b0:5d:55:86:11:
         64:a5:52:bd:90:cb:1f:29:4d:5b:37:98:da:bb:33:0d:d5:ae:
         91:82:1a:64:67:b0:61:9e:01:13:31:61:f7:2c:be:1e:67:64:
         fc:6d:aa:86:14:24:da:e1:c0:5e:8f:43:05:ca:d8:29:bf:06:
         df:28:c9:06:a8:1e:f0:3a:76:3c:65:1d:b1:26:fa:d2:45:95:
         48:c4:96:54:61:24:2f:ea:e6:30:2c:ed:ee:00:3f:57:96:74:
         07:7b:c7:53:fd:15:07:5a:50:fb:71:b5:36:d8:17:4c:1c:ba:
         d1:5e:6b:f0:6b:e9:f8:b1:02:b5:51:96:cd:33:8d:d2:14:db:
         0c:4b:e7:ae:65:59:6a:f9:1f:60:26:70:c9:f8:86:a9:e7:d9:
         8a:d7:a4:87:28:02:43:67:cb:50:50:6c:59:44:d7:a8:87:6c:
         86:a0:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:37 2026 by rpki-client