Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/d9dcfb40-3f34-3cc3-b342-def4f4ee9b32.roa
File:                     d9dcfb40-3f34-3cc3-b342-def4f4ee9b32.roa (raw, json)
Hash identifier:          Jtrv+ncbdkcAYaIMjED5dOT5Ti8pP3+kKsLQT1djNc4=
Subject key identifier:   0B:0A:2B:98:FF:0D:11:D4:6D:A8:82:6F:4F:98:FD:F3:69:BB:ED:33
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584CF2BCE4411239947FF520E240
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/d9dcfb40-3f34-3cc3-b342-def4f4ee9b32.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     44486
IP address blocks:        134.65.192.0/23 maxlen: 23
                          164.152.160.0/23 maxlen: 23
                          169.155.44.0/23 maxlen: 23
                          169.155.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e4:41:12:39:94:7f:f5:20:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=a176b3d7-2f46-4437-aa97-48737046ca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:ca:bd:38:4c:05:2d:6a:fd:45:bd:ba:75:
                    6d:7d:08:76:e1:c6:f2:4f:43:3e:be:57:50:bf:23:
                    e9:0f:41:e9:aa:30:0a:7b:d7:f3:85:f9:d2:12:29:
                    33:bc:2a:5c:63:22:5a:17:04:15:28:54:f8:2f:02:
                    a9:c5:5f:1d:05:b0:23:ec:be:14:61:ea:b4:f1:c7:
                    31:55:0d:5c:f6:d3:5e:93:bf:16:0f:5f:db:56:74:
                    60:0c:bb:86:ba:81:17:93:59:ca:e2:27:d3:dd:ac:
                    71:0f:06:f9:a4:5c:3c:8a:da:8f:82:b8:e9:1c:1e:
                    3b:a8:65:32:79:52:16:ce:bc:54:4d:b5:bb:e5:e8:
                    e9:a0:62:66:69:88:40:16:3c:b0:d4:f8:92:8d:6e:
                    88:e4:1f:05:2a:3a:f2:b2:d6:ed:1b:5c:59:65:56:
                    3f:bf:43:01:a2:23:ce:27:40:a6:48:1f:8f:97:e1:
                    9d:43:fe:17:67:a0:e0:1a:60:27:95:53:1e:8c:0a:
                    a7:a4:0b:98:8e:b2:80:de:f1:a4:b5:1c:25:bd:37:
                    6b:f5:b1:46:f2:06:56:d8:9e:65:0d:a3:84:fc:f0:
                    e3:10:61:c5:1c:87:25:15:e2:53:81:a9:f5:88:e2:
                    ac:a9:16:2f:4b:3d:27:9d:22:6e:c6:4d:dc:d4:61:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:2B:98:FF:0D:11:D4:6D:A8:82:6F:4F:98:FD:F3:69:BB:ED:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/d9dcfb40-3f34-3cc3-b342-def4f4ee9b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/23
                  164.152.160.0/23
                  169.155.44.0/23
                  169.155.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:17:0b:cc:7e:65:19:4b:fb:e3:98:d0:90:af:f2:b3:69:1d:
         b0:63:ad:d2:91:6d:7b:e6:1d:d4:5b:41:63:19:69:31:4d:ae:
         36:1a:6e:79:50:a8:91:84:a8:25:31:39:6c:1d:06:4c:17:e1:
         af:37:66:77:41:94:eb:36:6f:1d:f9:33:1c:f6:55:ba:bf:7a:
         64:d8:a5:e3:b7:3f:1b:15:ed:a2:a5:91:ce:b6:7f:4d:97:c7:
         20:aa:09:4b:f3:5c:ad:98:e4:22:de:06:c7:8e:94:0f:eb:3f:
         97:d6:20:15:a4:8f:d7:07:04:7b:af:b6:ca:dd:91:1c:25:1d:
         45:10:e7:d0:78:32:26:24:2f:92:71:49:c2:59:21:d8:b0:68:
         4e:19:77:fc:08:56:9b:2b:4f:8b:bd:00:ea:9f:98:7b:af:7a:
         b1:5e:c1:f3:ef:96:93:ac:8a:65:73:9b:d0:1a:96:a5:b3:dd:
         31:2c:9c:34:77:97:91:9e:8c:32:33:84:a4:9f:ed:34:51:f6:
         a6:5e:00:36:a7:77:ff:1e:ee:25:41:8f:c4:3b:62:62:dc:7c:
         31:ab:88:80:73:da:90:33:82:ba:4d:2f:f4:65:9e:0e:f9:f8:
         4f:79:ed:78:89:85:63:59:30:9a:12:4b:83:29:69:b6:c8:91:
         fc:2c:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:54 2026 by rpki-client