Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8038acf-cd0f-3bb9-a2f9-f66be4ec1a9c.roa
File:                     e8038acf-cd0f-3bb9-a2f9-f66be4ec1a9c.roa (raw, json)
Hash identifier:          NSm+F9OvOnrD+mH2PqzdBxm5V5zNVljKG/XfB0SgtzU=
Subject key identifier:   F3:50:77:D7:0A:FB:91:01:CD:CD:BA:CE:74:C5:F5:96:DD:5E:7C:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE81F0029978EC669DDDD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8038acf-cd0f-3bb9-a2f9-f66be4ec1a9c.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     20214
IP address blocks:        162.17.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:1f:00:29:97:8e:c6:69:dd:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=bc38e0cc-e567-43f5-8534-324ac9af5ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:b1:4d:8c:bf:e9:8f:41:51:e3:5c:fd:50:
                    03:f1:dd:1b:c4:7d:78:21:80:fa:f7:8a:4b:68:6b:
                    12:15:ed:8f:d1:72:5c:cc:d6:f9:24:32:37:64:75:
                    55:82:24:21:d8:bd:40:8e:b6:aa:9c:83:e5:3a:83:
                    44:5f:c0:f9:58:62:45:fb:c8:6d:14:fe:ff:40:ba:
                    22:16:a8:0e:26:6c:54:b9:c4:fc:28:7b:90:4b:da:
                    d9:e7:8c:fc:97:61:c4:15:0f:1b:7b:c0:72:84:de:
                    00:bd:0e:ac:93:9b:90:d7:08:86:9a:21:43:11:a7:
                    3f:c5:95:21:46:62:72:82:3d:9d:61:5e:5a:2e:a4:
                    f9:9d:bd:5c:c8:0d:01:d8:e6:47:d9:49:cf:47:64:
                    9c:d8:79:27:50:0f:1f:8b:d9:a7:16:00:d1:9c:6c:
                    8b:62:6e:c2:14:0c:75:75:94:21:c7:ec:d8:0f:74:
                    24:ec:78:90:2a:4e:09:fa:c2:84:b3:b8:66:b1:60:
                    ee:55:e9:2e:4b:05:37:b1:63:ce:2c:5b:cd:a6:82:
                    0c:bf:89:3d:09:a8:0c:b5:52:c8:01:e0:5c:46:9c:
                    a3:0c:ab:99:26:df:04:3a:88:eb:92:b3:f2:84:b2:
                    45:6e:df:04:2a:9a:cd:ff:ff:1f:4b:31:23:ea:70:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:77:D7:0A:FB:91:01:CD:CD:BA:CE:74:C5:F5:96:DD:5E:7C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8038acf-cd0f-3bb9-a2f9-f66be4ec1a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.17.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0c:3e:35:cf:8a:c7:b3:ce:ce:9a:69:9e:b3:2f:a7:55:d8:
         bc:80:44:97:27:63:33:f4:61:2d:e7:23:66:7b:a3:52:6b:57:
         31:0f:89:b2:cf:57:02:b5:32:33:d3:97:cd:ff:a5:f1:18:8d:
         42:f1:36:95:63:7c:55:05:14:f3:bb:ff:94:06:90:84:94:6b:
         fd:cf:b7:a1:75:91:e8:f5:f1:75:2e:e7:30:aa:d7:dd:0d:60:
         f1:f4:06:52:8f:71:92:5e:33:23:09:bf:ee:bf:ff:d7:26:c3:
         13:a0:6b:99:50:99:d4:37:bc:75:1e:7b:39:df:71:88:5f:26:
         69:1d:83:cb:61:9d:38:e4:2a:07:d0:d9:9a:a7:a5:2d:77:fb:
         4a:b4:50:e0:6a:a1:d0:06:e0:4a:b5:ab:8c:51:e0:fa:3d:31:
         2a:b5:4a:da:6e:5d:39:16:a3:84:f5:b1:89:81:4e:c2:c9:de:
         d9:c0:88:e8:62:a9:ff:43:fe:3b:07:b9:6f:25:38:26:2c:f5:
         e7:24:8b:30:f2:d0:9c:5c:84:94:13:bd:93:20:3f:d2:35:92:
         e7:95:20:8b:b4:c7:41:33:96:1d:2c:96:a8:19:8e:2b:a5:0b:
         f0:00:0c:cb:21:90:47:0a:cc:58:58:cf:22:1e:d3:a6:21:bc:
         cb:78:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:41 2026 by rpki-client