Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
File:                     8edcb168-4dfe-3fff-883b-ec95736ecd00.roa (raw, json)
Hash identifier:          AKZTfeVOa8eFbGImDw/YbeBLUWPHYFme/dI887VZ4jI=
Subject key identifier:   28:C0:55:A2:96:2E:0C:EF:B9:70:B1:BF:D3:E6:EC:FF:5B:93:E9:3A
Certificate issuer:       /CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Certificate serial:       010D0C9F4328584CA061CA1610C944D3B1526100
Authority key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     0
IP address blocks:        149.112.96.0/22 maxlen: 32
                          206.81.80.0/22 maxlen: 32
                          2001:504:16::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:ca:16:10:c9:44:d3:b1:52:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=329cae3b-6d4d-4d7a-945d-6ae742db95dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:1c:90:47:44:42:e5:be:16:3e:b3:e1:76:
                    48:06:66:f6:94:a1:f8:d5:c8:37:df:d8:2d:d1:e8:
                    ba:6d:a3:06:f0:eb:21:b4:80:b9:7a:f5:79:10:9e:
                    f9:b8:05:7f:63:40:03:bc:8a:37:fd:5b:00:70:f3:
                    4c:b8:a9:65:2c:34:6f:23:2e:b2:36:2c:0b:44:a9:
                    d9:05:9b:02:92:f8:d3:3c:17:36:20:55:26:71:0a:
                    92:e9:18:8a:81:5f:f1:8f:7f:55:17:b9:fa:9a:16:
                    97:5a:fe:92:d3:40:46:cb:d8:d8:8f:e3:3f:6c:40:
                    06:37:8b:dd:a4:e0:7e:5e:35:1d:69:63:65:e7:e6:
                    26:47:3f:a9:0e:ed:87:79:f3:82:0a:70:62:0d:ad:
                    cc:d6:52:e1:8e:8b:e9:ad:d7:c0:8e:e5:3e:67:c0:
                    7e:6b:fb:51:13:dc:d6:c6:1b:d8:7e:33:d2:8a:60:
                    5b:37:d9:f0:94:80:97:c9:e6:e0:40:31:d9:6b:a2:
                    3a:fa:50:8b:40:92:10:99:a8:ce:dd:c9:86:5b:b5:
                    7b:29:f6:d8:d7:6b:be:f6:40:3c:11:c3:f8:11:28:
                    f7:16:3d:91:78:8c:78:07:c4:43:d4:3d:03:83:0e:
                    de:19:87:83:60:8c:7e:99:a4:78:cf:91:64:2d:12:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C0:55:A2:96:2E:0C:EF:B9:70:B1:BF:D3:E6:EC:FF:5B:93:E9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl

            X509v3 Authority Key Identifier:
                keyid:58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.96.0/22
                  206.81.80.0/22
                IPv6:
                  2001:504:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:ae:94:54:aa:66:8b:8a:59:a5:74:6f:3e:91:e8:89:b5:
         a4:03:46:82:e6:18:b9:b5:36:36:0f:83:ae:7c:cc:6b:af:76:
         01:57:81:19:4e:a8:58:e6:01:b9:53:6a:5a:01:c0:00:d6:5b:
         eb:df:5d:99:10:be:44:52:31:18:fc:d5:0e:8c:cc:4d:51:2c:
         0d:5b:6c:ea:6b:f2:d7:64:94:5a:f7:63:33:a3:db:18:62:9d:
         e0:47:90:44:84:d3:53:e2:d7:cc:17:66:62:24:9b:00:fc:a8:
         75:bd:a4:a4:29:be:9c:95:69:57:c6:e9:b4:5b:5a:73:2d:36:
         b0:54:ad:0d:67:c3:53:c9:c5:de:9b:78:f9:a9:ba:be:31:30:
         11:ad:26:2c:49:1c:a2:80:3f:03:0a:30:c2:37:39:b0:4d:d5:
         c0:e0:4a:8d:ea:fb:1c:09:ab:b9:55:82:6d:9b:73:1f:7c:7c:
         fa:a3:f3:94:68:99:0d:95:ad:58:8b:44:1f:ce:a5:f8:db:d7:
         02:94:90:5a:da:86:f9:f3:3b:87:a6:f4:7d:cb:1c:97:10:45:
         5b:4a:f3:16:bd:5a:66:a9:af:85:b4:44:5b:c2:47:58:62:25:
         2d:9c:02:87:b2:f9:58:a0:6f:fb:78:af:33:69:0a:cb:bf:8e:
         34:4d:be:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:28 2026 by rpki-client