Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa
File:                     fac55724-4609-39ef-add8-885a6bda0a0c.roa (raw, json)
Hash identifier:          qQfVbNMBiHmQkwzd1HiVnkM9EaruRDNSVcwwmSQJXLY=
Subject key identifier:   C2:EA:AB:CD:D2:3B:01:77:C7:7F:7F:1C:EE:1B:CA:9F:01:ED:B0:A3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D3316A784FA7ACC75909A0F00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa
Signing time:             Tue 17 Mar 2026 15:13:27 +0000
ROA not before:           Tue 17 Mar 2026 15:13:27 +0000
ROA not after:            Mon 15 Jun 2026 15:13:27 +0000
asID:                     16509
IP address blocks:        134.224.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:16:a7:84:fa:7a:cc:75:90:9a:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 17 15:13:27 2026 GMT
            Not After : Jun 15 15:13:27 2026 GMT
        Subject: CN=3e36a7a5-8500-4c5d-987a-16d88181dcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:19:b9:98:24:8e:d2:d8:41:31:af:c2:12:
                    88:4d:72:e6:94:7c:9d:1a:50:fb:99:72:24:b5:49:
                    0c:e7:0a:a6:ea:f4:88:69:eb:b4:8b:1b:42:13:e4:
                    38:b9:11:52:36:96:3b:19:b7:fb:b9:31:bb:d6:f2:
                    a3:e9:e8:73:b4:cd:a4:3e:fd:2d:bb:b6:ad:b1:a1:
                    21:d0:fd:fc:f1:89:a3:ea:45:07:49:3d:97:76:36:
                    f5:47:e0:f2:93:3f:ee:ad:7c:a8:de:b7:09:de:c7:
                    08:4e:ce:c5:c1:3f:b9:69:e2:69:df:f8:d9:bd:a8:
                    c8:af:cd:73:87:40:ab:f8:f8:79:e5:ea:b1:5e:b9:
                    36:7a:f6:bd:ea:9a:71:11:ed:be:c7:b6:d8:5c:d2:
                    a1:e0:9a:9f:b2:2b:88:a5:de:ed:20:6f:bf:71:1b:
                    f1:f6:77:db:6f:db:5f:ec:0e:e7:98:a1:ab:8a:eb:
                    83:78:e8:d2:c7:ca:66:bb:95:2f:82:9a:23:17:a2:
                    e9:c2:c5:fc:6f:51:d2:6c:0a:11:98:60:42:9f:81:
                    cb:48:2e:0a:1e:61:2d:c2:dc:b7:3d:67:e1:cd:6b:
                    57:36:b1:36:a9:16:5f:d9:b4:4e:ac:29:ac:8c:64:
                    de:d4:1c:ec:5b:f3:b0:6d:b6:2c:1a:0a:f1:ab:c1:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:AB:CD:D2:3B:01:77:C7:7F:7F:1C:EE:1B:CA:9F:01:ED:B0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:7e:1c:58:47:f9:1a:03:0f:58:b9:5d:20:c8:ba:ab:35:
         23:8c:e9:96:87:92:3d:28:14:c8:68:26:5e:61:bd:b1:2e:f9:
         a4:cf:b9:9c:e9:15:81:69:a8:fd:c7:1e:21:60:c0:43:01:e8:
         a5:42:9a:61:b6:4f:18:6a:31:f5:c6:89:7e:b0:80:5f:fc:18:
         d1:cb:12:44:b3:38:0c:69:d6:a4:74:6e:79:c7:72:76:f1:d6:
         50:74:fd:c8:55:15:6c:37:ea:23:89:aa:8a:4a:93:3f:95:a4:
         4e:ca:58:fa:79:49:fc:d2:dd:58:20:f0:54:da:c9:30:42:6b:
         45:e4:29:1a:0b:3f:a7:51:01:fb:80:82:e3:76:7f:0b:79:5e:
         7b:e4:c2:41:2d:1b:d1:01:b6:4b:91:33:2a:38:6d:a2:62:03:
         3e:b9:f4:28:32:26:2a:95:25:21:22:8f:41:fa:f8:d3:69:62:
         8e:96:61:01:96:4b:a4:c0:3e:9d:77:50:1e:a7:91:b1:0f:86:
         ee:db:07:7e:92:5b:bc:88:35:8e:b9:64:cb:d3:46:24:66:fd:
         f6:06:43:70:36:79:13:d8:87:ac:89:49:25:5d:ad:81:85:0c:
         37:6c:3b:59:3c:c6:50:31:d2:65:72:4a:43:13:96:09:1f:a1:
         b8:85:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:08 2026 by rpki-client