Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa
File:                     9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa (raw, json)
Hash identifier:          xatECzgN5hsMGS4yAJfoq3ljBouedw+KAgxRv3xLm3g=
Subject key identifier:   A7:10:DE:FB:60:E4:42:A9:44:B3:78:73:B0:4C:9A:96:34:3F:F0:53
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D24E1007BC833670197970B60
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        172.110.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:00:7b:c8:33:67:01:97:97:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b2ed5224-fb47-4833-8c64-fa92a2dda137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:d1:24:d4:bb:50:29:ba:55:68:27:8a:83:
                    89:f2:91:4a:3e:81:fd:a1:ad:1c:0c:70:0e:7d:da:
                    3b:5e:67:1f:be:f0:6a:0d:95:d7:e3:2b:83:11:ec:
                    87:1e:a6:5b:a7:80:0d:e3:bb:e5:68:c6:69:d4:47:
                    3e:da:47:be:53:3e:08:3c:e0:8d:08:34:14:c3:9d:
                    06:a6:00:69:80:4f:8d:f5:34:4e:7b:42:58:99:03:
                    e8:b1:94:a3:fe:b7:c1:b0:1c:06:db:d8:09:bc:93:
                    f2:56:29:76:ef:a9:61:5b:f7:0f:83:0e:10:0f:34:
                    f7:f2:08:7b:60:2e:d4:9c:1d:b5:97:94:33:41:c1:
                    ce:70:1b:08:b9:c3:82:17:77:1a:7d:f5:46:36:42:
                    1c:01:21:79:7e:40:56:f0:d1:18:3c:af:20:a3:36:
                    36:ad:8a:49:57:6b:38:cb:0b:a5:1e:42:5b:72:bc:
                    af:46:44:ba:5e:16:50:17:9a:17:35:31:38:82:3e:
                    41:06:5f:3d:f5:b6:de:c0:86:71:da:ec:e0:c1:e2:
                    6a:8e:63:9c:3f:3e:25:a1:e4:12:92:47:77:55:f2:
                    d5:3c:67:ed:e7:19:6f:34:97:03:7a:ba:f0:ab:05:
                    e7:b0:a2:bf:e5:90:45:e1:fe:8a:22:e1:2a:27:7b:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:DE:FB:60:E4:42:A9:44:B3:78:73:B0:4C:9A:96:34:3F:F0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9a9050dd-bc10-31b1-8c2b-5309ec1147ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:9e:6d:51:6a:cc:fd:a1:85:cc:b4:cc:ef:f7:17:fb:d6:
         dc:3c:df:85:94:22:67:2d:2d:3a:1c:ab:76:41:e4:2c:72:88:
         ea:69:42:1d:81:b0:66:51:2b:a5:70:a5:81:42:31:94:55:91:
         53:ea:b2:24:2a:2e:3c:76:71:17:1d:8c:1c:ff:96:99:23:d6:
         a2:91:62:c5:8b:35:4a:7b:46:7f:e5:ab:9b:f7:65:a5:92:f0:
         31:ec:83:08:c9:3a:19:a6:3e:13:e5:0e:1d:b3:ab:86:f4:17:
         35:91:05:34:61:3a:ed:88:ed:96:22:07:2f:c9:6c:8d:10:a3:
         13:4d:a2:03:26:46:55:a3:6c:f9:50:dc:25:74:60:6f:bd:f8:
         79:0b:94:09:86:fc:eb:b4:b9:8a:19:42:1a:3a:ba:0c:a2:fe:
         61:1b:85:99:55:78:98:df:50:01:c9:0d:0f:68:8a:f0:81:29:
         b6:04:1d:76:ae:47:5d:d5:97:dd:e9:8f:72:fd:55:fd:79:1c:
         36:2c:66:74:a5:ce:fa:68:10:e3:05:32:d5:31:58:a4:7f:57:
         59:04:df:d2:7f:91:76:65:fa:6d:c4:45:21:3b:b3:a8:a1:1d:
         21:02:c6:ce:bd:89:1c:c1:72:8f:40:61:42:48:28:52:fc:75:
         1e:f6:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:34:54 2026 by rpki-client