Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fccaf17-97cd-3e6e-a744-b44ed5670677.roa
File:                     3fccaf17-97cd-3e6e-a744-b44ed5670677.roa (raw, json)
Hash identifier:          /lbgAxAc2PuDcyeMycj2t7a43iKW13/rkXl6aAOqyMw=
Subject key identifier:   8A:23:6D:67:78:95:CB:64:9C:67:1D:9A:F0:C2:2F:7C:6F:6D:F6:DF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CA6A531C6AAF8576C83458880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fccaf17-97cd-3e6e-a744-b44ed5670677.roa
Signing time:             Mon 26 Jan 2026 07:51:40 +0000
ROA not before:           Mon 26 Jan 2026 07:51:40 +0000
ROA not after:            Sun 26 Apr 2026 06:51:40 +0000
asID:                     2914
IP address blocks:        64.32.180.0/22 maxlen: 24
                          64.32.184.0/22 maxlen: 24
                          155.229.4.0/22 maxlen: 24
                          206.135.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a6:a5:31:c6:aa:f8:57:6c:83:45:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jan 26 07:51:40 2026 GMT
            Not After : Apr 26 06:51:40 2026 GMT
        Subject: CN=bf498b2d-a3e2-41bf-a70a-32154c491338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:cf:d5:60:91:51:14:f3:56:a6:6f:11:ef:
                    ee:e8:d6:20:47:f9:9c:3d:50:e8:be:28:97:4b:07:
                    f5:10:4c:b8:c4:8e:bc:98:28:f2:7e:23:1d:e2:f7:
                    38:b4:6e:69:a4:2b:eb:6c:9f:26:02:5b:0a:8e:06:
                    ab:c7:b3:3c:0a:bc:28:64:2e:09:3f:09:85:96:71:
                    c6:36:4d:d8:ff:e1:30:f4:29:70:0a:f5:ff:32:c7:
                    0b:84:da:70:6d:9a:a8:01:0c:40:0e:47:d5:31:7e:
                    2c:78:76:73:6a:90:9a:49:0e:bf:00:af:00:1d:02:
                    20:c7:05:c1:24:08:c2:2a:3b:77:33:1c:2c:be:b4:
                    bf:fd:ac:11:fb:76:e4:c8:20:02:ef:47:15:c6:d1:
                    e1:69:86:38:f7:63:77:52:13:1b:9a:dd:f7:a3:fd:
                    8a:d1:8d:5b:21:88:6c:a8:83:96:57:71:b6:fa:75:
                    47:50:5e:a7:c1:ab:84:5d:30:10:45:11:17:9f:b6:
                    57:ff:51:53:dc:3f:9d:d0:13:bd:61:a9:0e:0c:00:
                    6a:0a:1a:83:48:4c:f3:6e:6e:38:62:da:08:5d:8e:
                    29:69:b8:06:e9:df:3d:aa:a0:01:e8:c2:6a:ad:5e:
                    2d:4f:98:56:2a:04:95:2b:89:30:75:af:21:ea:97:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:6D:67:78:95:CB:64:9C:67:1D:9A:F0:C2:2F:7C:6F:6D:F6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fccaf17-97cd-3e6e-a744-b44ed5670677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.180.0-64.32.187.255
                  155.229.4.0/22
                  206.135.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:b7:2f:ed:17:a1:4d:d3:68:6d:1d:0b:11:ce:ae:96:d0:
         ca:ef:bb:36:47:7d:28:18:02:29:d7:d9:f0:02:96:2b:f7:3c:
         e5:e0:1d:f6:40:da:ee:fa:4a:c3:5f:71:9f:83:92:4f:c4:76:
         9e:32:6f:2a:47:a2:dd:ca:85:ff:3a:4b:04:46:95:a6:5f:b4:
         7d:47:c7:2d:66:43:98:99:f5:7a:9b:2f:97:af:0b:e8:59:b1:
         c6:ac:ce:f6:37:5b:2b:a5:0f:f8:c9:38:1a:1c:84:34:98:bd:
         98:29:f2:56:43:df:0e:df:cf:48:47:0b:7c:7d:d4:61:91:a3:
         32:93:51:13:ff:36:21:3c:c4:53:03:4e:f4:d8:e4:0d:d8:2c:
         b8:47:9e:45:24:55:49:2c:54:fe:27:d7:f8:27:32:8b:a4:36:
         45:c7:31:4f:9f:23:4e:fc:c0:27:da:fd:86:f6:20:05:1e:19:
         42:44:2b:5a:43:47:57:7d:9e:db:6e:5d:62:ba:91:4f:82:cd:
         a9:78:0b:0e:01:4d:8f:a4:37:aa:71:d1:5d:f9:e0:f0:9f:b1:
         cc:31:37:a6:c5:2d:60:86:8f:c7:86:57:34:82:e4:b8:8e:5d:
         f6:e2:16:6d:3f:a6:57:de:53:d1:80:5c:01:62:c1:22:bd:10:
         a5:a9:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:02 2026 by rpki-client