Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa
File:                     16e4edcb-336c-3921-b8fa-7f894f76cbab.roa (raw, json)
Hash identifier:          0HhIm22cIjIcvzVY6iH4FnRqp3OR69kHLoFKuGJaWjw=
Subject key identifier:   46:CB:3C:5B:72:1D:FD:3E:8A:F8:D4:E6:77:BE:C3:60:23:C5:4A:E1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CED278CAA7A329C88F88AFB20
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     30103
IP address blocks:        149.137.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8c:aa:7a:32:9c:88:f8:8a:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ec8dcf1f-0d87-44e4-826b-f74e318233f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:92:eb:ab:93:90:bc:fd:63:be:e9:21:f4:58:
                    02:0f:90:99:d0:6e:1d:ad:02:81:b5:fe:66:eb:d1:
                    53:cc:29:79:bb:64:08:b6:4c:15:7e:e1:bb:a9:0d:
                    f4:a0:d8:87:77:80:90:08:ff:49:08:39:f7:79:1b:
                    c3:1d:19:08:e7:07:72:c8:2a:26:d4:0a:2a:67:8c:
                    1f:c2:66:6c:02:df:9a:e8:e9:a4:11:21:cd:2b:99:
                    84:98:32:c9:19:61:71:95:b4:46:dc:d6:60:ba:5b:
                    a2:98:e6:4a:83:5f:27:41:0e:06:8d:d8:d6:52:31:
                    52:6b:30:ae:ec:ad:9a:e7:75:86:c3:ff:4e:07:af:
                    d2:fa:31:87:64:fb:18:3b:4b:54:9c:ae:07:b8:7b:
                    0a:16:a7:3f:4a:7a:c3:af:2c:73:64:71:c3:3e:52:
                    52:c3:3e:1c:b9:02:10:20:38:7b:ca:d0:6a:15:61:
                    0d:4a:30:c3:c4:77:30:94:55:85:26:e5:11:25:83:
                    33:45:fd:81:86:62:51:28:aa:1b:44:8c:1e:6d:ba:
                    14:25:06:d4:a0:97:82:c7:8d:2e:13:ac:de:30:2a:
                    da:a2:d4:e1:9f:fb:b2:22:57:81:b0:59:7c:6e:a3:
                    40:4c:a5:1e:a3:56:c0:e3:a1:8b:52:e1:ed:ac:60:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CB:3C:5B:72:1D:FD:3E:8A:F8:D4:E6:77:BE:C3:60:23:C5:4A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:98:00:95:16:82:0a:0c:a9:e3:19:2b:f0:5e:75:f9:88:df:
         0f:06:23:3e:47:d4:43:d5:85:34:24:73:0a:82:95:40:a1:be:
         84:06:42:e2:5b:3a:79:52:44:30:d2:6f:a8:46:ec:96:35:80:
         c8:84:3a:ec:6e:51:75:0a:31:2f:89:01:0d:02:5a:68:ac:b3:
         45:6a:3d:8f:78:d8:ea:70:fc:7b:cf:d4:b0:e4:c9:1f:e5:2a:
         26:e2:71:b2:dd:ef:41:bc:b2:93:e6:14:ab:76:cc:7b:66:78:
         8e:23:a3:7b:1f:7b:2b:95:f5:84:c0:98:d6:42:e8:69:05:27:
         47:e0:2c:e9:78:82:2a:6b:c6:c0:4f:08:d3:73:19:69:ff:01:
         24:88:b8:14:66:c5:4c:ff:91:cf:6c:b5:9f:e7:98:b1:54:04:
         87:20:91:13:74:a9:7e:1e:dc:84:11:4f:f5:63:ea:2e:bb:1f:
         e8:8f:3e:d6:a8:62:30:1d:95:b4:74:c5:52:26:c2:a1:09:5b:
         8b:d4:5b:77:09:6c:cf:2b:85:60:53:9d:a1:25:8c:ee:51:70:
         0d:98:4c:6e:13:7e:75:a2:c3:71:27:69:28:7f:04:e0:d6:af:
         93:3d:de:d2:c5:20:e7:64:f1:5e:fd:2b:d8:4e:74:70:9f:99:
         a1:7c:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:10 2026 by rpki-client