Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
File:                     96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa (raw, json)
Hash identifier:          0tBsRpLT7F2DuwWlw8FoeedcY7l67t44t/8U+O9Zcrs=
Subject key identifier:   F7:21:FD:FB:5C:5A:1C:AB:D9:F3:5A:98:4C:C1:89:92:86:73:03:C7
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584CCBA751591A8D167185A2D0C0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     35758
IP address blocks:        216.158.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:51:59:1a:8d:16:71:85:a2:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=aa140a4f-636b-491f-bafc-dddad3d5383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:68:50:d4:de:dd:1f:45:8d:bf:54:eb:3a:
                    4b:2d:d3:2b:a4:f8:09:3f:aa:cf:b2:05:c7:51:17:
                    5a:0e:ea:9f:84:d4:25:81:a0:9e:e2:0a:79:fe:e7:
                    9b:a6:de:22:79:7b:e1:1d:a7:4c:cc:f4:eb:75:82:
                    60:7a:db:a2:66:b1:4b:28:fd:19:17:b2:64:31:e5:
                    61:f7:75:e9:03:8b:87:f6:73:55:3b:74:28:4c:4d:
                    cb:64:b6:35:3b:91:5f:b8:01:85:e1:38:f7:79:92:
                    9f:de:42:d4:9c:0f:cd:6f:64:7c:3e:9d:4b:9b:f2:
                    b0:09:e5:80:e8:15:98:0f:bb:73:e4:83:62:a7:64:
                    0d:b4:3b:11:3e:03:67:95:29:ac:40:e4:ba:4d:c8:
                    6b:44:0f:35:e8:39:7a:06:43:aa:1d:84:ab:77:15:
                    00:a0:c0:d9:1c:47:bd:01:e4:e6:19:32:cd:84:d2:
                    be:40:a7:d5:19:a7:74:f3:c3:6f:55:32:57:3c:14:
                    82:3a:98:95:2f:13:b4:8e:96:d4:fd:5b:30:a5:9b:
                    2f:b6:f6:b1:8c:7d:4e:b1:da:23:d6:cc:d2:27:1c:
                    52:d2:6f:ee:a4:6c:e3:92:a9:04:bb:c9:6c:ed:14:
                    74:74:1d:44:23:b7:7e:23:bf:22:b4:e5:7b:aa:3c:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:FD:FB:5C:5A:1C:AB:D9:F3:5A:98:4C:C1:89:92:86:73:03:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:de:1e:47:5d:d3:e6:3f:0d:42:8f:d3:a6:8d:21:10:4c:49:
         b1:45:7c:7a:83:02:6e:f0:0c:54:25:28:4d:ca:3c:d7:8e:61:
         5e:79:a8:7c:05:c2:7b:68:2f:91:23:82:0b:2b:65:99:b5:38:
         e0:81:2b:f5:14:ff:0a:a0:97:21:0c:53:99:41:76:e1:cd:a6:
         63:c6:90:24:9f:0d:be:94:7b:0e:83:47:9c:6e:f3:20:7d:13:
         6e:0c:23:1e:5c:ef:57:29:41:93:b9:f6:f7:26:76:0f:4f:65:
         fb:b7:99:25:c2:f1:72:14:ee:3e:44:f9:90:55:9d:3d:3a:f1:
         56:f1:7d:4c:86:f3:51:29:b2:0b:2c:4c:2a:22:44:b6:59:a8:
         ed:d9:4a:dd:d8:a4:5b:80:c3:17:d9:8f:18:19:5c:ee:c7:fa:
         47:9c:3f:14:92:49:2d:54:5b:02:eb:e1:05:91:40:d6:4c:66:
         f9:95:d7:fb:1d:dc:4e:9b:a1:65:47:b3:61:52:64:de:d1:8e:
         2a:e9:a2:70:86:5e:2f:d3:13:1d:e7:d9:4a:2d:22:91:31:4e:
         c5:91:54:da:44:41:62:34:0b:1e:1f:fb:45:fb:71:11:a0:a9:
         ae:1a:01:e2:58:03:c3:8b:16:47:4e:38:ac:62:79:34:04:53:
         9c:ba:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:11 2026 by rpki-client