Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa
File:                     8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json)
Hash identifier:          LvC/vlH51zvourJdrpGGuznmxo+z6WZ2sjS+0q8bLEc=
Subject key identifier:   60:94:09:33:25:48:C3:32:6A:B5:3D:0F:1A:FC:C7:42:56:83:86:20
Certificate issuer:       /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
Certificate serial:       010D0C9F4328584CDF32427888BAFA2F306822E0
Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        209.127.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:42:78:88:ba:fa:2f:30:68:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b7d165cc-232f-4211-be4b-663d03c3759c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:87:4a:f8:84:dd:7d:23:e5:45:c8:81:dd:
                    dc:1e:83:10:ef:8d:21:5a:ae:9f:88:05:5e:fd:bb:
                    df:ff:f0:8d:be:10:cc:b4:ff:18:a6:97:74:0f:4a:
                    5a:22:d3:e8:15:b5:d4:c3:af:42:ee:de:94:0a:a0:
                    76:e7:8d:60:e0:e9:0b:81:d5:fb:82:d1:f4:7e:45:
                    bf:b9:08:b0:f8:98:a0:2e:af:a9:34:cf:e2:28:df:
                    e3:f1:95:f7:dd:b8:bc:79:93:ff:97:dc:ae:7c:77:
                    34:75:8e:ed:f2:69:a9:d3:0f:be:0e:59:cc:c3:89:
                    0f:89:92:0d:b4:c9:c7:1b:30:8f:f8:7e:15:ad:8c:
                    1e:62:59:d2:42:9a:0e:df:4b:e3:4d:49:93:23:99:
                    9e:04:77:50:08:14:5b:e7:4c:0e:5a:9f:64:96:a8:
                    9e:60:0a:46:61:9a:ea:66:1f:45:62:98:50:85:2e:
                    7f:d9:2a:a0:e4:84:1e:84:fc:1c:07:29:8b:74:c1:
                    90:17:bb:5a:97:f4:e9:6a:b6:e0:38:c5:bb:d3:71:
                    6a:25:88:ae:2c:96:7c:39:d1:a3:4c:ba:09:39:fc:
                    0c:52:51:66:b1:cd:77:84:9c:6f:ae:19:12:2c:41:
                    dc:80:5c:b8:c9:01:15:f4:70:4a:b9:47:b1:44:c4:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:09:33:25:48:C3:32:6A:B5:3D:0F:1A:FC:C7:42:56:83:86:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl

            X509v3 Authority Key Identifier:
                keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:be:c8:ca:eb:bd:88:b9:35:44:80:fd:a9:e0:24:f5:76:
         01:b5:9c:70:96:3b:c7:b6:d9:6a:f2:de:10:33:f7:9f:b4:3f:
         e6:b4:37:8e:65:4a:f7:69:73:2f:59:ce:2e:97:1d:1e:b3:43:
         88:73:ee:0a:53:3c:ec:d7:c2:3c:15:6c:7e:40:cd:a4:bd:3f:
         f8:0d:93:97:75:c0:44:e0:24:73:92:fa:06:d4:ac:b2:91:75:
         62:b0:4f:c2:1a:da:84:a6:2a:a0:fa:ef:e9:22:0e:6a:66:3d:
         63:64:50:15:a5:50:c5:2c:ba:d5:9d:39:73:ce:11:97:0c:0d:
         b4:58:a0:f6:dc:c8:15:0c:bd:b6:ec:b6:37:27:e1:2f:71:6e:
         5b:1b:52:2a:77:89:a8:e6:f4:55:35:95:46:4e:c8:e4:66:42:
         76:59:3b:6c:5b:97:29:9e:4f:00:ba:6d:55:01:85:ee:73:a2:
         50:8b:73:4e:39:36:2a:65:07:92:7d:5b:2a:e1:78:4b:9f:7b:
         79:10:44:fe:55:a4:1f:d0:dc:5c:97:c9:bd:81:f5:96:13:eb:
         39:29:6f:b9:b2:1e:7e:6a:00:ac:f4:ba:41:ff:82:61:51:b9:
         8f:a9:68:aa:c3:af:21:59:34:df:1c:4a:9a:b6:eb:b5:75:89:
         bc:6d:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:47 2026 by rpki-client