Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
File:                     ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa (raw, json)
Hash identifier:          PaM3QCWvQXId4JVBsWLGZcT840BndzVgNImfKkuh000=
Subject key identifier:   A8:97:81:76:19:75:22:E3:C2:56:49:BB:89:95:2B:99:17:48:AD:2B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C8046CA72D60D5F8813329800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        192.119.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:ca:72:d6:0d:5f:88:13:32:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=c6cb71e3-d581-45d8-b86d-93a6a85bf17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:82:02:71:29:4b:b8:66:df:b0:f4:0b:a8:
                    39:ec:27:a0:4b:79:c0:d6:e6:8a:7b:88:b2:a3:05:
                    8a:ef:bd:49:23:c4:fa:4a:ee:e0:f0:51:9e:80:3c:
                    48:04:39:ac:68:95:34:b4:a3:f3:39:1e:f8:eb:02:
                    bb:3a:c8:00:14:e1:a4:f0:6a:39:f8:0c:e8:c5:e5:
                    08:92:4d:b4:70:dd:68:5d:7a:29:11:70:44:47:e3:
                    67:63:61:fb:76:b7:74:ad:37:30:b0:73:23:d9:86:
                    99:79:ba:02:de:0b:1f:02:50:f4:5e:8a:53:ae:0c:
                    b3:84:92:33:f0:8a:e1:b2:1e:f7:6f:f3:bf:1a:2f:
                    89:7a:6c:65:85:84:11:aa:f2:38:d2:a5:c0:17:9e:
                    3e:80:09:f9:68:52:e7:2d:5f:f2:6d:06:10:45:50:
                    d6:d1:09:d6:4e:44:38:9c:c5:a5:41:35:fb:6a:64:
                    82:79:2b:4e:51:f6:85:45:c7:1c:96:18:ae:89:1d:
                    da:8c:b2:74:99:e4:cd:ad:a7:2b:d2:5b:16:9f:07:
                    46:a1:7b:41:6f:45:42:e1:4d:ec:a8:31:c5:11:57:
                    69:a2:e0:c6:27:1b:69:00:a6:9c:7d:65:02:54:61:
                    fe:17:62:43:7f:3d:ca:d3:b0:78:f9:27:54:f5:f4:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:81:76:19:75:22:E3:C2:56:49:BB:89:95:2B:99:17:48:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:e0:f8:eb:dd:29:d3:f4:6d:5a:fe:85:24:19:dd:5e:88:
         1a:61:af:6c:ef:1d:d3:ed:c2:44:ed:df:35:83:15:6f:18:be:
         45:b7:db:a1:c8:d9:10:d1:83:67:82:4e:5d:04:9f:5a:b7:8e:
         d3:6c:d3:00:e8:83:b6:18:71:19:cd:45:25:e6:60:7a:93:95:
         d4:f7:46:da:47:42:fe:31:a0:fd:6c:7b:46:1b:07:c8:de:a3:
         81:90:17:5c:3f:09:e1:9d:8c:70:c6:db:b8:de:3b:b8:84:2e:
         01:5c:93:b4:45:70:54:11:e5:d7:d6:c2:3e:b3:9f:e2:61:60:
         ba:59:ac:27:29:13:b6:4c:65:83:ed:7b:fa:8e:52:a4:94:67:
         78:0c:98:d7:a4:be:2b:83:b5:da:e5:24:43:04:89:de:fc:46:
         57:91:85:bd:90:bf:a5:e6:a4:d8:e6:59:85:18:ae:65:c6:a3:
         2d:86:88:47:37:3d:2e:d0:b5:b0:85:0c:d8:60:8b:c2:0a:47:
         de:50:bd:2a:df:de:1d:bb:8d:f6:4f:aa:ae:88:64:d7:d0:36:
         1f:5c:ad:43:0a:7f:db:fc:9d:e2:87:17:33:d9:b7:b0:bc:af:
         e6:97:8c:03:2a:2c:83:c7:a2:bf:6d:f5:1e:ab:48:3a:e7:f8:
         ef:af:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:26 2026 by rpki-client