Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa
File:                     eefd5452-066f-3e01-a3d4-be66cfbe094f.roa (raw, json)
Hash identifier:          P0uPemve7yMHqV1QIlL5nhJNDMbUgI44f54gSdXcDaY=
Subject key identifier:   61:02:2A:4E:05:81:B2:E6:10:D2:14:BA:45:6C:54:51:F7:9D:59:2F
Certificate issuer:       /CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
Certificate serial:       010D0C9F4328584CD6D20E01D9F871576AB1A580
Authority key identifier: 89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     10753
IP address blocks:        162.251.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0e:01:d9:f8:71:57:6a:b1:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426993f6-a616-4de1-b0a2-1d93fc1b96f6
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=4fe271f1-7c61-46f8-a2bb-4128957dcbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f4:63:ad:cc:7a:e9:3a:61:b5:2b:3a:6e:3c:
                    82:b6:1e:43:aa:fd:84:83:d0:43:ad:e9:9b:7d:e9:
                    de:4c:f8:00:e8:58:e8:b7:ea:66:52:81:78:34:47:
                    d1:17:94:28:d4:8a:87:15:f0:bf:cf:05:b2:1d:43:
                    8f:bd:59:8c:ee:aa:66:7e:5f:45:73:fb:51:b2:e7:
                    a2:64:37:d5:b4:e9:e8:46:5f:fc:b5:90:fe:67:29:
                    6b:ba:18:6b:70:c5:bb:b3:98:df:a1:db:dd:80:e3:
                    9e:e6:bb:e8:07:6b:f5:6c:ff:d3:06:20:88:5f:88:
                    fc:05:25:63:51:b1:e3:bf:5e:ff:77:19:f6:56:4a:
                    a2:d0:1d:48:37:a2:7c:bb:3a:bf:8a:35:18:8d:a1:
                    a7:da:57:89:97:5a:ca:1e:8f:7d:52:14:98:d1:9f:
                    16:d3:7c:22:f0:7a:6b:19:98:69:c0:90:00:62:bb:
                    b2:9b:54:ee:0a:50:cf:69:eb:45:62:4c:e5:4a:e6:
                    21:8a:02:95:77:49:db:a0:2e:5d:67:65:ef:c9:2a:
                    df:7b:ae:96:57:8f:67:e9:c8:f3:63:c4:ad:2a:4a:
                    de:c0:37:d5:e0:ab:0a:ea:1c:09:eb:fc:97:ad:89:
                    52:31:92:1d:91:c5:6e:c0:6b:a9:4e:8b:f5:f5:08:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:2A:4E:05:81:B2:E6:10:D2:14:BA:45:6C:54:51:F7:9D:59:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/eefd5452-066f-3e01-a3d4-be66cfbe094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6/426993f6-a616-4de1-b0a2-1d93fc1b96f6.crl

            X509v3 Authority Key Identifier:
                keyid:89:25:50:D1:19:5A:3B:AB:4A:5E:E1:C7:22:B0:6C:AB:47:68:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/426993f6-a616-4de1-b0a2-1d93fc1b96f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:19:2c:db:a2:ba:3e:8c:02:c3:a4:39:b8:7d:2e:0d:d4:
         6e:0d:2f:c1:67:44:01:6e:d1:07:cc:53:1d:37:22:87:cc:79:
         e5:04:a3:14:b1:a1:0b:79:7e:45:74:0f:0f:43:b6:c9:3d:50:
         8c:ea:37:85:6f:08:68:5a:90:2a:18:b1:05:5f:2c:c8:a1:ad:
         0f:c7:fc:b8:12:a5:38:bd:63:53:8d:3b:c8:d2:83:83:31:c8:
         e3:36:1a:21:bb:0c:de:10:ae:7e:6b:98:bd:4f:ed:15:43:cc:
         88:28:1a:bd:f2:19:26:54:46:fc:ac:ed:d4:33:db:08:ce:13:
         43:1e:68:7a:32:25:df:c8:46:45:6c:55:1c:36:00:d7:0a:38:
         16:4c:c0:78:a3:9e:18:b5:c8:e0:92:16:42:b0:0a:97:36:10:
         08:2c:0c:ba:4d:be:ed:df:0f:df:e4:ad:6d:46:e3:69:5c:ed:
         a0:25:03:d6:eb:4a:62:b4:71:3c:27:5d:fe:21:fc:31:be:4d:
         66:1e:25:8a:7a:ac:dc:ba:21:d5:89:88:7c:3b:79:e1:8e:3c:
         11:b9:7c:a1:b7:59:2c:0f:96:77:01:41:97:c9:93:7a:b4:5c:
         b6:83:87:93:ab:e5:c7:11:9e:af:78:16:af:31:ba:40:a8:42:
         af:f7:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:16 2026 by rpki-client