Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa
File:                     b019afb5-422e-3f8a-bb16-3035ee439f20.roa (raw, json)
Hash identifier:          UGdc5F2P6KXep1EJuO+Ecxh0no3PBgN4yd0MPJse28Y=
Subject key identifier:   B0:56:36:B3:9E:D4:03:D9:41:CC:B8:33:EA:FC:B1:AE:72:94:54:C8
Certificate issuer:       /CN=6e310dbe-729b-489e-8806-73d3be6c974a
Certificate serial:       010D0C9F4328584CD6D20E9ABD5AD47C08A4E280
Authority key identifier: 43:3B:3C:87:BD:7E:52:87:45:B0:62:F7:23:66:B1:18:4D:A4:28:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     54869
IP address blocks:        162.210.76.0/22 maxlen: 22
                          198.105.224.0/21 maxlen: 21
                          216.126.215.0/24 maxlen: 24
                          2602:fff4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0e:9a:bd:5a:d4:7c:08:a4:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e310dbe-729b-489e-8806-73d3be6c974a
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=091cec5a-5d45-4301-bf5e-494779158ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:cb:92:c1:9e:a9:56:03:c0:66:8d:3a:6d:
                    b5:0e:e0:9b:36:f9:27:32:ed:f0:77:f2:0d:cf:10:
                    ef:66:c0:8b:5f:2e:92:7b:a6:d7:eb:d3:77:fa:1c:
                    bc:27:ad:42:b8:da:fc:12:54:34:f9:b2:41:73:1d:
                    3d:22:f4:57:f4:6f:c4:6e:e9:50:1b:fe:72:6e:3f:
                    49:33:33:ee:43:96:18:11:c8:0e:a8:94:39:39:fc:
                    dc:27:83:ae:19:55:1f:dd:4c:d1:e9:be:d6:2e:fd:
                    31:2b:bc:49:22:6f:08:ae:65:62:80:f1:06:fa:07:
                    48:33:01:14:69:37:c5:4c:26:3b:cf:34:cd:82:be:
                    14:c4:be:e6:fb:f3:a3:d5:bf:7e:be:7f:d9:da:2f:
                    d3:a1:2f:86:e8:97:63:e6:20:61:de:82:4e:79:74:
                    0b:e6:c0:6e:7b:79:98:7e:84:e5:94:72:94:2f:95:
                    16:06:06:11:a8:50:44:17:ef:68:0c:9b:da:b5:03:
                    50:51:6b:db:a8:44:b3:89:69:81:44:05:30:ff:a4:
                    b4:cb:e5:6c:63:b8:f8:cf:03:b2:f2:4e:2f:8c:f2:
                    2d:16:29:99:b2:5f:fb:b5:5a:01:73:cf:5b:5e:99:
                    f8:1a:d3:5f:78:df:f4:d1:37:bb:d3:07:50:a8:44:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:36:B3:9E:D4:03:D9:41:CC:B8:33:EA:FC:B1:AE:72:94:54:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/b019afb5-422e-3f8a-bb16-3035ee439f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a/6e310dbe-729b-489e-8806-73d3be6c974a.crl

            X509v3 Authority Key Identifier:
                keyid:43:3B:3C:87:BD:7E:52:87:45:B0:62:F7:23:66:B1:18:4D:A4:28:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6e310dbe-729b-489e-8806-73d3be6c974a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.76.0/22
                  198.105.224.0/21
                  216.126.215.0/24
                IPv6:
                  2602:fff4::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:4a:d4:2b:6d:5e:bb:1d:d7:e6:f4:62:e9:8a:82:11:9d:
         d8:a5:74:0a:b1:2d:54:d8:50:a7:38:63:f3:fa:74:9d:55:b0:
         76:89:5c:19:c4:ce:72:f3:4c:5d:42:21:f6:d5:48:1a:e3:a8:
         5f:0d:50:c8:50:30:d1:96:27:78:94:c4:d8:14:8d:d6:37:31:
         b4:93:dc:9b:ca:a0:31:21:fb:80:a2:2f:0b:b4:f3:6f:1c:c8:
         28:bd:be:67:7e:ff:3b:1c:0a:b9:2e:31:73:6d:b8:e5:06:a7:
         52:b6:54:60:4e:38:1d:20:c3:96:6a:32:5c:1a:d7:58:91:b4:
         98:b0:b2:44:a9:ea:5b:36:70:b1:28:b2:31:19:31:3e:60:3c:
         44:56:49:f4:dc:4b:9e:f0:00:1b:7a:1d:36:6a:a1:67:34:e9:
         d7:de:e5:fd:ae:19:d3:3b:13:a4:ad:8d:fc:66:1e:d0:4e:70:
         54:a7:91:88:e0:33:44:36:a2:f2:94:bc:b6:1f:d6:2a:75:15:
         0e:8a:49:57:36:1b:eb:ba:cc:8b:6a:3b:98:a2:a2:a5:f1:e7:
         84:f8:0b:36:c1:02:a8:46:d9:08:5f:6b:3c:f9:bd:84:ef:7b:
         2a:d4:38:7c:ea:b0:3a:95:ea:56:5b:78:46:43:08:fb:68:4e:
         9e:0e:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:40 2026 by rpki-client