Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa
File:                     c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa (raw, json)
Hash identifier:          ETdRX/HLE0+rYgyUov9bR4eiJaGFaikYy0WriJ91A0k=
Subject key identifier:   98:2E:70:1F:63:1F:A8:80:BA:B1:18:3A:C1:31:C1:91:66:E6:61:13
Certificate issuer:       /CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
Certificate serial:       010D0C9F4328584D5234F3B4B6E09918922DFC80
Authority key identifier: AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa
Signing time:             Sat 28 Mar 2026 18:44:33 +0000
ROA not before:           Sat 28 Mar 2026 18:44:33 +0000
ROA not after:            Wed 13 May 2026 01:00:32 +0000
asID:                     400848
IP address blocks:        140.235.236.0/23 maxlen: 23
                          2602:f7e3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f3:b4:b6:e0:99:18:92:2d:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
        Validity
            Not Before: Mar 28 18:44:33 2026 GMT
            Not After : May 13 01:00:32 2026 GMT
        Subject: CN=53976c2f-1bb9-4b30-bc32-7b4ffaabb650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f7:43:19:34:cb:eb:a1:1d:8e:59:43:27:e2:
                    e0:bc:c2:36:c9:03:5d:f6:f7:9e:46:35:a7:f8:6c:
                    09:27:cb:6e:ef:b2:79:a2:85:50:98:cb:4d:05:ec:
                    f9:3b:42:43:4a:07:f2:f3:85:3c:ec:b6:8c:70:c8:
                    39:d7:5d:55:24:84:e5:19:2f:db:6c:61:ee:85:f1:
                    2d:a0:cd:ae:3e:fc:1c:9b:25:2e:e9:38:75:6c:f8:
                    0b:a9:34:60:7f:30:c2:25:36:49:b9:14:be:e9:51:
                    66:20:43:11:18:c7:6f:24:a9:75:33:6a:2c:84:92:
                    97:3e:3e:32:5c:a8:95:1e:63:01:82:2c:55:3b:57:
                    b4:24:6e:b7:82:4a:fd:84:80:a5:b7:de:16:0f:42:
                    01:e5:ab:6d:b6:58:4e:83:a0:66:10:f0:fa:e5:48:
                    ff:63:11:ec:f2:92:4d:e8:cc:70:05:2b:9a:e1:b4:
                    57:91:cd:19:60:82:cc:fa:1d:e8:9e:63:5b:b4:71:
                    74:e9:d4:8c:07:ef:4a:65:06:c2:d1:f5:2a:ef:9d:
                    77:33:83:4c:99:87:3e:7f:6d:c7:91:4f:11:df:c0:
                    15:65:e7:36:e8:f7:61:06:2d:09:5f:e6:7c:bd:e6:
                    83:cb:d0:99:58:e6:36:39:9e:ba:7c:c1:f7:91:b4:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2E:70:1F:63:1F:A8:80:BA:B1:18:3A:C1:31:C1:91:66:E6:61:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.236.0/23
                IPv6:
                  2602:f7e3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:ff:9d:bf:d1:4b:a4:25:f8:13:f0:cf:7a:c0:0a:30:40:
         cb:25:9a:34:db:9e:d2:81:d7:36:0c:60:30:b8:3d:8e:50:d7:
         d0:94:bb:61:e9:d0:ab:6a:f8:50:c8:24:79:01:26:35:6c:74:
         ba:c1:1d:37:e9:41:b1:ee:0a:5e:eb:14:34:b5:f2:04:76:cb:
         44:7f:04:ee:e5:0c:45:3c:ab:2e:a1:99:34:ee:d3:2d:a8:66:
         05:b5:41:00:3e:9c:d7:3a:02:b3:73:ca:cf:49:4e:56:cc:75:
         1c:de:d0:f7:29:89:b9:cc:80:f7:b4:02:09:ee:b0:e4:b2:bf:
         c8:52:03:4c:9c:55:00:fd:e6:e6:aa:bf:3b:a7:ae:b7:5d:01:
         4e:f2:bc:f5:72:ea:2b:06:ec:5b:26:7a:d5:4f:d1:11:ef:66:
         69:e7:d5:41:a6:a8:56:06:06:87:7b:59:96:ad:c2:56:e1:6f:
         8d:db:c9:10:ae:a8:92:2d:43:ae:66:7b:9d:18:75:f5:13:bf:
         32:77:19:dd:5f:68:f9:40:db:44:14:70:ad:c8:53:85:80:85:
         36:a0:d6:80:3c:83:9f:c8:6b:b7:66:0f:a4:bd:08:62:d8:f7:
         b7:69:9c:d3:aa:48:d0:c5:93:99:67:31:2a:8b:6a:f3:9f:73:
         6a:52:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:00:23 2026 by rpki-client