Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/49149dae-cdcb-35a5-a22a-faaf0b7cf119.roa
File:                     49149dae-cdcb-35a5-a22a-faaf0b7cf119.roa (raw, json)
Hash identifier:          UhxmIQhTrklKsBsk895dpXpEC/hiq6rQDK3yBG7BBJQ=
Subject key identifier:   8B:AC:DF:F7:E9:E5:26:AB:43:8B:1C:63:EE:5A:74:D7:83:01:13:7A
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584D386A390F7768C25D528E3C80
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/49149dae-cdcb-35a5-a22a-faaf0b7cf119.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        170.205.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:39:0f:77:68:c2:5d:52:8e:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=29f316b4-d664-4ad7-b2b9-1ec298dee0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:fc:00:6a:ae:c5:a2:fb:47:cd:85:64:2a:
                    ee:85:0c:a5:fc:bf:bc:58:48:61:21:e5:37:48:d4:
                    3c:52:e9:20:69:e4:ea:20:50:73:8e:31:d3:70:c4:
                    1d:3c:61:87:72:9b:62:dd:27:c4:bd:39:0a:03:12:
                    b3:b8:a2:34:0d:1d:f1:cd:56:81:ff:de:10:a5:ff:
                    63:bf:1b:27:e0:e1:65:79:5c:b9:69:d7:09:a8:55:
                    2b:55:e2:99:06:c8:8e:fd:2e:57:33:81:1d:38:ab:
                    b8:ce:7a:d3:7f:c5:ee:11:aa:4f:5c:86:9a:49:70:
                    27:70:22:b1:4f:36:8b:cf:b8:37:26:a3:0e:e3:58:
                    e2:7c:be:eb:81:40:55:8a:5f:32:a4:92:3c:a7:85:
                    00:f1:32:f9:8e:9c:00:62:38:6e:b3:31:2d:64:11:
                    90:5d:a7:f4:a9:3e:e0:b5:0b:93:ba:1c:a1:c5:2d:
                    7a:bc:5e:32:37:7e:4c:70:ca:78:69:09:8d:0c:2b:
                    c0:ed:cc:f5:dc:58:5a:94:db:91:99:4e:68:1c:87:
                    f7:a7:a9:b0:13:7e:ef:92:ac:05:01:c7:c8:be:dc:
                    c7:f3:73:6d:bc:6c:a1:fc:8e:fb:44:a1:2f:99:df:
                    a7:2e:91:89:df:45:d7:ee:5a:1d:f7:2c:57:ec:65:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AC:DF:F7:E9:E5:26:AB:43:8B:1C:63:EE:5A:74:D7:83:01:13:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/49149dae-cdcb-35a5-a22a-faaf0b7cf119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:12:36:42:7a:24:f8:25:f4:60:d5:ca:2b:79:10:45:3b:
         e1:73:d0:77:14:c4:9c:c3:be:9f:c5:9b:1c:6f:21:af:fc:2c:
         a9:d1:fb:77:a6:33:08:9a:9a:da:bc:d3:e1:b9:66:0f:f5:dc:
         69:cb:c7:96:75:80:3a:2b:15:9f:de:64:c5:17:0c:24:78:0a:
         cc:b1:90:14:bd:97:24:f9:91:7e:1f:9e:6f:32:37:52:3d:2e:
         d0:96:68:9a:95:aa:e9:fd:f2:f3:00:53:ae:58:fa:1c:1a:8f:
         6f:6c:57:c8:67:15:8a:a9:bd:08:e7:dc:c2:0f:97:bc:8d:77:
         98:cd:3f:a0:1b:fd:77:8c:0f:53:61:b9:62:bb:a1:b6:e8:ae:
         9c:d8:cf:b2:52:12:bb:58:f7:d2:11:9d:82:0a:72:ed:ea:29:
         e9:c5:4f:f0:3e:27:07:44:20:cb:fb:f3:88:c5:26:91:56:30:
         4d:5a:4f:45:83:ca:d3:2d:e9:42:13:ca:15:ae:31:2e:7c:32:
         6c:3b:22:06:f5:8a:50:a3:04:f0:d7:14:f6:f3:3b:34:a5:ef:
         27:88:d7:97:51:be:fc:bf:57:5e:de:4d:f5:cb:28:c7:f4:a2:
         82:b7:a7:8a:10:48:eb:79:49:39:82:f4:cb:91:7e:f9:03:38:
         85:65:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 18:19:51 2026 by rpki-client