Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa
File:                     5a66a24e-bb89-3495-8eab-69765250b89c.roa (raw, json)
Hash identifier:          6/CcuBVdnR90Gnmc/a6th04uvb9F/TNsM7GilCTAjsE=
Subject key identifier:   C8:C6:BE:CF:9A:9E:D3:52:65:F0:2C:57:8E:B5:6F:FA:87:2B:D4:64
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D02178002B4A1859B61270490
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     140224
IP address blocks:        207.57.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:80:02:b4:a1:85:9b:61:27:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=326f3bee-60f1-46a4-9f44-71233c5d09d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:e8:87:3a:93:1c:a6:fd:ce:19:0e:3b:f7:
                    8d:a5:e8:6a:71:92:77:82:5f:c8:0a:a2:09:b7:7c:
                    1e:d9:44:8c:a8:c2:1b:54:20:5d:34:56:a8:77:14:
                    61:42:f1:03:18:dd:9c:00:25:eb:7c:8a:a0:28:9c:
                    1d:2c:dc:57:c9:de:1f:18:84:d9:58:df:f0:bf:2b:
                    61:e4:91:09:be:e3:51:77:46:12:2c:0f:92:5b:22:
                    27:24:1d:35:bd:cf:f9:11:42:c6:15:6e:b7:54:db:
                    e5:05:3f:a6:50:4a:2f:7b:70:19:0d:1f:fa:65:de:
                    5c:a5:99:2c:4a:97:c9:ec:77:96:ea:9c:79:19:cf:
                    a4:ae:07:93:cc:ad:a8:9b:01:5c:5a:fe:ed:dc:6a:
                    f1:a0:a0:7e:1e:3f:13:28:69:b8:f6:ad:7d:19:66:
                    65:12:50:54:00:14:d2:69:0a:85:ed:22:00:41:82:
                    9b:9d:7d:6b:50:f2:24:e8:c3:dd:4b:83:87:39:b5:
                    53:a8:02:d8:fb:d9:c9:59:11:33:dc:bd:ac:9d:21:
                    3a:31:8c:96:01:8e:ef:8f:c3:63:1e:d8:6f:1d:dc:
                    b2:54:07:70:db:bc:08:ad:ab:00:94:2f:ff:1e:b4:
                    49:d6:2b:3f:59:7c:92:1c:67:b0:6c:99:e2:6d:41:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C6:BE:CF:9A:9E:D3:52:65:F0:2C:57:8E:B5:6F:FA:87:2B:D4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:94:31:e2:23:5d:04:13:54:b5:d6:d0:2b:06:34:d2:87:
         f6:9c:d4:e0:9a:eb:2f:ed:94:b6:31:3b:0c:5b:bb:34:61:62:
         66:25:c0:98:2a:42:58:a3:57:a1:04:d2:fd:8a:00:78:8c:65:
         33:e3:da:9d:54:d7:49:fe:f3:c2:5b:89:60:ad:77:a3:19:46:
         97:3c:6a:4b:dc:fc:f0:d5:e5:93:e2:80:fd:ee:4b:be:21:ff:
         b2:61:0a:fa:f8:7a:cc:e7:a9:f6:fb:54:74:42:e3:8f:2b:10:
         af:7d:81:b2:89:6e:c0:29:7f:ac:ca:8a:7a:c9:79:e4:37:fd:
         d6:8b:19:f1:0a:c5:a3:f9:9d:c2:d2:a6:c6:fa:d2:77:12:b5:
         b3:83:cd:53:4b:55:d1:b4:08:d4:3c:23:ef:f8:ab:9e:c0:a4:
         31:f0:22:4f:e7:48:23:cd:c8:28:ff:d7:0f:5e:42:02:57:c7:
         1b:22:f7:c1:3b:7e:ac:f8:ae:62:3d:31:8b:da:5f:86:c9:d1:
         4b:86:3f:cf:b2:6d:01:38:a8:2f:f5:65:14:e5:f1:ba:09:b6:
         33:ff:b6:35:18:f6:e6:ad:0a:43:72:e8:11:98:0d:05:31:c6:
         28:23:48:df:da:f4:eb:55:a3:8c:89:eb:bc:6f:96:d1:08:1b:
         b6:d6:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:53 2026 by rpki-client