Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68c56f8-f4c7-33c2-ae4f-bcd48c20e51c.roa
File:                     f68c56f8-f4c7-33c2-ae4f-bcd48c20e51c.roa (raw, json)
Hash identifier:          gSBv3flaBKeC4z2TXbcaoPhNkvrgoB2hS4u0QPYDiQM=
Subject key identifier:   96:5A:49:E8:F2:75:79:33:5B:E3:D2:5C:76:37:51:2F:C3:4A:FE:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4D5A87BD99833A78FBB02080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68c56f8-f4c7-33c2-ae4f-bcd48c20e51c.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:87:bd:99:83:3a:78:fb:b0:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a90102e2-c5b1-4ebe-8737-380360177014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:30:6a:e1:ac:bf:f4:c3:99:c6:74:3d:5c:
                    9a:e3:5d:31:08:b5:18:b6:41:7d:86:d6:47:ae:0a:
                    82:20:0e:81:27:c1:34:c7:9a:47:64:72:a9:e6:31:
                    3b:3f:de:43:5a:e0:4a:ff:c7:16:9a:4e:23:06:b6:
                    41:ce:97:a9:95:ed:9a:7f:99:dd:40:8b:0b:72:6c:
                    27:3d:e8:85:fb:e5:48:7f:4d:83:9e:68:65:ea:93:
                    ed:ae:5c:0e:d1:3b:fd:64:7b:52:88:60:51:99:7c:
                    03:d5:75:3f:5d:8c:89:68:fb:95:e4:5c:86:88:34:
                    49:ff:58:ab:9b:3b:d3:0c:06:48:04:4f:e7:de:7f:
                    f9:a2:a2:39:72:fa:0e:3c:82:8d:38:9c:9f:f8:f4:
                    2d:e2:58:57:5a:e8:11:98:54:65:64:95:07:45:0f:
                    1d:49:07:ad:67:34:af:69:10:a5:74:c5:a5:9a:b1:
                    f1:42:48:60:fe:72:15:1d:70:d5:a9:2b:41:74:a2:
                    73:91:bf:3b:d2:b1:00:8e:02:24:96:ff:6e:d0:79:
                    27:d4:46:8f:05:b1:c4:73:d6:96:d6:37:24:f1:9f:
                    9b:79:75:ca:de:aa:6e:7a:87:bc:87:27:e1:1a:11:
                    ec:fe:89:32:f2:a6:f2:df:32:3d:8d:89:03:3e:a6:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:49:E8:F2:75:79:33:5B:E3:D2:5C:76:37:51:2F:C3:4A:FE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68c56f8-f4c7-33c2-ae4f-bcd48c20e51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:83:1c:d0:f3:f0:2a:de:ec:70:73:2a:2c:ea:75:98:99:
         f0:9f:9f:2f:77:6b:05:0e:59:64:fb:31:3d:4a:04:e7:00:dd:
         dc:24:f6:d1:a0:60:83:0d:0f:36:30:39:58:58:52:ab:58:91:
         b3:91:20:cc:2f:6f:dc:09:e8:47:c1:79:0c:05:ed:3a:fe:68:
         eb:cd:2a:30:b0:c2:de:f8:0b:4b:93:98:f7:fe:66:d0:48:db:
         e6:20:3a:5f:1d:5e:dc:01:ba:0c:f0:fb:99:77:35:a2:e4:a1:
         b8:b5:c0:12:66:2e:d4:07:84:40:c4:50:5e:0a:5f:be:e0:04:
         5e:a8:24:f4:c7:64:6c:55:28:1f:e9:e1:af:6a:a6:c0:69:25:
         88:11:8b:b7:4f:a4:7a:c1:dc:2e:4b:1a:de:a9:a0:a2:22:7c:
         61:56:58:e2:c3:8d:df:ee:c1:95:26:00:02:78:98:b7:da:bd:
         81:36:fb:74:59:8a:e4:9b:a9:ef:f8:49:81:09:99:06:ff:2d:
         a9:09:34:18:4a:c3:f0:62:95:f9:72:ad:6b:f3:e6:78:a8:ad:
         0a:da:40:8a:a5:8e:db:bb:4f:d0:09:37:ec:08:39:b5:79:60:
         03:f0:64:03:95:85:41:7e:6d:9d:d2:cb:5e:83:52:ce:c8:76:
         77:35:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:44:19 2026 by rpki-client