Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa
File:                     1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa (raw, json)
Hash identifier:          SjTCsfYQEQi3dIqb4T1nySrTKIunwiw3Bng1DEtKIq8=
Subject key identifier:   E5:F5:16:82:E1:1C:3C:29:FD:54:13:84:C8:F5:AD:00:0B:4C:38:14
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584CE361FBCEBAAC17E02EB06880
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     62563
IP address blocks:        192.102.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:61:fb:ce:ba:ac:17:e0:2e:b0:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=229cd33f-9a7f-402e-a5c4-80e23691eab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:39:75:c6:27:da:af:60:a6:4c:94:dc:f3:
                    a3:e0:d9:86:60:9e:ea:bd:90:f1:24:9e:a9:b0:1f:
                    62:22:b1:35:79:64:93:4d:52:44:49:63:9d:f3:e2:
                    09:33:1e:32:45:9e:2d:34:79:6b:5d:00:6e:c8:92:
                    d2:4f:8b:d8:82:76:0b:2b:ab:91:f4:94:71:19:49:
                    bb:26:29:6b:07:91:42:96:93:a5:a2:fc:34:58:39:
                    3b:40:3c:21:cd:6c:4c:2d:1b:29:17:4c:fc:c3:5d:
                    a6:0f:be:97:b7:88:4b:c4:59:4c:b5:ee:e3:a4:40:
                    d4:4b:38:3d:ab:0b:d5:cb:ad:c7:68:67:b5:c5:64:
                    f7:c2:04:67:66:68:a3:28:e6:07:0d:bf:d1:3e:20:
                    ce:ec:77:59:b3:0c:23:00:c5:35:68:ff:ff:17:15:
                    36:ad:17:6e:20:3b:cd:cf:00:61:29:2c:84:fb:3a:
                    38:28:d3:63:b6:67:fb:b4:c5:f9:38:b7:0e:f3:a8:
                    83:7a:2c:ed:07:ea:9c:ba:74:69:16:7f:cc:71:cd:
                    6a:7f:dc:7d:fd:bf:a7:c5:d1:e8:ec:dd:ea:3c:7c:
                    68:36:62:31:f8:3d:97:05:b7:91:b2:48:1d:50:ef:
                    cc:f7:2f:2a:21:88:f6:1f:e8:e0:13:83:86:86:cd:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:16:82:E1:1C:3C:29:FD:54:13:84:C8:F5:AD:00:0B:4C:38:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:44:d0:c2:c3:2d:e8:62:2c:e4:72:37:70:83:f7:7b:9f:18:
         98:99:4b:3c:9b:02:1a:69:ca:00:75:7b:9b:3e:5c:71:03:7e:
         38:bc:67:c8:b0:b5:6f:09:24:cc:3b:12:41:f0:10:fd:5f:df:
         b6:a0:44:32:a4:f1:5d:90:a7:5d:b5:1d:22:94:a3:45:03:75:
         c5:54:2d:48:f1:f7:04:92:df:e3:c1:cd:2a:f3:16:d9:87:67:
         04:aa:8d:fa:d1:53:d0:90:c3:66:6f:f4:a7:a6:66:64:d9:ed:
         50:40:19:c5:4a:c3:5e:27:4d:b0:b5:aa:c6:8e:be:d2:23:38:
         da:36:96:bf:a0:07:2e:4d:d7:57:c1:e7:4e:37:33:9a:cd:17:
         55:53:3e:0f:74:e8:f1:58:fc:1c:43:1e:c3:98:9c:88:68:d9:
         66:ba:5d:ec:9e:2c:44:a6:1b:cc:39:57:3f:ac:4d:c0:b1:26:
         17:4a:e8:ae:40:95:b3:15:83:4e:f9:70:7b:0b:5e:46:fd:3e:
         4a:59:1f:6a:e4:f5:09:e4:87:d5:e4:5d:2a:b2:a9:d2:50:12:
         5c:4b:c6:d8:3c:f0:28:6c:6b:99:98:ec:e3:d0:1c:56:ad:e5:
         1e:f2:5c:ee:18:48:6e:48:22:c5:38:7a:d1:e6:65:29:ab:54:
         bc:13:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:07 2026 by rpki-client