Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7343705-a424-3f1e-a35c-37ee100d7d0f.roa
File:                     c7343705-a424-3f1e-a35c-37ee100d7d0f.roa (raw, json)
Hash identifier:          5oBB22+Vz3FgmcOgZp9yavhpYuNtLbFF6s8cOUovdG4=
Subject key identifier:   88:E2:2D:C1:81:A3:BC:34:A5:7E:08:B4:A4:ED:B1:30:53:55:32:06
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CD83742B39A6CAE50FAB01BA0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7343705-a424-3f1e-a35c-37ee100d7d0f.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     140227
IP address blocks:        207.56.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:42:b3:9a:6c:ae:50:fa:b0:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=9220f7b7-6b79-4931-9544-34d88fa118b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:b1:94:1c:f5:85:15:bb:48:c6:c6:68:4e:
                    3b:c3:47:6f:f2:19:38:71:b7:b1:33:30:34:37:25:
                    ea:cc:25:46:1f:d8:9f:d9:9b:51:19:56:aa:81:67:
                    09:90:6f:a6:74:a3:21:a4:f9:4f:02:14:7e:cd:d1:
                    55:ef:78:25:1d:e7:bf:34:52:84:60:51:eb:ba:7d:
                    d4:b0:77:10:d2:25:13:72:2a:93:57:93:b1:60:93:
                    50:f3:98:2d:62:05:89:ba:5b:16:5e:c8:69:60:dd:
                    05:60:81:5f:75:1b:2e:19:3c:a7:f5:d4:6d:aa:af:
                    19:35:36:6f:ec:da:59:dc:e7:d4:73:99:a7:ed:04:
                    96:be:a7:6a:ca:3d:3e:11:b6:b4:b9:85:da:e6:42:
                    ac:d1:fd:8f:cb:bf:ff:3a:0b:7d:d0:00:4c:9e:c5:
                    8d:d3:22:97:91:f9:a7:5b:b1:07:78:62:8b:cc:1b:
                    d1:72:68:ff:cb:66:c5:2c:4f:f5:40:34:8f:ee:6b:
                    13:77:1c:2a:a6:a5:68:f4:3e:2b:6d:7f:ca:c8:33:
                    da:d0:4b:c9:19:76:d7:23:de:a7:a6:1e:b8:de:08:
                    86:56:78:82:dd:bf:f1:3d:16:42:47:c8:64:53:fb:
                    61:45:a0:76:ec:96:80:71:8b:bf:f0:1d:41:89:b9:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E2:2D:C1:81:A3:BC:34:A5:7E:08:B4:A4:ED:B1:30:53:55:32:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7343705-a424-3f1e-a35c-37ee100d7d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.56.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:d3:95:3f:53:19:f1:ae:7c:4e:6f:ed:3c:30:73:df:6e:5c:
         4b:b8:27:57:e9:1d:b2:47:99:58:25:74:ad:ac:b1:1d:0f:04:
         a5:81:92:03:d9:e9:8f:b1:fb:d3:66:b0:d5:a3:30:9c:b7:75:
         57:43:28:54:a4:ef:36:1d:43:44:42:89:e9:0c:6c:ff:b2:ce:
         f6:99:bb:7f:26:b2:99:aa:c7:54:8d:53:2c:98:0a:a4:1c:02:
         fc:5f:b1:be:9d:c4:4c:7e:ad:e3:91:1b:bc:f4:45:00:a6:4e:
         32:ad:1b:73:7b:82:c8:99:5f:65:47:fc:4a:4d:34:92:2b:7f:
         82:71:a9:52:6e:5d:50:41:34:b8:2a:c8:23:47:08:70:78:36:
         90:f5:3a:df:99:05:f6:0a:41:7b:14:36:a6:f4:82:75:29:b2:
         45:66:c4:3d:48:96:8f:2d:8a:92:2e:b4:e9:83:43:21:3d:e2:
         72:6b:0e:2c:f6:7e:0d:c5:08:b3:0d:64:80:a1:0c:03:c8:11:
         86:0e:cc:ab:5b:ff:66:75:b5:ea:06:be:2c:9b:32:0b:2c:46:
         ad:e3:7e:85:80:40:52:d3:d5:a7:8c:b2:e7:fe:a7:aa:7d:67:
         b3:3d:39:2a:9b:1f:30:d6:2a:ad:b2:d1:64:3e:fd:c8:98:8e:
         f1:a1:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:55 2026 by rpki-client