Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa
File:                     d79224a4-7b5d-35e9-8833-a5152ff6818c.roa (raw, json)
Hash identifier:          y2T7offqF+qCerhUNwacWzB5MvHyckDm7Na2YlMbxAM=
Subject key identifier:   9E:EA:BD:69:02:EF:12:76:44:57:E3:F7:13:AA:F3:6E:15:1D:38:29
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584CBDB1ED1BDA9F585C4853A000
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     23294
IP address blocks:        76.165.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ed:1b:da:9f:58:5c:48:53:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=cf9af213-eb7f-41c0-85b0-c65b59bcccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f7:5e:a9:58:d2:8a:75:c6:8d:2c:a4:3c:2a:
                    9d:69:a4:be:23:6d:f3:e8:cc:04:c6:27:e7:13:72:
                    a8:b5:bf:86:25:56:7b:88:57:24:83:2e:ad:0e:da:
                    14:d8:6b:12:43:9f:44:97:6d:87:28:03:78:32:83:
                    66:a0:86:85:6a:68:a6:63:6c:2a:95:0c:df:5e:cd:
                    ab:ca:50:3d:02:9f:95:a1:c6:64:1f:db:59:65:40:
                    02:b1:31:d9:58:70:11:89:37:c0:0e:e0:0d:fe:fe:
                    aa:40:a1:d3:3c:66:2f:94:44:f4:c7:3f:e6:df:6c:
                    2e:f1:b2:33:b1:84:d1:e4:a2:84:11:a3:23:df:e1:
                    a6:54:f5:fd:2a:fc:1c:21:b6:47:a4:f5:2b:e1:a4:
                    f4:1a:05:37:3d:5d:e8:99:e0:fd:0a:9d:b9:53:b6:
                    f8:0d:8c:4e:d8:14:e7:dd:e3:e7:5f:7f:d6:29:ad:
                    bb:c2:92:81:59:fe:bf:4d:1b:6c:60:09:06:f9:fd:
                    54:f1:80:a6:c2:b6:ad:f2:36:b1:77:25:66:0c:43:
                    aa:ac:b0:7d:d2:12:8a:f9:68:68:4e:01:15:73:bd:
                    c9:15:5a:0b:9c:c5:c3:c3:55:44:34:19:d8:21:fd:
                    f4:5c:ce:1e:cb:c5:47:99:e0:19:f8:de:af:70:4d:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:BD:69:02:EF:12:76:44:57:E3:F7:13:AA:F3:6E:15:1D:38:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:38:dc:1f:2c:41:98:96:7c:26:fb:27:8e:9e:98:fe:55:f3:
         26:af:dc:86:d6:4f:90:63:4e:bb:e3:d7:82:fd:10:45:0f:13:
         75:08:6b:2e:dc:4e:3a:ad:02:fb:f8:75:94:0d:59:45:39:f8:
         c5:db:e1:3d:70:b2:a5:c9:48:f0:7a:c1:a4:a2:96:34:13:87:
         2e:18:14:dc:43:01:f2:3e:91:09:9e:a1:5e:60:c7:eb:f6:82:
         48:3b:e2:4b:44:7f:9d:09:1a:58:e4:aa:eb:b0:f5:dd:5d:57:
         8b:34:68:36:3e:39:ff:9f:2c:57:33:04:9f:1f:89:12:74:75:
         65:56:b3:91:e6:0e:f5:3f:da:7a:e5:bd:3c:3b:ba:e2:99:26:
         fe:85:87:cd:64:73:7b:b2:13:6b:da:07:c0:5d:08:85:19:6a:
         da:cc:4b:ba:23:5a:bb:66:c9:25:a3:89:b5:97:15:e2:78:9e:
         ec:a8:dc:a7:ac:02:ae:a3:26:39:04:e7:40:5b:a1:d5:67:ff:
         1a:0b:a1:61:21:f1:2b:d5:f4:6d:50:fd:4e:db:1e:24:f7:24:
         b2:55:82:d0:8d:ee:6b:df:9e:43:ae:1e:fb:4d:10:a5:26:c8:
         d6:e4:3a:87:ae:97:32:03:cd:4a:54:c3:2f:bd:d3:04:27:2b:
         66:d6:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 05:42:08 2026 by rpki-client