Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ee3351dd-f58b-3959-8214-9155b4d8fb6e.roa
File:                     ee3351dd-f58b-3959-8214-9155b4d8fb6e.roa (raw, json)
Hash identifier:          E59wk1R1Gzcuwa168b30ZA4qlPkn0VaUL+rcvy0Pshs=
Subject key identifier:   98:83:C2:B4:36:70:F7:9D:26:0C:6C:3A:7C:0A:A6:4F:FC:5D:A7:E0
Certificate issuer:       /CN=4b36fa3e-06ec-405c-acf7-72589e9511d3
Certificate serial:       010D0C9F4328584D4D5A6C4345AA4DDCFD81FB00
Authority key identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ee3351dd-f58b-3959-8214-9155b4d8fb6e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     395734
IP address blocks:        149.112.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6c:43:45:aa:4d:dc:fd:81:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b36fa3e-06ec-405c-acf7-72589e9511d3
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=af6f3eed-26c9-4b87-993c-8d708a9eb87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:18:e1:70:b0:68:09:3b:c2:61:ab:68:34:
                    05:36:02:61:76:a1:fe:8f:ad:f9:ce:b2:a8:8b:3a:
                    7a:3d:fa:3e:03:b9:a6:b4:cc:3e:9a:f3:eb:b8:8e:
                    84:dd:06:4a:47:14:60:f1:e6:a6:0e:0a:37:bf:e4:
                    6c:be:ca:d3:dc:f5:dc:be:be:45:e2:cd:04:d5:2c:
                    de:df:c2:a0:af:5a:ed:9a:6c:fe:8c:2c:88:c6:8c:
                    0c:b6:c6:92:68:9c:f0:82:f0:81:32:fe:83:1c:2e:
                    4a:2a:06:6f:0b:bc:eb:1c:f8:68:55:da:22:a2:81:
                    db:0c:52:77:9b:a5:fe:fd:ec:99:c1:dc:74:14:0a:
                    ee:21:df:7f:c3:c4:80:52:e5:5d:04:f6:4c:e4:9f:
                    3c:82:4d:0a:60:8f:4e:70:6f:93:cd:93:99:e3:0c:
                    24:5d:c8:e7:6a:0f:58:97:77:13:67:bf:0f:a1:4a:
                    cd:e5:7b:b2:d9:6e:ae:e3:df:13:6d:cb:86:dd:18:
                    5f:a8:a1:a5:33:d8:4a:73:00:5e:b9:c9:3e:6c:6c:
                    d6:b4:d2:a7:73:ab:7f:59:df:d4:6e:54:f1:1e:69:
                    1d:d7:98:08:9a:d2:58:3f:fd:31:52:54:54:c5:27:
                    76:db:e2:29:6c:8f:83:7c:a3:cc:ea:fc:7a:d2:c3:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:C2:B4:36:70:F7:9D:26:0C:6C:3A:7C:0A:A6:4F:FC:5D:A7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ee3351dd-f58b-3959-8214-9155b4d8fb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.crl

            X509v3 Authority Key Identifier:
                keyid:98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:56:9c:64:56:32:32:3f:59:80:fc:2d:aa:db:69:24:46:45:
         e0:eb:e7:1d:05:4b:6d:3a:a1:73:da:cf:d9:f7:50:9c:bb:65:
         db:6e:be:1f:36:2f:84:59:33:84:e1:5f:ae:2d:77:0d:cc:93:
         87:84:39:b5:d7:7a:fb:83:e2:d6:d3:ca:d2:a0:17:08:02:3b:
         6e:e6:d8:4f:cd:2e:3b:6f:e4:7f:4b:d1:51:31:3c:99:0d:05:
         f8:0d:ae:f1:85:69:c8:8f:26:42:47:c8:3d:66:3c:04:22:f7:
         5b:c6:7b:9d:7c:3e:ed:85:a9:3b:71:ae:fc:7e:22:fd:a9:f6:
         23:b0:b8:96:74:18:26:0c:98:ca:6b:68:98:75:31:68:20:77:
         df:42:cf:29:36:c9:fa:5a:d3:b0:38:7e:db:61:b8:42:68:39:
         0a:2f:14:25:39:4d:f1:6d:c1:59:de:7e:aa:1f:b7:34:5a:0d:
         34:ac:b0:6d:a7:3e:db:ac:17:c0:d5:59:9a:22:d2:d6:69:11:
         b6:a2:66:c5:f9:eb:c5:44:16:a4:86:56:f2:19:d5:96:38:37:
         99:36:c6:c2:57:16:81:02:21:f5:f3:91:36:a7:fe:12:5f:46:
         d8:f5:c7:04:a9:8a:01:0d:dd:57:cd:2c:15:69:8e:7f:50:f6:
         c7:7b:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:57:53 2026 by rpki-client