Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5c3e3f02-83b4-3e7c-ba82-582f8b18840e.roa
File:                     5c3e3f02-83b4-3e7c-ba82-582f8b18840e.roa (raw, json)
Hash identifier:          oJ6fpwqD1Axctho+Lq/71i621SXw6XNzY3pUYpiM5lA=
Subject key identifier:   DB:33:C4:93:6A:11:30:07:F9:DA:E5:3B:1F:51:06:19:F8:3C:6C:61
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584CEA5CE3F73724724E76BDF780
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5c3e3f02-83b4-3e7c-ba82-582f8b18840e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     13720
IP address blocks:        69.174.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e3:f7:37:24:72:4e:76:bd:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=c2458f6c-750b-43d5-80d9-9d21cc7677ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:d4:71:8b:d0:94:f8:20:e3:62:7f:3d:e8:
                    f1:5b:ed:02:ec:af:62:a0:44:fd:fa:2e:54:4a:d4:
                    7b:ea:96:db:f3:65:5e:7c:16:dc:fa:da:36:77:0a:
                    ca:28:28:05:17:b9:be:2d:28:40:08:d3:3e:68:a3:
                    08:79:02:42:6c:ed:7c:82:58:11:9a:41:ec:6f:28:
                    65:1e:96:24:c2:47:66:df:f0:0f:53:0d:8f:90:89:
                    d4:d2:ed:08:5b:fe:09:09:8d:95:57:2f:64:78:1a:
                    ff:fd:69:a4:61:25:8c:76:32:34:08:f1:75:ee:8f:
                    ec:bb:af:a5:6b:4f:1e:26:d8:ab:73:21:ea:66:a6:
                    55:9b:35:ba:7d:15:5d:1f:fe:2b:7a:81:9f:66:fa:
                    26:52:24:bc:3f:d3:c9:91:27:30:19:3d:d9:32:5b:
                    fa:01:43:7e:74:2b:99:43:f2:84:d5:76:1d:44:a5:
                    17:02:18:ef:fb:d1:3b:5a:c0:64:a4:12:69:66:ba:
                    d0:5b:6e:08:b4:83:bf:e3:51:59:87:51:7c:59:d0:
                    39:16:c0:58:f9:61:23:55:85:d6:23:be:b6:15:33:
                    f1:36:58:da:b9:76:46:48:f5:2b:6e:02:10:c3:fa:
                    e5:07:5e:98:6b:b6:66:07:62:37:59:58:1f:5f:c8:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:C4:93:6A:11:30:07:F9:DA:E5:3B:1F:51:06:19:F8:3C:6C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/5c3e3f02-83b4-3e7c-ba82-582f8b18840e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:be:f0:bc:81:0d:d2:ae:4a:6e:c8:f2:d7:db:be:73:31:
         ff:35:9d:e4:3c:e4:6d:bc:f3:f8:dd:95:e5:14:b3:fd:e2:e6:
         ce:d9:81:3e:f0:47:8b:81:af:af:c4:f2:4b:69:ea:08:fa:c9:
         22:ac:ae:05:73:15:a8:58:04:30:ca:cc:34:63:fa:07:c3:08:
         a3:9c:45:da:4a:a5:aa:42:b9:81:7a:7f:b1:55:f2:4e:68:b5:
         3c:08:a2:8f:66:ac:a0:fd:9d:d5:21:20:61:f0:e8:bd:b3:0f:
         19:69:14:6c:80:34:e1:f7:29:de:38:4d:07:27:d2:04:b5:22:
         28:c1:3e:db:51:23:3c:e9:cb:a5:12:2e:48:50:67:b7:5d:1c:
         aa:3b:5d:28:79:bc:83:4f:94:fc:e5:ab:7f:aa:e3:14:0b:cd:
         bc:1a:16:ea:6d:48:cf:31:f1:3e:c8:4f:f7:45:43:a3:51:6a:
         ba:40:5b:ed:76:2f:9c:8f:92:6b:1c:54:0c:53:37:68:38:a3:
         21:a3:7b:da:1f:48:f5:22:28:2f:c8:8a:c5:89:8d:d9:3b:e2:
         c7:82:3f:18:fe:a7:da:b4:9c:6e:dc:5b:a4:a1:4b:d0:98:ef:
         3c:d2:e4:e8:75:04:67:20:69:cc:7a:b8:9d:50:d3:a2:3e:9e:
         7f:5b:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:48 2026 by rpki-client