Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa
File:                     44f31820-9493-3528-980e-539d99895685.roa (raw, json)
Hash identifier:          pzgVdPX9959z/GySeS3d6UMlHZTCkQsYLIBcjs5OUt4=
Subject key identifier:   FE:56:1C:92:32:F3:80:73:52:FD:AD:9D:A8:8C:E3:B7:0F:72:F5:80
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CDDCCF29DC8CE1CE936D1A880
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22652
IP address blocks:        208.88.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f2:9d:c8:ce:1c:e9:36:d1:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=ce88ed8e-88bf-41eb-afa8-ac06ef719c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:70:41:f3:2b:80:e3:b2:77:36:dd:c8:28:
                    48:33:45:b6:d2:2a:d5:bb:d9:99:7a:31:f6:50:97:
                    6e:e5:88:2e:f2:83:da:50:b3:1a:03:a2:b8:ef:0f:
                    c7:39:49:ba:ed:80:90:76:46:46:69:41:b4:94:91:
                    99:a7:79:b2:e6:4a:ce:7e:65:e2:45:39:1c:ba:dd:
                    10:f1:54:51:34:a6:7e:29:9d:46:f0:15:b6:64:77:
                    e9:8b:81:2e:8d:4c:47:3c:27:86:55:83:0d:07:97:
                    c2:69:78:a1:df:1d:38:a1:14:86:35:b8:02:42:aa:
                    a2:05:b0:39:3c:6c:73:b0:2c:19:8d:0c:81:69:a9:
                    37:e7:2d:24:28:48:42:50:4e:68:d8:4b:cb:76:ce:
                    f4:31:af:63:be:42:fa:ae:b7:5f:3d:2f:0a:55:33:
                    ac:48:3f:40:f6:69:99:aa:2d:61:19:00:8c:6e:6c:
                    81:ea:82:fd:82:70:ce:1d:cf:6c:de:48:20:cc:67:
                    c2:85:57:69:2f:09:75:b0:45:3d:7f:47:f6:7f:97:
                    de:c1:d0:de:e8:75:97:ee:6c:7e:84:38:1b:0d:07:
                    c7:cb:0b:b1:3b:08:a9:9c:63:d1:3e:a6:9f:02:8f:
                    8a:9b:eb:b6:99:83:6b:79:51:e3:06:b3:e8:3b:47:
                    88:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:1C:92:32:F3:80:73:52:FD:AD:9D:A8:8C:E3:B7:0F:72:F5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/44f31820-9493-3528-980e-539d99895685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:74:2f:53:ec:c1:4d:40:01:96:59:f9:54:32:c1:fe:70:18:
         04:2e:98:21:0e:fa:82:9d:0f:d6:10:c6:d0:ba:4e:f8:c4:22:
         2c:d3:43:aa:be:d0:10:6a:08:6e:78:5c:7e:de:e9:65:00:a4:
         85:4e:9a:9d:f3:4c:a4:e8:1b:e6:1e:12:2d:7d:a4:7b:79:5b:
         db:02:06:66:9d:33:e8:23:7b:a2:f8:35:29:e5:56:ec:83:f0:
         22:b0:b2:03:31:67:05:29:17:0b:77:d3:20:3b:98:5c:3b:27:
         09:19:ee:7f:33:04:24:7b:0d:f6:e4:ac:02:af:0b:e5:b0:d1:
         c0:c1:86:a0:2f:cd:b2:f4:0b:00:06:eb:93:0a:f2:b2:6e:82:
         28:5b:0e:da:b8:d5:50:86:c7:9a:7d:3e:7e:4e:c9:be:60:e3:
         8d:f1:34:98:96:5b:96:bc:12:15:7c:9d:3d:5c:f1:99:57:d8:
         68:42:63:e2:de:6f:53:94:fd:2d:b6:a6:9c:e2:58:55:96:48:
         d3:f9:e8:25:f3:09:47:61:7d:3c:3b:cd:6a:eb:f5:de:b3:4c:
         8b:44:d8:ae:08:53:28:55:8c:06:04:f7:25:32:a8:55:3a:2b:
         d1:d4:5b:34:f8:ca:aa:8e:0d:70:54:a6:c9:74:64:55:76:f0:
         5c:1e:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:15 2026 by rpki-client