Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa
File:                     d38fbc1c-f507-303b-b2a2-33a124b143ca.roa (raw, json)
Hash identifier:          6PWuAjdRCREI8R9NJIAKdv4VWI7NvgHMG8P/8qwXC4s=
Subject key identifier:   29:48:DB:C0:F7:F6:99:D0:A9:57:D5:64:33:56:83:14:91:BE:03:A1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1F4A0961990CDFE362AF04C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     852
IP address blocks:        216.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:09:61:99:0c:df:e3:62:af:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=88ff1493-8709-47ee-bdc5-d0df358a22cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:82:80:e9:65:90:a0:39:db:41:5b:16:1a:
                    14:3e:83:60:55:52:5e:13:62:0d:18:f9:d9:83:c8:
                    e5:7d:61:4f:c0:a3:39:24:6e:d9:d7:27:d1:66:ad:
                    ad:16:04:3e:07:90:27:d9:d8:10:55:8c:c5:2a:0c:
                    a7:05:e6:25:54:5c:00:6a:1d:5a:9a:73:37:84:46:
                    3f:db:7a:fa:c7:d8:8e:d7:6e:fe:d6:93:c0:0d:e6:
                    05:08:d7:80:29:11:bd:40:6e:3e:38:56:89:5f:81:
                    89:34:48:4e:53:a8:d8:6b:db:aa:fd:ed:45:18:b5:
                    8e:b4:73:37:77:39:99:e3:9f:a8:2e:ee:cb:a0:05:
                    8b:a8:10:2b:c6:08:43:fd:5f:da:b6:39:9a:b0:4e:
                    17:19:9e:50:99:e1:c4:26:c0:0c:54:de:b1:2f:82:
                    62:ac:6f:55:2e:b3:77:39:b7:84:17:10:1d:63:fb:
                    a4:22:a2:2e:dd:aa:2f:05:c6:00:ba:7e:28:38:e4:
                    92:3e:5d:85:db:ed:8e:aa:21:5f:bc:e3:48:86:42:
                    f2:db:24:76:39:8e:71:14:bb:c4:fa:24:53:93:6c:
                    48:f9:0b:10:67:e9:de:d9:70:ef:e8:06:26:b5:ae:
                    6e:b6:9c:f7:58:6f:5b:08:ca:fc:e2:db:6d:0e:97:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:DB:C0:F7:F6:99:D0:A9:57:D5:64:33:56:83:14:91:BE:03:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:f4:d4:ca:9e:e3:73:3c:ee:b9:a1:28:5b:e2:7d:ff:84:
         1b:90:79:07:32:b8:41:43:e1:5d:31:a9:5f:ec:70:9e:e2:f7:
         97:75:02:1d:94:49:da:b8:9d:5f:df:10:30:7b:d8:f8:77:94:
         dc:7c:ff:34:ac:48:5f:a5:41:fa:6d:a7:0a:87:a1:85:a1:c4:
         a3:57:b8:d6:cc:1b:4d:37:2c:68:c1:96:c0:c3:f4:c3:70:d4:
         92:51:69:1b:ef:65:12:96:7f:08:0b:9a:14:2d:fd:9e:87:57:
         08:58:e6:04:13:0c:cd:d4:24:2f:ff:16:e0:f3:54:a2:c1:2f:
         c9:74:c5:02:82:f0:70:bc:76:0d:53:34:6c:4a:8a:99:79:27:
         6e:73:94:e4:e5:48:35:a0:ed:91:8a:39:1f:5e:5b:e3:fc:f3:
         a4:c3:83:72:f8:df:f5:dc:bd:fa:d3:b7:b8:56:38:f8:ea:9f:
         25:69:e4:6f:2a:1d:36:4b:80:50:27:8d:ed:d7:b8:38:cd:36:
         93:07:f9:dd:1f:04:1a:27:74:f2:85:a7:7b:4f:c2:01:54:e7:
         d4:87:12:58:b2:49:9e:57:68:0d:4c:fa:e7:3d:96:0e:4a:c2:
         49:bb:8d:4b:61:62:91:8a:08:bd:2e:48:c4:00:1f:2c:cb:21:
         79:49:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:48 2026 by rpki-client