Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b35407c-0914-3b52-aa12-8dcb507da23c.roa
File:                     3b35407c-0914-3b52-aa12-8dcb507da23c.roa (raw, json)
Hash identifier:          G//Sz9am9IQuUih2DLLeCapLL6lzN46bDIdATAX9Nbo=
Subject key identifier:   40:B7:3F:81:87:BF:1B:31:D1:6C:B6:4C:9E:F0:27:CD:BE:29:D7:35
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F0F644C1ED5C812F4609437C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b35407c-0914-3b52-aa12-8dcb507da23c.roa
Signing time:             Fri 04 Sep 2026 05:54:40 +0000
ROA not before:           Fri 04 Sep 2026 05:54:40 +0000
ROA not after:            Thu 03 Dec 2026 06:54:40 +0000
asID:                     36014
IP address blocks:        216.132.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:64:4c:1e:d5:c8:12:f4:60:94:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  4 05:54:40 2026 GMT
            Not After : Dec  3 06:54:40 2026 GMT
        Subject: CN=75f6e578-3cfd-41e0-af9c-9506e3e72d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:1c:08:21:7d:6d:5e:40:6b:ec:5b:ea:4e:
                    18:dd:d0:a4:b1:44:16:59:4c:58:5e:c2:da:b3:c0:
                    3e:38:78:84:c5:0c:51:92:f2:69:64:a2:2d:9c:bc:
                    07:c7:7d:57:f6:fb:7d:dc:32:51:bd:35:9a:1f:bb:
                    ee:8f:31:2f:23:31:a0:4d:54:95:89:f4:5c:a6:43:
                    05:73:fb:bf:c7:fa:64:65:60:13:17:35:cf:fd:ec:
                    09:ba:54:a9:df:07:98:fb:37:c1:8e:53:0d:ed:d9:
                    e5:2d:3d:c6:f5:26:c1:93:6f:5c:af:4a:66:6c:f4:
                    17:e2:ff:3b:87:b9:e6:bf:92:9a:be:25:79:43:48:
                    2d:c1:c6:54:b8:fe:f1:b3:d2:3a:9a:68:7c:5a:97:
                    0b:1d:74:37:02:72:a5:5a:ff:1d:4a:74:38:aa:10:
                    e4:fd:b6:65:6a:73:dd:d0:d4:96:c6:24:20:28:81:
                    82:9e:43:56:c8:39:c4:e6:62:4c:cf:07:3b:cc:c3:
                    35:63:2e:19:eb:d6:15:ee:7c:17:73:ad:b2:85:b5:
                    3b:6c:52:4d:25:e4:b3:4b:55:82:83:f8:ae:cb:e5:
                    d6:60:47:ae:08:ab:3b:bd:db:81:43:16:2b:c1:9d:
                    be:5e:48:27:86:c5:60:2a:08:64:87:e5:66:53:5f:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:3F:81:87:BF:1B:31:D1:6C:B6:4C:9E:F0:27:CD:BE:29:D7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3b35407c-0914-3b52-aa12-8dcb507da23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:10:bb:cc:7b:7b:19:3a:39:d5:76:46:6f:fb:75:8d:d5:
         3b:90:19:b5:16:3a:e2:66:15:d8:81:63:21:bd:6d:98:1d:fc:
         f7:c2:a2:4f:76:2e:49:d9:34:37:86:b9:63:b6:41:cc:83:0a:
         1a:e7:64:0d:01:ec:4d:34:b1:94:46:c7:0a:16:f5:7b:78:f3:
         10:33:70:f4:43:2b:65:89:e2:c5:69:39:58:6c:ec:98:94:9f:
         cd:29:65:de:2d:72:c6:c8:d1:47:46:7e:09:ae:15:b1:fd:cf:
         71:0c:a6:5c:58:b2:1f:b2:cc:40:0e:cb:11:66:c6:f0:0d:39:
         c8:88:8d:5c:e7:0a:bf:32:1f:79:a8:e9:46:df:3f:45:b6:a8:
         2c:ad:ba:62:2b:f2:55:5e:a1:25:65:d1:51:f2:f6:5e:67:c6:
         ea:c9:f9:68:79:56:0c:44:35:68:5b:b6:8f:3a:ff:22:6e:c2:
         83:62:58:08:1a:2b:fd:d8:8e:ac:6d:f7:a3:49:dc:c3:9e:35:
         71:20:b2:ed:07:96:e1:dd:e6:73:39:2c:e1:9b:4a:27:97:9f:
         84:d1:67:d1:6f:7e:a3:b9:ce:34:8c:bb:b0:9f:ab:36:94:30:
         7f:aa:b7:92:66:49:72:96:4c:f7:07:9e:df:5b:ec:df:2f:31:
         25:b0:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 11:58:58 2026 by rpki-client