Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f4e308cf-74ce-3425-9421-a98e5b84bc59.roa
File:                     f4e308cf-74ce-3425-9421-a98e5b84bc59.roa (raw, json)
Hash identifier:          eQGzp2X3/b0hyVS8W9/AtqLlGvothSnpJraYMe3+f0o=
Subject key identifier:   4D:37:AC:B9:E0:27:22:15:48:CB:32:26:12:87:00:DA:15:68:46:E5
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584D15A266E4911CB65AB4FD0D00
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f4e308cf-74ce-3425-9421-a98e5b84bc59.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     198949
IP address blocks:        173.36.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:66:e4:91:1c:b6:5a:b4:fd:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=511ef432-0fd8-414b-a212-320326fd7fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:cd:95:11:81:ae:f4:51:40:d2:ca:3d:e6:
                    42:90:7f:16:a9:c5:14:6f:3e:04:03:26:34:be:3d:
                    c7:63:4d:c1:98:11:7e:02:6b:22:a5:4c:8e:9e:23:
                    9f:2a:e1:06:7e:8f:f5:79:50:3e:4a:55:d9:df:a3:
                    0f:48:c7:7a:b7:4b:a0:2a:08:64:47:d5:1e:53:00:
                    ab:66:5e:75:8a:a4:2e:56:b6:ad:f3:47:81:10:fa:
                    e5:b9:49:5b:48:0d:8a:41:21:1e:61:46:00:0e:6f:
                    e1:f3:df:8c:ba:15:6a:c9:29:1f:f8:ed:85:14:aa:
                    67:85:87:b5:08:78:c0:64:66:bc:c8:9a:f0:fe:a4:
                    41:9c:49:08:38:27:5c:5e:ad:dd:5b:57:44:6b:2a:
                    89:87:48:db:b1:3b:1a:64:e9:f3:a1:dc:13:59:0f:
                    c0:5c:78:b9:79:2f:ff:d9:9c:94:1c:8a:c0:39:7d:
                    a3:dc:ac:7c:0d:0d:3a:c6:c4:43:a1:7a:00:b0:4a:
                    59:88:09:50:1d:b3:28:a4:a6:11:03:78:0a:34:fa:
                    32:e8:cf:ec:72:09:89:75:33:cb:47:c1:66:36:d9:
                    8f:5f:72:80:af:ba:a3:5c:cd:74:69:e2:98:d4:21:
                    79:7c:fd:86:e1:63:c6:5f:ff:be:63:aa:2f:72:2f:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:AC:B9:E0:27:22:15:48:CB:32:26:12:87:00:DA:15:68:46:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f4e308cf-74ce-3425-9421-a98e5b84bc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:2b:4d:7a:c5:1a:a3:0a:dc:63:c1:0d:a7:84:1c:31:a9:
         00:08:cf:e1:86:16:70:75:cd:22:44:3a:cb:17:34:0b:49:04:
         66:8d:54:38:dd:76:9d:c7:35:2e:9c:2a:ac:ef:7f:7a:d2:e8:
         fa:31:6a:38:5e:80:02:fb:96:46:db:29:b4:1e:e9:e9:74:5f:
         e5:3c:d9:48:2b:0d:72:48:37:43:92:69:e7:f1:71:41:34:51:
         1b:09:88:ac:2a:d9:47:b6:69:ba:1c:7b:41:57:a2:e9:fa:21:
         96:00:d3:e4:8d:c2:4c:5d:1c:87:85:e6:d2:df:55:88:48:ee:
         ef:88:d7:d5:fc:f9:05:4c:d1:3a:a6:68:58:07:88:98:2c:09:
         2e:5c:31:61:41:c4:d3:35:1a:10:ad:d5:d2:98:e9:d2:d8:2f:
         39:ed:7c:d9:87:fb:10:2c:b9:3a:10:c0:c7:00:d7:ee:02:4c:
         5e:b8:10:08:16:3c:d0:62:77:20:5d:f2:b1:b8:4b:8c:cb:95:
         e1:3b:ea:12:8c:ae:d4:1b:9f:cc:93:e1:a4:be:46:c1:7b:01:
         f5:7b:c4:bd:f6:9f:aa:6f:e7:01:61:07:78:64:97:5f:5b:72:
         55:d8:5b:da:77:6d:ce:70:44:72:ca:53:65:cf:63:c0:60:87:
         c8:66:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:41:17 2026 by rpki-client