Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa
File:                     dfdd0091-b9b3-3042-8648-0b61443c27c7.roa (raw, json)
Hash identifier:          y74tYL6vSWWLFyHMyeD6SL4R6QSA5o0q8IyXJ/5oYCA=
Subject key identifier:   43:6F:C7:9D:37:F7:D2:25:E9:D6:2F:E8:3D:40:67:BC:3A:73:E2:71
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584CDF320BC0AA6EFF97FCEE9100
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     54535
IP address blocks:        156.37.192.0/24 maxlen: 24
                          156.37.193.0/24 maxlen: 24
                          156.37.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:0b:c0:aa:6e:ff:97:fc:ee:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=31e4123e-2bb4-44e2-802c-7ffc194ac522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:0c:ae:cb:0c:b4:31:17:2f:ab:4e:70:b7:
                    d9:a9:cf:43:5d:69:7a:09:da:fa:50:4e:f3:4e:ec:
                    c9:13:e8:73:c9:d3:58:09:5a:e3:65:bc:6e:a4:16:
                    db:cd:0a:db:72:d5:74:73:c9:25:57:81:c2:61:bb:
                    6f:6e:ac:7d:64:9d:95:d8:1a:1b:ba:db:60:84:98:
                    64:6a:77:79:14:14:cc:6d:c0:e3:5e:ee:75:62:3c:
                    fe:89:3d:de:08:3c:c0:83:a4:23:01:a4:ad:c7:8b:
                    c2:60:f1:26:dc:08:0e:fe:0b:81:df:1f:2d:ec:40:
                    94:16:8d:24:e8:9d:fe:43:db:75:2a:d4:c7:8c:14:
                    7d:d7:44:e3:40:2b:d1:68:43:1d:6f:60:fe:83:84:
                    d4:5b:37:82:83:fa:a3:57:86:57:34:48:e0:58:5e:
                    47:77:76:35:8b:7c:2f:08:6e:6d:fd:7c:10:f0:da:
                    26:e1:82:39:a2:e1:76:07:d9:e0:ef:31:9e:47:88:
                    6e:bf:a4:a2:32:e8:49:20:0d:e9:ff:89:95:7c:56:
                    82:d0:9e:ae:75:55:32:2b:46:9d:35:a2:b1:52:8d:
                    59:88:2d:fc:ed:ad:37:7e:6f:37:2e:c2:b0:4c:38:
                    d0:bd:7c:22:23:f1:88:06:44:06:0f:86:3f:10:68:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:C7:9D:37:F7:D2:25:E9:D6:2F:E8:3D:40:67:BC:3A:73:E2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dfdd0091-b9b3-3042-8648-0b61443c27c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:b7:61:a7:b0:4a:5a:4b:81:b1:1b:3b:50:e6:88:a5:0b:
         f2:22:00:e6:e1:e8:2d:26:ef:7b:06:8b:00:71:37:d0:72:fd:
         f6:24:21:83:c4:07:5d:72:1e:8f:12:3c:48:4b:df:f9:19:f5:
         be:3e:e8:0e:1e:e1:69:ba:12:53:bf:67:7c:32:fb:31:bc:12:
         1b:79:d8:70:6d:af:2c:b9:bb:99:e2:f0:89:bb:cb:94:8a:34:
         14:ca:69:8c:a7:36:7a:a2:03:b6:47:67:8d:29:48:52:64:9d:
         81:34:27:48:67:9a:49:d4:d9:2c:f8:bc:60:06:cd:9d:14:54:
         8d:87:1d:ff:b9:ee:4f:3c:d7:a1:d7:f9:2f:86:87:bb:fb:49:
         f8:0b:93:56:ca:16:f0:90:2c:38:2b:76:21:62:5c:e9:58:17:
         18:3b:b3:72:97:d8:c4:50:2d:af:de:87:ab:49:b6:e6:f7:db:
         43:30:ef:a0:53:ab:07:04:68:6a:2b:27:29:a4:3d:7b:38:ae:
         3d:33:5b:60:ab:22:85:4e:da:79:4d:ce:0b:3c:65:d9:3b:ba:
         33:55:cf:3d:84:c9:a7:d7:3c:e8:b8:53:15:ef:a5:1b:ba:1f:
         c5:1d:65:ff:55:4b:9b:57:3b:0f:5e:a7:7d:a1:a2:73:94:77:
         b9:95:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:44 2026 by rpki-client