Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa
File:                     7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa (raw, json)
Hash identifier:          3MmlGhQrLm8BfviD4B6WxsExrhQ7U2KSlxZHIwie2NA=
Subject key identifier:   0A:1C:90:13:09:0E:47:9C:56:79:A6:1F:C2:75:13:0E:0A:26:1E:3B
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F4328584D0BDD0640F8FA89026AA89400
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        165.1.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:06:40:f8:fa:89:02:6a:a8:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=75a5da67-abd4-4923-897e-46c9e4ba89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:9e:f7:e6:83:e6:7c:5c:5b:76:6e:3a:e8:
                    2e:66:8d:61:c1:38:dd:83:29:1b:ed:e6:31:8e:9f:
                    df:2c:40:b7:b1:f0:f6:f1:1c:ec:2c:ea:73:43:a1:
                    fc:d7:e7:16:16:bf:4e:fc:83:2d:c6:dc:29:40:d0:
                    85:d4:f5:92:c4:93:06:8b:79:72:46:27:a1:fe:57:
                    16:b4:a1:29:71:7e:6c:7f:dd:f5:a1:b1:86:22:d4:
                    40:6e:7f:90:af:6f:77:4d:69:d3:96:9a:71:4e:ae:
                    e8:8d:16:88:0a:d5:5c:4d:74:36:32:c0:bf:9b:8c:
                    b9:9f:82:83:ea:cc:eb:08:e5:78:4e:33:3b:9a:98:
                    d5:ee:81:4d:75:99:63:3b:89:93:f4:86:1b:98:82:
                    63:7b:74:58:f6:16:4a:2f:a8:1b:82:48:83:72:53:
                    3d:c0:3c:67:f4:36:41:c6:81:f9:3c:82:bd:9e:54:
                    e6:ba:ff:72:9d:86:43:4b:9c:8d:3d:25:13:ad:f6:
                    5d:68:a3:15:82:08:e5:88:da:e1:9b:1b:0f:9a:c2:
                    16:d2:10:ff:d0:67:ae:8c:62:cb:c9:96:81:18:fd:
                    b7:ef:04:22:1d:dd:02:8d:8a:78:d3:18:b2:a3:2f:
                    99:98:27:40:e8:35:9c:7a:c7:37:79:c7:d7:04:18:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1C:90:13:09:0E:47:9C:56:79:A6:1F:C2:75:13:0E:0A:26:1E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:7b:e1:c5:4a:d1:de:72:7c:46:54:5f:df:97:7e:46:31:
         ee:7e:9d:1c:ff:90:1c:e0:41:bb:16:d6:7e:ae:01:fc:71:ee:
         12:00:05:46:43:e5:0d:e4:e5:0c:da:f0:d8:66:26:00:a9:fb:
         3c:b3:3b:40:e6:fd:28:00:de:f6:91:c9:63:77:17:be:04:c9:
         36:b1:41:8e:e0:a4:a5:eb:1c:17:08:c6:a2:76:b4:22:c0:e7:
         7c:c7:7c:7e:6f:26:8a:43:11:b2:ee:4e:6d:3c:27:57:cd:b5:
         42:16:67:df:5d:28:62:95:f2:05:a2:0c:81:5f:db:38:5a:89:
         1d:74:b2:51:94:21:3c:8f:f3:ab:c5:4d:a8:e1:b5:eb:1b:90:
         39:f4:a0:db:cd:d2:b7:11:56:38:59:49:88:5b:e3:f6:f2:3b:
         4c:dd:58:be:e1:d2:c0:b2:93:c3:11:59:62:2f:63:41:1b:11:
         02:32:73:2c:1c:2d:f8:55:bb:d4:b4:cf:28:3e:e5:45:6c:e0:
         20:40:d0:29:f1:e8:b6:3f:a6:4f:4c:11:9e:f7:71:2b:2c:40:
         a9:5b:dc:ed:72:a5:60:22:c2:94:a3:8f:d2:83:ed:c3:46:62:
         4a:43:fe:5f:a1:cc:77:e7:07:f0:a6:18:93:15:21:82:44:cc:
         4c:ce:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:38:07 2026 by rpki-client