Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
File:                     041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa (raw, json)
Hash identifier:          n2rq+CotkvSeMDXPOdK/A7W4v7oi2iEcZFb0I08qTVk=
Subject key identifier:   E8:AE:25:A5:B9:60:F7:0C:38:7B:A7:5E:09:11:DF:94:C1:F2:46:B7
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D4D5A5EBBCEEED8BF0C943F80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        192.184.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5e:bb:ce:ee:d8:bf:0c:94:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=32710660-2bcf-4763-a5ed-80ee301e0bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:0a:41:b8:ab:f9:05:4f:e3:7e:15:7d:b0:
                    8b:76:f1:37:f5:2a:5b:e1:cc:73:1c:32:c1:1b:b5:
                    1b:f3:85:f5:9a:83:de:5a:d1:9a:37:76:bb:48:cb:
                    d0:db:1d:00:be:87:6f:7b:30:9c:01:21:4e:e0:2a:
                    8a:ae:37:31:29:f8:0f:16:e8:98:9e:9f:58:c0:37:
                    24:33:53:6c:dc:39:c7:7e:67:15:e2:2a:34:be:dd:
                    18:3c:9b:aa:a9:ba:75:54:12:08:54:16:57:b5:47:
                    e8:0e:19:e6:d6:3c:30:92:ec:3f:d0:0a:b9:4d:e6:
                    42:26:a8:f5:61:73:16:9d:cb:ac:6a:43:fe:d9:72:
                    90:a4:b7:b7:d6:06:6f:ce:cb:d1:2c:76:3d:a4:79:
                    23:d6:9b:83:02:32:9e:48:8f:b9:83:13:99:db:a7:
                    7a:02:e0:aa:c7:ac:59:52:63:41:eb:fd:7a:10:64:
                    6c:47:f6:dc:c1:8d:f7:6b:cd:00:0f:03:01:74:10:
                    4f:cf:17:2a:50:a5:d7:26:1e:b7:91:ee:e6:56:91:
                    7c:48:6f:65:2f:1c:38:b0:98:51:7d:fc:8f:02:44:
                    46:7b:00:e8:f4:d3:71:7f:7a:83:b0:f6:e2:a1:37:
                    36:3d:46:13:dd:c5:2d:8b:9a:a4:54:5c:7b:ed:8d:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:25:A5:B9:60:F7:0C:38:7B:A7:5E:09:11:DF:94:C1:F2:46:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:6e:42:6c:cb:33:15:69:57:dc:4d:b0:b1:a8:9f:2d:88:
         0e:a1:24:94:6b:e7:3e:33:2a:3a:40:02:46:69:6e:c9:ab:42:
         5d:c2:0e:cd:b5:c2:2b:37:a7:5f:7d:33:d9:ce:9c:a4:c4:18:
         b5:7c:f7:47:25:7e:b5:11:70:62:e0:8c:44:78:9b:8a:2c:b7:
         2e:10:8b:65:f6:af:d5:5a:21:d9:9e:2b:7e:6f:b4:10:6d:f7:
         3c:2a:fc:8d:9b:58:8b:10:b5:74:d3:33:cd:31:f6:cc:fe:0f:
         ce:2a:37:9e:c8:b0:7b:0e:df:b2:b5:5d:ea:fe:c8:ad:3a:63:
         51:88:57:8e:48:77:70:71:36:b1:a7:b3:10:9d:e8:65:af:70:
         da:d9:cf:98:4a:2c:91:d6:dc:2f:68:74:56:1d:f3:08:b4:58:
         46:45:d3:ea:25:17:ca:90:41:4a:70:64:3e:36:9d:7d:e3:fb:
         58:c0:bf:db:19:15:66:dd:e3:4b:eb:ee:a3:42:a1:06:40:e9:
         6d:ea:dc:c5:50:ca:90:af:3e:74:43:84:20:7b:d5:37:c6:d7:
         b5:2e:e0:72:3a:ba:88:4e:a8:d8:e5:2d:47:f0:ee:a4:2c:fa:
         7c:cf:2e:c9:23:5a:32:f5:3f:05:95:67:93:99:35:c3:3c:1c:
         f6:c8:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:31:25 2026 by rpki-client