Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa
File:                     161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json)
Hash identifier:          l5Xq45s14pmRso6DGgPs7rXa7XM/AH/ADWAR4XGYQiU=
Subject key identifier:   CC:D2:4A:C0:AA:35:64:D4:75:87:8F:E3:B0:24:2A:79:2D:26:58:CA
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584CEA5CF1DD0400CBE3ED3149C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     237
IP address blocks:        35.38.192.0/18 maxlen: 18
                          35.39.0.0/19 maxlen: 19
                          35.39.32.0/19 maxlen: 19
                          35.39.64.0/19 maxlen: 19
                          35.39.128.0/19 maxlen: 19
                          35.39.160.0/19 maxlen: 19
                          35.39.192.0/19 maxlen: 19
                          35.39.224.0/19 maxlen: 19
                          35.40.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:dd:04:00:cb:e3:ed:31:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=f913bc20-f4d4-455c-b783-ee2321a9b60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:ed:b1:8c:94:f7:0e:48:2e:1b:87:1d:8c:
                    92:a2:62:52:a6:d8:61:e0:a1:86:e7:f9:eb:99:96:
                    2a:f6:cb:97:bd:d7:89:41:4e:30:9b:34:62:87:9a:
                    08:02:db:4e:f4:ac:dc:a5:14:63:48:00:62:31:03:
                    10:bc:1f:a6:4f:12:ea:94:73:25:fa:17:d0:a1:32:
                    a4:64:56:25:bc:f2:82:25:09:b9:54:3a:1b:85:f7:
                    a8:a6:d5:45:e7:a2:4e:ff:2a:30:ac:8f:41:ab:15:
                    f7:24:43:b2:27:e1:8c:51:9a:d0:d7:c1:d1:ab:0f:
                    33:89:1b:6a:22:a0:cf:d2:4c:1b:c8:f1:ee:94:78:
                    1c:7f:4d:15:52:11:37:b1:02:3a:4b:50:75:9d:27:
                    d7:2a:5f:a1:40:d6:5c:38:c2:e2:30:18:44:c4:da:
                    47:f1:21:88:5d:2a:9a:c6:5e:cf:3b:64:44:6f:ca:
                    d9:af:17:10:01:83:22:f3:f2:2e:c1:af:b5:a0:68:
                    62:61:68:9f:12:36:40:84:97:d8:0c:b1:37:d6:7b:
                    a6:66:27:eb:6f:20:e3:25:bf:a4:c2:08:17:22:1b:
                    7d:07:03:7b:84:38:18:7c:a1:cb:87:65:42:04:8d:
                    e8:36:3c:6f:df:23:f0:23:3e:70:4d:7f:0f:53:ea:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D2:4A:C0:AA:35:64:D4:75:87:8F:E3:B0:24:2A:79:2D:26:58:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.192.0-35.39.95.255
                  35.39.128.0-35.40.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:80:fd:a6:63:77:43:80:f9:56:71:09:89:7b:70:43:d2:
         83:67:6a:f1:98:78:72:ed:a6:59:aa:b1:c4:27:98:37:1f:1b:
         12:45:0e:fc:90:e8:0b:1b:dc:65:6a:d1:99:de:f1:9f:6d:71:
         af:b6:04:a5:88:38:b5:12:97:90:7d:7f:a5:1a:f2:74:6c:11:
         0a:6c:66:95:29:8c:2d:4e:aa:31:e0:a4:4c:8e:24:57:95:3b:
         02:f8:55:18:74:56:08:7c:b1:b1:98:c3:6e:af:b6:c4:f7:1d:
         88:40:27:da:4e:0f:8d:f5:90:93:07:59:1e:c2:5f:91:3b:67:
         b2:9f:88:fd:b1:f7:8b:8c:72:02:3e:ee:07:74:b0:58:3c:39:
         c3:f7:5c:a7:f6:a2:23:7c:b0:07:5b:4c:f8:ee:93:0c:07:8a:
         74:d5:84:40:0e:74:17:1a:f4:bc:7a:2f:7a:28:67:a0:2e:5b:
         89:74:c0:fa:9b:62:81:aa:22:65:77:04:1c:4c:42:b1:aa:72:
         7c:5b:66:ad:80:34:ad:8c:f5:b5:66:59:83:f1:51:00:5e:3b:
         7d:d9:20:5f:e2:8c:94:8a:02:8c:3e:a6:9b:14:61:a5:e0:e1:
         18:8a:ac:58:a1:d6:64:96:97:26:c4:bd:5b:aa:da:cb:0e:1c:
         c6:24:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:36 2026 by rpki-client