Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa
File:                     cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa (raw, json)
Hash identifier:          oPGVWnGB0DZW5hwReLN3ftUVlTeij5oKO30iSCVLZYo=
Subject key identifier:   F2:46:00:BA:D0:6D:D5:14:D4:8B:D6:D9:7F:46:4D:75:04:0D:74:D5
Certificate issuer:       /CN=a275555b-70b6-4540-972c-12b8d180ff56
Certificate serial:       010D0C9F4328584CA5F7064299FD1B7C12FAE320
Authority key identifier: A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     21854
IP address blocks:        65.48.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:06:42:99:fd:1b:7c:12:fa:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a275555b-70b6-4540-972c-12b8d180ff56
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=8bd53895-3e2d-460d-8c74-bcb76db0feb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:13:e8:cd:6b:c4:71:63:cf:46:7a:af:5a:
                    31:ae:dd:1b:9b:46:2a:ce:51:0a:79:40:ff:30:65:
                    69:de:c8:4e:82:eb:a0:ca:d7:f2:17:bc:6e:c4:26:
                    c2:5e:66:24:b9:b3:4f:5f:f1:f5:d4:60:b9:c8:bb:
                    06:d3:b0:ae:c4:49:9a:7b:69:95:33:bd:6c:84:9a:
                    7f:cc:6e:d6:08:c9:f0:25:a6:f6:3b:d3:6d:f3:ef:
                    3c:62:ac:9b:ff:96:68:3d:e4:6f:a8:91:9c:2b:86:
                    ec:42:bd:b3:f0:1e:72:4b:33:0a:50:56:b8:25:dd:
                    9a:d4:dd:0e:fa:f6:66:29:5b:17:a6:41:bf:6c:ac:
                    7e:b1:6a:f0:ef:ec:7f:6c:4a:c8:df:be:12:b7:43:
                    33:55:08:f4:b5:81:c0:93:4a:07:20:28:9d:1f:b0:
                    93:43:ed:89:80:35:50:18:ef:c6:70:2f:e4:da:74:
                    8c:49:2e:06:30:45:87:23:69:59:a4:12:fa:f2:90:
                    17:21:d8:56:45:80:64:7c:b1:96:f5:27:5d:60:e8:
                    d3:71:3c:11:ff:9b:10:60:39:72:06:e1:5c:c4:7a:
                    5d:2f:40:ad:8b:2f:8c:60:d6:76:2a:a5:fc:42:fe:
                    f7:be:3f:33:d8:60:56:fa:ab:b4:7b:49:76:a6:67:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:00:BA:D0:6D:D5:14:D4:8B:D6:D9:7F:46:4D:75:04:0D:74:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/cb024ea7-2fbf-3411-bc16-eb6e6d80ee76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56/a275555b-70b6-4540-972c-12b8d180ff56.crl

            X509v3 Authority Key Identifier:
                keyid:A3:25:61:55:71:39:8F:2C:DA:77:0C:82:3C:0C:B0:6D:C2:04:A2:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a275555b-70b6-4540-972c-12b8d180ff56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.48.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:e9:90:90:c4:b8:60:cc:b6:21:32:0a:18:4b:ef:05:61:
         2e:88:65:bb:17:5b:8d:37:c5:2f:11:1b:d5:0f:9d:68:b0:8f:
         70:90:3f:80:d6:1f:f9:c9:de:a4:16:79:9c:42:8b:ad:d9:00:
         08:35:a0:d9:f7:fa:1a:07:c0:c4:49:f3:dd:37:69:25:1b:5d:
         49:8a:97:39:88:c3:d3:e3:91:66:7b:70:7a:ee:9a:68:31:aa:
         18:c8:e6:06:d7:ff:b3:02:c5:b3:b4:76:09:39:f2:90:fe:15:
         04:43:00:28:bc:ef:ac:24:64:93:f5:14:a6:48:ef:e2:c6:fe:
         75:30:21:be:16:aa:7d:f4:e5:bf:c5:ce:ca:29:45:8d:a0:6d:
         e5:79:a0:f7:df:cf:1f:e7:3b:96:92:00:e1:0a:8a:fd:5c:83:
         cd:20:c8:a4:02:19:89:a0:0f:42:c4:42:cb:32:6d:42:3f:25:
         21:09:a1:fb:29:9f:b3:bd:85:bd:36:03:c1:43:16:95:7d:e3:
         a6:50:b2:1a:c1:e1:21:13:b8:e5:fd:35:41:f5:a7:a6:72:14:
         8a:6b:2f:c4:97:c5:09:df:b7:a9:66:b6:84:47:12:f4:4b:b3:
         9f:e6:81:76:bf:47:e0:bc:2a:cc:5a:e2:b0:2a:53:68:0e:77:
         47:7c:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:20 2026 by rpki-client