Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53496650-7b83-32b6-893c-9d6b6c2018dc.roa
File:                     53496650-7b83-32b6-893c-9d6b6c2018dc.roa (raw, json)
Hash identifier:          1zHWy9J/+IcQWfNnTR/WAElbrwyuYzBxVlncxmFC+lI=
Subject key identifier:   28:22:09:84:5A:7C:3B:56:26:4A:B5:87:2B:BB:CE:B8:A5:87:E3:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA359BD3564BE71B3E680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53496650-7b83-32b6-893c-9d6b6c2018dc.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     36286
IP address blocks:        216.66.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a3:59:bd:35:64:be:71:b3:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b6f532b9-a3fb-400c-9fb9-fcd6a2f7300f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:bd:d4:8e:6f:dd:c1:10:c0:ba:c4:53:9b:
                    91:0b:d6:73:5e:6f:ba:49:e5:df:5d:50:fd:08:54:
                    a1:e5:5d:4d:55:d8:d7:ed:52:9d:0d:6f:04:8f:3c:
                    30:fc:8a:09:72:c5:c7:04:40:d6:fa:b2:0e:28:15:
                    52:6c:b1:ad:4b:78:8b:19:b6:8f:e8:b6:6b:26:e0:
                    16:65:0d:ea:3a:63:50:89:fd:56:58:a0:42:9a:c3:
                    36:f0:22:86:96:ac:32:b2:35:17:d5:a0:65:fc:ac:
                    62:23:6e:d2:59:63:1c:29:42:f4:f3:de:20:bc:0d:
                    3b:ec:f3:db:68:c2:b7:51:1f:d2:da:2d:e5:28:96:
                    c1:33:2f:77:38:79:f8:a3:0b:d2:6a:99:53:db:6e:
                    7b:7c:77:07:76:13:dd:41:8e:44:a2:12:c0:0e:99:
                    c0:f6:63:13:29:b8:7a:bd:4d:ba:52:e1:f4:50:41:
                    ee:b1:81:44:86:07:09:0f:45:cd:72:84:5f:4f:34:
                    92:be:75:b1:af:1b:f4:95:3f:f2:72:61:6d:ff:dc:
                    66:7a:07:b2:b8:36:58:e5:b7:cd:8c:50:81:7f:d1:
                    d9:0a:42:d0:cc:86:62:da:b8:57:9c:eb:ea:09:09:
                    6b:44:5a:94:77:9d:2f:bd:92:04:e9:83:35:2a:22:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:22:09:84:5A:7C:3B:56:26:4A:B5:87:2B:BB:CE:B8:A5:87:E3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/53496650-7b83-32b6-893c-9d6b6c2018dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:96:a9:2b:f2:71:b7:71:c9:70:7f:30:86:d9:eb:9f:e3:
         fd:a0:d0:b0:0a:5b:e2:83:68:bd:dd:af:0d:b8:13:f0:13:12:
         02:1c:88:c9:e3:e5:52:3f:b5:a7:8d:00:3f:78:cd:c5:99:21:
         dc:21:1c:57:4a:22:4c:59:64:ad:26:c4:45:54:57:94:0a:80:
         7b:42:45:42:89:72:a9:b9:fd:5f:4d:b2:dc:23:57:b8:fa:22:
         dd:fe:41:cc:e4:c5:18:26:ac:30:7b:d1:f2:3d:06:02:37:37:
         88:a0:fd:1a:c5:ec:77:ce:6c:73:82:ec:90:06:f7:4f:0c:c0:
         02:6d:bd:74:78:46:20:98:62:e2:3d:0c:62:a3:7c:7a:2f:08:
         67:4f:89:d0:22:5c:e5:7e:4c:a5:f8:ee:4a:0f:13:7f:7f:42:
         b6:7d:3a:2e:d7:19:82:6e:9d:c2:e2:98:91:e7:9b:4a:8d:59:
         84:cb:d0:9c:3f:39:a4:1b:d0:ab:cb:e9:9b:ac:63:6c:b2:7f:
         e0:b5:e6:f1:83:43:bf:10:8f:23:4d:70:1c:aa:ed:08:af:e4:
         74:f1:97:c7:11:d6:f5:0e:a1:d5:92:af:b3:fb:cf:13:51:4c:
         1b:77:43:d0:4d:57:b5:ad:4a:4f:33:07:07:b2:b1:37:e5:04:
         c5:b9:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:03:28 2026 by rpki-client