Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
File:                     b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa (raw, json)
Hash identifier:          w3Akt1c9/5K8v/iONXgLtMJFTzL0jebXSXUlyF5yAq8=
Subject key identifier:   F1:B8:BF:C3:BC:EE:3B:30:71:3E:0A:EB:38:B8:37:C3:4C:EB:9B:D8
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584CD99CB94C1E1B7338CD4FAD80
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22351
IP address blocks:        64.88.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b9:4c:1e:1b:73:38:cd:4f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=87b5db06-c1dc-4ffd-ba07-d3879d937f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:0e:bc:57:2b:3d:b2:84:91:f7:c8:05:bd:
                    ec:e1:85:b1:08:ab:8d:2f:31:80:65:07:20:ea:d3:
                    1d:b9:f0:44:8b:e5:27:1b:de:13:03:e8:31:ad:57:
                    7b:9c:d3:b7:1a:ae:52:7d:02:dc:43:8c:ae:dd:1a:
                    27:24:cc:c5:e1:24:26:91:99:eb:6c:ee:50:27:ca:
                    75:d3:65:e8:8c:a4:12:57:f4:7f:26:9c:ce:c4:91:
                    59:12:8d:da:0f:2d:76:05:53:af:97:a8:9d:be:81:
                    58:aa:61:b9:31:7f:7f:8b:20:80:07:eb:e1:f6:bb:
                    77:bd:11:3a:c3:1d:fa:62:25:a3:36:6b:b4:e6:d0:
                    64:ef:a6:72:35:6f:33:ac:46:95:76:c9:76:23:eb:
                    f4:b4:6f:f0:95:ed:81:bc:c4:68:43:6b:36:09:57:
                    8f:4b:af:74:1e:e5:7c:79:c4:0b:19:8c:10:ce:19:
                    ba:f3:6b:7b:6d:aa:dc:9e:50:c7:08:f2:84:83:ae:
                    3d:71:ba:66:0e:26:e8:af:04:d3:a8:90:e3:61:a0:
                    c2:46:92:81:be:bb:62:25:a0:22:fe:93:7e:27:5b:
                    26:6b:1c:39:1e:54:7e:2e:65:f9:22:37:c5:e6:75:
                    c6:a6:49:58:10:e7:b6:f5:3d:3e:7f:51:93:cb:57:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:BF:C3:BC:EE:3B:30:71:3E:0A:EB:38:B8:37:C3:4C:EB:9B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:45:69:b1:45:45:0d:82:d7:65:5a:7d:54:47:b2:b0:f3:
         d4:f3:90:55:ea:8e:f6:91:21:79:3c:73:a6:c2:7b:b8:b6:7a:
         32:a1:ec:cd:bc:9e:24:e4:cf:b0:eb:43:7b:fa:75:7e:01:99:
         aa:61:db:90:20:06:a9:d0:ab:96:15:00:a3:99:e5:93:9d:05:
         e6:92:26:2a:88:47:1d:86:74:7c:3d:95:d6:65:d1:f6:38:8c:
         c8:2d:92:81:cd:e2:15:df:b9:e2:3f:0d:4c:96:e0:5a:4c:c0:
         5e:56:c5:53:ab:98:4f:d8:fe:cc:84:ba:db:09:16:81:5b:0c:
         9d:08:ac:9e:9d:ae:21:4c:7c:96:79:00:50:a9:b0:16:37:12:
         ca:38:7b:20:90:68:92:f3:35:78:da:fb:c8:82:dd:5a:1c:23:
         51:51:23:29:47:59:9a:fe:eb:d7:9a:ba:67:1d:11:e8:cd:0e:
         28:5f:23:7d:6c:e3:38:a0:91:dd:27:3a:ee:b9:92:0b:93:c8:
         e5:83:23:45:9c:d2:1f:82:d1:7b:9a:1d:d8:2c:07:6b:d3:d1:
         65:3c:78:8b:a9:da:60:02:95:09:f0:20:77:b8:60:e7:b9:3f:
         fc:c5:5e:dc:ee:1a:7e:28:06:a2:67:22:5d:fa:fc:3c:ba:0b:
         c7:c2:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:10 2026 by rpki-client