Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/87ad9f67-9399-33be-bdf7-bbd1763fc56c.roa
File:                     87ad9f67-9399-33be-bdf7-bbd1763fc56c.roa (raw, json)
Hash identifier:          j9vsJ0idK6V3HlyWEmMViGTx9ESb7CB52gQZ57aC86A=
Subject key identifier:   5E:A0:25:5D:FB:62:08:E0:22:05:56:52:12:69:3B:18:83:CB:14:03
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584CF58792DAA944144012127A00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/87ad9f67-9399-33be-bdf7-bbd1763fc56c.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     62618
IP address blocks:        35.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:92:da:a9:44:14:40:12:12:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=29fcc136-d012-49d2-83ac-9c0ace4676ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:e2:ce:11:a4:2b:a2:9f:65:b3:25:5e:38:
                    02:a7:1b:a6:c9:37:c6:15:bd:c6:60:2f:fa:b8:f0:
                    6b:f6:10:8a:12:c3:14:a4:f3:c0:40:a2:d5:1c:e7:
                    74:94:44:3e:98:ed:3e:42:8b:33:45:d3:8e:dd:80:
                    b7:19:e4:d6:5d:e7:89:98:98:a9:70:96:09:8c:bb:
                    ce:26:40:a5:18:e2:bb:58:e4:cf:f6:db:b3:f4:33:
                    2e:82:e5:79:14:5f:3e:79:c7:f8:dc:d7:2d:f8:24:
                    f8:7c:bb:61:bc:00:29:35:f8:69:0f:a1:47:29:50:
                    b8:66:8b:5b:7b:e8:e2:ef:93:4a:17:69:1e:26:6e:
                    43:d9:95:41:35:aa:9e:30:6f:40:bc:e7:fe:8a:72:
                    83:f3:a9:4f:d2:ec:21:b3:ad:46:1f:ce:f1:2e:a3:
                    8e:3b:fb:f7:f8:da:0b:4a:3b:65:bc:f8:1d:77:8c:
                    3c:18:49:dd:37:db:03:e1:0f:47:0e:3f:cf:52:c1:
                    bd:81:f9:be:f2:2f:f4:bd:08:91:e0:29:35:eb:f9:
                    6c:8f:2a:cf:c6:1d:2e:f4:31:ad:96:a9:97:ab:e9:
                    a8:31:5e:22:ff:3c:3a:0e:89:04:fb:a3:28:ae:b0:
                    8b:b2:32:f7:b5:dd:b1:97:26:d5:0c:fb:cf:0e:6e:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:25:5D:FB:62:08:E0:22:05:56:52:12:69:3B:18:83:CB:14:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/87ad9f67-9399-33be-bdf7-bbd1763fc56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:12:91:8c:6d:fb:80:68:73:1d:84:32:0a:af:01:08:29:
         20:e3:f3:75:66:22:e6:ee:2b:99:ee:ec:8a:8c:b9:6e:97:06:
         ec:e0:43:8b:cc:98:4c:25:74:4b:15:83:26:ee:eb:f5:41:d9:
         d4:8b:7c:73:14:77:b8:38:9c:f9:b3:2d:68:18:dd:7f:af:ad:
         07:36:3a:50:5d:75:c8:77:8f:93:60:b8:e1:0b:6e:10:d6:c9:
         d4:20:05:47:a8:c0:a9:fa:b1:0e:9d:b0:6b:01:52:4b:f8:50:
         a8:7e:18:59:fa:48:14:77:34:9f:a5:bd:c0:11:4d:94:02:73:
         5e:cb:ff:b2:dc:2f:16:09:e7:91:e5:2e:6a:d5:a8:dc:9f:57:
         02:d7:af:31:51:e2:cf:c1:8c:b4:40:0c:d2:3e:66:1c:bd:46:
         f1:34:0a:b0:46:63:39:61:e7:ae:20:5f:e0:4c:ea:f2:a6:19:
         41:43:38:3f:b8:80:b1:04:15:30:b9:65:6e:3a:ac:ba:6a:9c:
         ce:54:b1:7a:76:42:f9:14:5e:cc:8a:b7:b5:96:92:45:bd:04:
         b0:ef:cf:35:44:be:f6:aa:c8:ed:ec:21:72:c6:a4:df:13:16:
         a5:45:c1:fe:40:40:e6:9d:c8:36:6c:72:da:a2:d9:00:c7:4a:
         f0:ae:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:34 2026 by rpki-client