Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa
File:                     14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json)
Hash identifier:          PifPLGBbsdy5jepMv2ytTxyJ2z3ba8HbKm4/Cz7gcF4=
Subject key identifier:   BB:97:26:2D:25:C9:73:82:87:B2:0E:5F:A5:63:1D:78:4E:BF:50:95
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D19B4D5762EBF337516B81380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     54004
IP address blocks:        68.182.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d5:76:2e:bf:33:75:16:b8:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=5cdd8178-10ab-4c64-a197-79f456c66ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:dc:b1:fd:55:0d:30:c7:b8:90:e4:72:93:
                    1e:3e:bb:1d:09:fd:03:9e:b7:30:02:c9:5e:a7:28:
                    17:71:95:c1:ed:b7:73:5b:b3:c2:0f:ce:7f:b7:9b:
                    cb:87:4f:c4:5b:fd:5a:a8:30:3a:32:1e:db:75:e2:
                    1f:a3:3f:69:74:13:bd:85:da:bd:ef:1c:b7:b6:a7:
                    ab:be:2a:e3:b2:53:9e:7c:e1:36:72:54:75:54:3c:
                    18:4d:4a:e7:4a:ee:e1:12:4c:4e:ac:e5:e0:91:48:
                    38:9c:a0:38:aa:4c:80:43:9f:9e:7d:2a:f4:2b:c0:
                    84:fb:20:63:45:60:d3:56:98:74:49:f1:00:49:7c:
                    4c:0a:49:48:36:84:9b:e1:c6:01:b2:5a:63:cd:6c:
                    86:fb:8f:b1:c2:59:76:86:7c:bf:93:50:db:5a:b2:
                    6f:c9:3d:e0:e3:63:d2:4d:53:e0:28:83:75:ca:78:
                    ca:07:ff:f5:4b:a6:e2:8e:d3:ee:0a:93:61:c2:de:
                    0b:29:3e:3a:1c:4b:e1:4c:03:e4:64:9a:19:c9:28:
                    86:07:b2:bb:52:98:ae:3a:ca:0e:22:e3:54:b3:aa:
                    ef:34:7f:6e:bb:0b:ab:bf:a2:a8:82:0b:41:f7:a2:
                    b2:37:c3:c7:a1:73:7b:6d:64:95:e8:e7:f4:04:37:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:26:2D:25:C9:73:82:87:B2:0E:5F:A5:63:1D:78:4E:BF:50:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:d6:c0:fb:4c:fc:e0:2e:21:1d:d8:5e:4e:7f:5a:8a:2a:
         07:e0:13:40:b2:ef:26:57:8f:2d:76:d7:c5:4d:f1:a0:de:ee:
         ff:ee:6d:5b:89:6b:51:ab:65:03:22:e1:f7:d1:51:b7:ef:32:
         60:39:0c:db:a7:67:b3:77:04:04:c7:d0:0a:d8:31:b9:7e:19:
         2c:5d:e6:51:24:a0:73:51:92:5d:76:be:b7:2e:1d:01:65:10:
         08:9e:cc:3d:07:e5:95:54:31:06:29:00:4a:e4:e6:cc:be:2f:
         b4:ac:8e:8e:d6:17:ba:2a:c3:60:96:e7:f9:15:75:42:25:91:
         15:20:9d:cc:63:11:16:9a:b7:31:21:22:6b:50:5a:0d:72:e0:
         5a:00:93:5a:18:ee:9a:6b:0f:da:73:b5:36:7d:80:47:46:82:
         ed:85:27:04:69:3c:24:22:78:19:38:df:1c:1a:e9:f1:6c:46:
         c8:25:8f:65:84:b4:d2:05:c9:25:90:b5:6d:8b:79:fe:f8:5d:
         86:a2:0d:cf:e1:08:c0:56:1d:a2:7a:86:05:c4:e2:db:f2:fb:
         bd:ab:fd:b7:27:24:98:9e:c4:6a:3f:36:24:1f:d9:67:b4:0d:
         e0:17:f0:af:5c:cd:49:1e:ac:be:6a:6b:ac:ad:b5:0e:e6:31:
         8f:e2:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:27 2026 by rpki-client