Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
File:                     e287f98a-b890-3428-ba99-f795e90bb559.roa (raw, json)
Hash identifier:          qZ9rCpHrAc9HeJDW3hhOI4fz+m3lLusIESekU3BSu1k=
Subject key identifier:   2D:95:17:B4:85:BA:10:4F:6D:F1:5E:AA:10:9E:4E:B8:10:47:5F:23
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F4328584D00B2516A317B3154ADB55960
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     18540
IP address blocks:        170.62.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:51:6a:31:7b:31:54:ad:b5:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d78e7619-9290-4083-b083-327c1d9099f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:f0:ce:e8:00:e9:7a:87:cf:1e:6c:72:22:
                    94:36:e1:ad:00:44:08:2e:2d:fb:57:f2:92:71:f9:
                    ba:66:1b:1f:04:a4:4e:3d:21:a5:6d:c3:60:5a:83:
                    0a:7c:35:17:a0:c2:fe:03:9e:3e:5d:62:9f:e8:54:
                    84:67:35:05:d1:64:a1:bb:8b:0c:fd:bb:52:d8:99:
                    9c:40:f0:e1:1a:cc:fb:11:16:f0:ec:ff:e1:17:f8:
                    2a:d5:24:b4:07:3f:73:ab:ad:05:6e:a2:e3:f9:60:
                    fe:6f:90:22:4d:9a:8d:48:88:72:cf:c6:d2:24:f0:
                    83:e7:75:7d:96:4e:b4:72:0e:d1:92:eb:8a:6e:7d:
                    19:e9:51:5e:c0:72:b7:42:62:e0:82:87:f2:cf:3f:
                    75:54:80:d1:5a:c9:20:9d:bb:1a:dc:98:06:96:7b:
                    f0:00:73:7f:fd:37:0e:34:4d:7c:dd:e2:95:d4:8e:
                    eb:03:c6:f6:10:ca:ee:31:4b:40:2c:9d:f7:fa:61:
                    c7:61:32:a5:3c:2f:e3:c1:14:ff:d0:1e:fb:1e:db:
                    8d:ec:8c:cb:78:66:e9:b0:3e:e9:46:95:3a:8a:08:
                    08:95:e0:d3:40:29:74:e2:22:88:69:bb:b1:14:0e:
                    53:44:1f:3b:84:05:6f:f7:31:ac:ac:f6:06:2e:d1:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:17:B4:85:BA:10:4F:6D:F1:5E:AA:10:9E:4E:B8:10:47:5F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:4f:23:c7:84:00:c8:6c:7d:db:0b:64:cd:3e:34:64:16:
         bf:b2:ef:a8:8a:06:95:67:31:a9:d6:7f:af:ab:bf:16:63:ad:
         1e:cf:7d:46:69:0a:da:cc:04:e2:9e:12:84:57:b1:76:9a:de:
         ca:a7:24:5a:5b:ff:5b:60:22:79:41:a8:8e:0e:ff:9e:8e:41:
         c8:d1:98:d8:f0:ef:b6:c8:58:b0:e6:0d:7a:28:b4:8e:2f:2e:
         50:08:80:c5:36:c7:fa:7c:23:4c:f6:cb:7f:12:c6:a6:db:c2:
         48:7c:9e:fa:48:95:22:10:df:6b:6a:84:c2:47:d7:79:7e:c1:
         cd:14:49:ed:06:db:33:f4:bf:b4:49:d4:bf:7e:44:e0:17:2a:
         d7:ea:70:3a:06:37:8c:a3:09:57:b1:5c:26:b0:3e:ee:0a:94:
         53:b0:47:c5:aa:db:74:2c:35:a8:49:d0:b9:b1:d8:92:92:5e:
         0c:a9:4a:b6:79:d8:dc:70:f5:af:29:67:64:25:7c:1b:37:4b:
         e5:93:78:7c:57:fb:e9:37:38:f3:f6:c5:33:20:77:33:ed:fd:
         78:0c:5d:99:54:32:f9:eb:1f:8f:b8:60:29:67:5d:2b:ed:3e:
         74:f6:d4:d5:d7:61:1b:b7:68:b2:03:a9:a2:d2:d8:fd:41:19:
         84:af:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:57 2026 by rpki-client