Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
File:                     1fde58cb-1b82-3dee-9119-156933d5f187.roa (raw, json)
Hash identifier:          HZS9x3IU4FYg/stxgFXzMZr+/BBU5JD0xpp4LiaEmVA=
Subject key identifier:   80:43:EB:E9:52:EB:CA:68:10:42:97:2A:D5:88:CC:FE:CF:FE:2C:8E
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584CF42224EBEBE6AEB3AC958B80
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.81.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:24:eb:eb:e6:ae:b3:ac:95:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=f83ce781-6ce2-4489-85e5-514de581007d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:06:2f:83:8b:a7:a2:cb:64:41:e2:e7:fb:
                    bd:34:c0:f9:9e:2d:ce:4a:de:aa:98:92:94:df:d4:
                    e6:7a:b6:5f:8b:4c:cd:26:d8:a9:e8:72:d9:50:e7:
                    85:98:07:c5:ff:13:ce:cc:c7:b1:fd:48:ed:d9:a0:
                    91:60:00:cc:8e:9b:4c:ef:46:0a:63:6b:30:4f:21:
                    84:b7:f5:9d:d1:dc:6e:5e:6d:ae:ee:f1:e0:c9:fc:
                    2d:3f:d9:ac:69:5f:e6:ab:4c:33:b1:04:ac:48:98:
                    c2:03:74:94:f6:04:a6:22:cd:0c:a9:4a:ff:6a:a7:
                    66:57:48:8b:d2:fb:dc:7e:46:0c:f2:c5:90:ab:48:
                    e6:cb:4b:a7:50:6f:9a:71:f6:79:f4:c4:50:2a:ac:
                    d2:48:ac:b8:35:32:c4:97:c4:65:2c:4b:bd:cd:4f:
                    d9:37:5b:53:e3:fe:a5:8b:e7:32:32:33:21:0f:46:
                    cb:06:fb:26:5e:1e:6c:33:91:dd:a0:49:0b:61:6f:
                    a4:cb:59:8c:1c:fb:2a:58:72:2b:99:1b:32:70:53:
                    5d:5f:68:ce:60:70:97:f1:e1:a3:e7:03:e9:31:0c:
                    8e:43:7f:af:c4:9c:f4:50:c2:73:e3:fd:97:5e:05:
                    cf:3e:19:eb:10:cc:f4:ca:99:6c:67:59:3c:27:25:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:43:EB:E9:52:EB:CA:68:10:42:97:2A:D5:88:CC:FE:CF:FE:2C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:0e:8b:81:6a:12:3a:83:6f:d1:0d:ea:21:a2:a1:60:e4:
         d6:ef:20:9a:a7:d1:58:18:80:ef:97:a3:f3:0d:be:c6:6d:4f:
         2e:aa:7f:ec:a9:98:d0:9d:56:19:fb:8d:c3:ab:5e:e3:73:c5:
         1b:78:30:0e:95:af:8c:39:26:dc:ed:88:89:0b:f0:6d:3c:3d:
         c5:df:d5:f4:fd:b1:8f:4c:be:12:26:b1:d4:ab:9a:63:e1:00:
         e6:e9:b5:02:19:e1:c3:5e:94:e2:1a:df:5b:0d:60:ca:59:82:
         ed:dd:74:9d:cd:00:29:4a:45:f2:14:93:e6:e7:44:cb:8a:0c:
         78:e4:3f:db:b9:5f:bb:2f:52:5f:94:8f:51:33:c5:6f:6d:61:
         e0:cc:61:ee:b1:55:f4:be:d9:07:fe:b7:de:5c:ad:9d:fc:36:
         15:68:b5:e9:ab:7f:0c:e5:71:cd:66:1c:fb:72:36:c4:f6:1e:
         b1:f2:fa:a2:f6:61:b7:2c:3a:b9:a8:1b:1c:79:d7:92:5a:75:
         8f:57:25:6d:3b:aa:fd:52:6d:3c:07:df:e4:b1:e3:3d:a4:09:
         89:a0:ff:32:dd:b6:27:c3:ce:a4:d0:62:3d:d0:86:a1:34:de:
         9e:e8:66:7c:af:ad:ce:65:57:1f:59:a0:80:6a:8d:ff:92:2a:
         13:31:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:24 2026 by rpki-client