Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa
File:                     25c5593d-45d8-3237-bba2-0df821df4e57.roa (raw, json)
Hash identifier:          qHKWnbftRVC2DgO1ugPBoVgNSEUiyQyVTWFkXbkW6Ds=
Subject key identifier:   CD:8A:EC:FC:1B:97:B8:5D:D1:1D:15:A5:DD:7A:95:57:61:CC:F3:49
Certificate issuer:       /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial:       010D0C9F4328584CC7774DBDD900ACC37CDC5500
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     15149
IP address blocks:        64.29.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:4d:bd:d9:00:ac:c3:7c:dc:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=a10c79f3-2cd0-4dd5-86be-11c778176899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:48:ee:38:d9:55:07:26:e8:88:3a:8a:20:
                    b0:de:9c:72:22:00:0c:d9:f7:35:0b:70:20:82:63:
                    d9:bf:41:1a:e4:0d:ea:63:55:c5:f7:90:33:d9:8f:
                    23:1a:3a:98:37:c5:65:5f:c0:ce:51:26:a7:55:b4:
                    ac:53:85:42:38:ce:41:69:4c:43:cc:cc:90:fe:ef:
                    0d:8f:5f:ce:55:47:6a:b3:38:5f:3c:d8:d7:73:17:
                    39:68:f2:2a:64:09:5a:a0:dd:8a:2f:d5:6c:27:68:
                    7d:86:30:19:4f:d2:f6:fc:42:6b:81:22:cf:7f:5b:
                    75:66:97:1b:28:61:c2:ea:64:3d:bb:f1:b8:8e:d5:
                    6f:06:30:26:f7:2e:71:a3:fe:69:ba:4a:67:51:43:
                    6f:bb:d5:4d:6c:68:f5:c2:c7:49:bd:d7:87:fc:4c:
                    3f:86:35:fe:a8:59:7f:2f:ee:a2:3e:bb:32:59:5d:
                    40:86:e9:a0:48:6b:d3:ba:31:86:3b:4c:80:9a:72:
                    3c:51:5f:11:51:c5:26:7b:77:48:98:96:bb:bb:d9:
                    1a:41:7c:67:ff:32:13:75:f5:01:4d:ad:00:cf:72:
                    31:f0:73:f3:56:ef:b8:4e:71:74:69:7c:cc:61:fc:
                    78:3f:df:0a:f6:20:53:92:53:35:87:60:b0:b8:7f:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:EC:FC:1B:97:B8:5D:D1:1D:15:A5:DD:7A:95:57:61:CC:F3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/25c5593d-45d8-3237-bba2-0df821df4e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:61:ed:08:a6:f3:3b:f4:02:1d:8a:9d:7e:82:a8:18:8e:94:
         b2:94:07:ed:57:4a:38:e0:15:b3:9c:4b:1e:bc:3a:be:b9:d8:
         9e:45:c1:2f:c2:27:58:42:60:53:0b:74:41:33:80:d2:ab:c4:
         01:bb:ef:4d:2d:1d:08:f0:ef:48:7e:9b:ca:78:62:81:cf:a9:
         7e:0a:cc:80:20:a5:64:7e:97:51:20:36:0c:d7:6a:3c:55:c6:
         40:16:13:63:73:c4:27:cd:7c:e5:dc:4e:08:1c:50:58:bb:8c:
         c7:1c:05:fe:2e:e4:19:2c:a4:56:ad:be:9d:b4:99:99:18:fb:
         00:59:75:97:a8:aa:b9:ea:b8:65:1b:53:80:60:7f:ec:41:b8:
         84:7e:61:07:81:9d:f1:b3:90:0d:86:33:bb:f9:bf:a8:e0:67:
         67:2d:9c:dd:fc:31:ca:96:87:79:13:0f:c4:f9:e1:7a:20:52:
         77:a6:68:dd:1c:75:84:4f:5f:cc:7d:b1:b3:cb:2d:96:4b:d9:
         7f:94:1a:d9:c0:c1:ca:0a:ae:8a:9b:d2:72:6c:a3:2d:a9:9e:
         44:56:39:fa:a4:c4:9b:5d:ed:0d:55:ff:c2:99:fc:d4:52:a7:
         28:9f:a8:c8:f1:e5:97:fe:fc:17:41:03:be:2b:cc:4a:c3:74:
         54:af:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:15 2026 by rpki-client