Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
File:                     a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa (raw, json)
Hash identifier:          8U77WLJBy65jALV0shNMiuYymBav8UJpQz3WAbCofAE=
Subject key identifier:   15:CE:24:5E:BE:2B:DA:74:DA:26:51:E7:7B:BC:E5:71:33:22:E7:02
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F4328584D59EA5B041C46013F36C0F900
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     11377
IP address blocks:        149.72.100.0/23 maxlen: 23
                          149.72.102.0/23 maxlen: 23
                          149.72.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:5b:04:1c:46:01:3f:36:c0:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=54a2e8af-784b-4d7c-9b6b-14ed3c9563c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:f8:94:2d:6a:e5:cc:7f:f9:b7:99:a5:2e:
                    ff:47:f6:ff:e5:5a:d2:cc:81:2d:41:c9:92:a5:c9:
                    24:50:ec:41:21:09:d3:14:ae:e6:e0:3e:53:5c:23:
                    91:f3:1e:64:3d:66:89:8d:04:0f:12:0c:83:69:34:
                    8e:03:65:76:af:0c:50:0e:1f:d4:91:d9:77:29:d3:
                    83:ae:55:fd:df:49:c8:1d:76:e1:b8:cd:78:91:d4:
                    a3:ab:7a:75:43:b9:e1:53:0d:f1:e3:52:34:d8:08:
                    a3:d6:59:09:82:29:c5:4b:e1:43:7d:e3:d1:47:89:
                    ef:1b:d4:9f:81:48:0e:c4:30:b0:5d:92:c6:a5:7b:
                    15:69:25:27:ec:7f:cc:c2:88:6a:b1:df:a2:5a:24:
                    cf:f2:3d:d6:1c:e0:4a:15:c4:9d:e6:38:15:c4:c6:
                    fa:75:4b:f0:ff:29:bd:db:d7:9c:2f:8f:5a:12:6a:
                    3f:f8:23:68:ca:fa:34:be:e6:2b:8f:c2:e1:d3:3a:
                    f2:dd:ff:4e:35:6a:45:57:1d:10:32:49:cb:00:a3:
                    fe:29:b5:ac:68:15:7a:b6:b6:90:78:0d:f6:5f:97:
                    ca:d2:6a:c9:e0:7a:27:c8:bf:6d:40:41:d5:c1:86:
                    68:b7:61:05:c4:1c:fc:09:e3:59:06:cd:10:48:c0:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:24:5E:BE:2B:DA:74:DA:26:51:E7:7B:BC:E5:71:33:22:E7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.100.0-149.72.105.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:f1:8e:44:82:e7:89:43:7c:33:a3:21:38:30:75:a0:6f:
         6c:f3:09:08:5f:3f:8a:39:15:43:ea:8c:b4:15:26:ab:9a:12:
         43:d8:9e:12:da:fa:c7:32:24:72:63:7b:ef:d6:cc:14:be:b6:
         77:0e:37:dc:7f:2c:08:48:b6:85:1b:8e:76:bf:29:7f:48:ef:
         41:5c:a0:ff:1e:38:e7:5a:a1:95:a8:c5:36:3f:4d:86:33:3c:
         22:41:cc:32:11:52:1a:9e:0d:72:87:8a:0c:a6:9e:9e:23:ce:
         3b:02:15:0f:d0:c2:4c:2c:86:3e:46:57:99:4d:b1:fc:47:a1:
         69:a9:bb:39:ec:c0:68:0d:db:dd:46:5c:fd:d8:dd:e8:e9:04:
         96:36:0a:f4:91:da:b0:9b:bd:07:04:83:72:8b:6f:81:d2:22:
         ff:fd:d6:60:af:d8:cf:5c:63:b3:8d:f0:33:79:22:a0:75:a8:
         03:4c:6a:e1:76:82:7f:f0:1f:e5:57:11:de:89:f0:69:0f:9e:
         86:f8:83:80:77:99:ed:b7:40:fc:63:86:d6:22:ac:5f:12:6a:
         6b:a1:b1:79:2e:ba:9e:e4:9f:4d:43:89:96:6e:2a:d6:1c:d2:
         fc:2f:61:0d:46:da:0d:e9:f6:98:ef:be:c2:31:97:15:c4:54:
         ce:9e:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:32 2026 by rpki-client