Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa
File:                     a678354e-0b52-32f7-b1e6-88207fcc400d.roa (raw, json)
Hash identifier:          TMhnFWfHYdiQIQuldMEi73sArnUpQYElIzgYdii5zcw=
Subject key identifier:   AE:02:A4:E6:FB:61:60:35:19:62:75:5C:31:E6:BF:5A:60:92:8D:D8
Certificate issuer:       /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial:       010D0C9F4328584CEFF2367949A14AEC604494C0
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        64.56.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:36:79:49:a1:4a:ec:60:44:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=220f0b48-13f4-4e24-972e-199fcb341e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:de:10:df:6c:36:1d:3b:e6:b1:68:e8:f1:
                    a7:6d:2c:1b:a5:ab:23:cb:4f:3d:b9:d6:c7:8e:00:
                    3d:7c:de:91:31:99:9f:eb:29:79:6b:47:41:5f:bc:
                    58:53:73:1d:43:35:22:c9:bd:71:80:67:2d:61:5d:
                    b7:8f:8a:da:36:d0:23:86:9b:9b:d7:f0:5a:63:fe:
                    16:23:82:23:71:09:0f:3e:5c:70:a5:87:10:30:da:
                    0b:22:6f:9c:ea:4f:44:35:b8:f5:9b:83:20:96:7e:
                    cc:79:35:d3:b7:32:b0:98:03:47:83:d1:df:33:55:
                    5c:f6:75:61:b4:04:2a:7b:2d:9d:99:9a:00:d5:8e:
                    c9:04:ae:2e:7c:e5:c6:2d:d2:50:45:f4:d2:81:c7:
                    9d:d9:e9:38:94:20:2a:3b:f7:e0:5e:2c:55:11:ca:
                    46:80:22:94:15:a1:ff:05:d5:8b:24:bf:7d:a0:76:
                    71:ca:dc:f0:09:8f:74:72:2b:79:1a:74:c8:d4:2a:
                    c8:57:be:c1:13:53:7f:5d:08:12:e5:fa:c4:66:50:
                    5f:79:a7:fb:22:b0:98:4a:1c:c8:13:ce:6c:9e:82:
                    6a:32:ba:e4:d7:eb:08:ed:e7:af:bc:1b:93:87:3e:
                    f2:96:bf:02:7d:8d:d9:00:0b:15:43:9e:0d:10:d6:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:A4:E6:FB:61:60:35:19:62:75:5C:31:E6:BF:5A:60:92:8D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl

            X509v3 Authority Key Identifier:
                keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:53:97:b7:af:63:41:4e:4c:14:67:42:a9:c4:cc:2b:e1:11:
         60:f0:fb:71:31:6d:88:65:24:ea:96:0e:fc:50:58:e5:bf:cf:
         e3:be:3e:48:82:86:b1:f3:a7:a7:b8:15:d7:41:d0:f9:ff:ad:
         04:52:ed:13:52:cb:96:8a:c2:65:7e:71:98:28:bb:d8:4f:6f:
         68:f9:86:a0:9b:2d:8e:1f:49:25:f5:da:69:e9:bf:80:2d:a1:
         d8:1c:a1:d8:e4:d1:aa:84:bc:4f:76:7e:95:36:da:ff:30:0d:
         61:28:19:3d:96:44:8b:ad:4c:62:1c:33:1c:09:24:b1:b4:37:
         40:52:62:e6:f3:07:ca:43:7c:b9:aa:46:9b:e0:3b:29:7c:54:
         8d:28:c1:93:0b:a4:32:ea:e6:56:d0:7b:b3:32:2a:ee:9f:3b:
         c0:bc:34:93:96:43:f2:b2:2a:d1:0d:1d:43:8c:c8:fe:6d:bc:
         9a:c3:e2:f7:75:33:18:4c:f6:22:e7:94:60:08:85:c5:1c:7a:
         af:5c:cc:a5:93:64:8d:63:6f:39:6f:9e:00:dd:aa:1f:50:a5:
         d1:6d:bd:f6:e7:10:ff:de:05:9e:0c:84:c9:d2:65:03:3f:fe:
         3b:a4:a9:27:75:4b:10:f2:23:97:f1:df:39:af:65:95:90:a4:
         f3:15:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:00 2026 by rpki-client