Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
File:                     0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa (raw, json)
Hash identifier:          ewaS31WRgm9yT+vYqA26jGKHaT2+dGnwIm0PPcYfVHg=
Subject key identifier:   6A:CC:16:6B:ED:FA:A7:AD:B3:76:5D:2F:F4:E2:72:07:DE:22:CC:55
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D2BDA0E44FCCF362094DE25C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     26337
IP address blocks:        50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          108.179.192.0/18 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0e:44:fc:cf:36:20:94:de:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=a8588d0c-48dc-4d31-9b03-c47e007bda26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:79:1e:cf:16:7f:dc:dc:20:e9:3f:bd:cb:
                    3a:f1:5a:15:a9:5e:40:66:bb:2c:19:ec:30:b3:f9:
                    1a:ee:55:90:89:6a:b3:1b:02:ca:ba:cf:70:3a:d2:
                    aa:5f:88:87:5f:1a:26:81:5f:38:f0:eb:f6:2c:72:
                    84:02:ae:fa:98:a4:07:28:6c:1e:40:b3:10:74:f7:
                    38:77:32:03:f1:19:e1:b2:64:af:25:ba:14:b7:5b:
                    ed:a6:04:a0:f2:dc:33:45:4a:80:bb:81:cb:ad:15:
                    d5:c8:61:a5:e4:7e:b7:55:71:c5:d6:85:93:1d:43:
                    68:91:64:ef:f0:da:78:e4:df:a1:79:86:86:5f:66:
                    3c:e8:d6:b7:27:c4:12:da:33:89:02:a8:d5:66:af:
                    6e:73:a4:b1:83:88:f8:e1:1c:67:fa:00:b2:f2:31:
                    de:c9:21:0e:9e:45:39:d3:a3:fc:2d:05:b3:c5:68:
                    66:14:c7:89:6c:bf:46:09:4e:58:8d:53:d7:c8:73:
                    d8:69:b3:7f:00:d1:73:72:93:f1:2d:10:88:c8:42:
                    fe:89:cf:75:eb:f9:25:41:60:6a:a1:73:a7:95:e7:
                    d1:a6:81:5e:c8:58:2e:c5:30:67:b4:12:a7:3d:f7:
                    64:eb:81:c5:ef:f5:fd:ee:4a:04:27:48:99:02:a1:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:16:6B:ED:FA:A7:AD:B3:76:5D:2F:F4:E2:72:07:DE:22:CC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:0e:1b:d2:14:de:cb:c2:db:74:d5:ba:84:e8:92:b9:fd:
         69:49:cf:cb:9d:16:47:cd:30:ad:f2:ec:85:6c:eb:20:f7:9f:
         b2:55:a8:d7:d9:44:3f:50:16:73:45:0b:1c:5a:60:eb:5b:c2:
         37:4d:2f:9c:80:d7:8e:96:ec:01:57:1f:88:53:74:fd:32:aa:
         da:02:0c:9c:e9:cd:ed:43:ff:c7:80:7d:7d:d1:be:24:f6:00:
         b2:36:54:7a:b1:96:7c:31:d8:f8:2f:83:f1:6c:09:6c:93:3c:
         e6:32:1c:34:48:51:a7:40:06:80:f4:2a:58:39:01:c9:38:25:
         b2:90:25:a5:80:81:36:b5:01:ec:77:fa:a0:36:7f:5e:d8:9f:
         db:79:db:a1:91:4c:c1:a4:38:67:4f:f4:96:3d:5b:3b:33:9f:
         45:09:cf:5f:92:f9:c2:01:8a:f9:2d:ef:13:53:cb:1f:4d:2d:
         e8:b6:1d:5b:2a:df:e4:51:c6:17:8f:c1:73:7d:f3:a3:ca:ec:
         83:06:80:6d:cb:49:77:8a:14:09:37:6d:c6:25:4b:36:a6:aa:
         89:76:2d:aa:fd:27:cc:96:80:fe:15:6a:59:a4:60:92:db:e1:
         7b:cf:f1:14:39:4c:87:16:cd:43:30:cc:c1:31:73:78:10:62:
         55:ef:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:17:31 2026 by rpki-client