Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa
File:                     49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json)
Hash identifier:          GDba3lgM8exr3UN9Sx4eGL5B3HSOCTUvaZI1cjOBrJ8=
Subject key identifier:   1A:F4:8A:E1:A6:DC:4F:88:B1:7D:77:BB:27:62:01:F6:C4:72:56:D3
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CE0978ADE00877C53C460C49C
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22652
IP address blocks:        192.252.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:8a:de:00:87:7c:53:c4:60:c4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=c1f85f7d-2033-4933-b53e-610252239c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:95:a5:11:ef:2e:18:3a:a7:31:8e:fe:bf:
                    7b:7a:c5:97:55:23:4d:48:fa:4f:03:81:84:dd:51:
                    57:f7:27:55:14:d0:9e:49:66:fb:a2:7a:a2:53:c7:
                    11:17:9a:d8:ce:c3:e2:7b:f5:e5:a6:cb:8a:3b:0d:
                    97:24:90:41:5c:8d:cb:98:55:52:a2:0a:a1:10:4b:
                    4d:d9:f3:da:1d:2e:0f:5b:ea:9b:91:86:05:7b:29:
                    77:84:51:e2:e4:aa:1a:f9:1b:de:39:67:bf:b6:9f:
                    bc:96:68:e4:f2:37:ec:63:00:63:f1:1c:c9:8f:5c:
                    db:86:12:d0:3f:21:43:71:40:0e:a8:e9:51:60:04:
                    9e:9c:76:43:65:e0:d0:c7:53:ee:97:9a:ae:69:7e:
                    65:01:5f:54:53:df:a4:2d:fe:1b:d3:2e:6c:94:50:
                    40:29:04:87:8a:13:f5:5b:60:e6:86:9f:94:ef:af:
                    5e:01:77:2d:4a:c0:a8:3a:e6:53:f3:18:47:b0:56:
                    16:cf:62:22:49:7e:89:42:7d:f0:d0:7d:0e:ff:2b:
                    28:41:a8:97:1d:4b:21:21:79:d5:4b:b1:18:d7:6c:
                    35:d1:8e:7a:d1:ce:f2:36:96:d6:d0:49:e3:8b:e8:
                    b5:72:09:69:ce:3d:c1:ff:c4:b8:5d:aa:1c:f6:46:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:8A:E1:A6:DC:4F:88:B1:7D:77:BB:27:62:01:F6:C4:72:56:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.252.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:2e:b3:e6:f3:ff:16:8d:75:2c:d8:43:bd:85:7b:5d:49:
         52:8a:7f:ee:e0:eb:62:7e:16:6f:1e:51:37:60:66:0a:d2:47:
         d2:e1:da:25:f4:ca:35:67:79:14:da:bc:72:fd:01:d1:8a:af:
         6c:b2:f1:5b:6b:03:af:fc:ec:4e:b0:43:61:8a:3c:f1:fa:05:
         26:86:52:57:7b:6e:a7:49:dd:36:22:e3:c9:c8:6f:11:a5:f9:
         af:45:4d:b7:a4:c7:a3:ac:4a:dd:13:37:06:15:7c:eb:c1:30:
         25:b0:20:cf:8d:b5:68:cb:40:e8:15:62:b9:d9:d6:3d:17:8f:
         ac:0d:12:d1:d1:80:fb:d8:f8:fe:d0:ed:ea:2c:1e:3d:30:b9:
         c0:5d:e2:05:ac:f5:3e:c3:48:83:d3:a9:bf:b1:a7:e5:cf:3c:
         2f:a8:40:49:ab:b3:7c:8b:53:c2:ad:48:a8:9c:07:fc:ad:e1:
         28:9e:9d:85:38:ed:f2:a8:a6:bb:c5:3a:b6:7f:71:70:50:85:
         bc:90:b8:94:4b:fc:3b:cb:89:db:04:0c:56:1f:72:8a:29:6a:
         21:c0:f7:f0:a7:2e:ad:d2:24:35:48:9e:38:2a:b5:46:4e:af:
         85:61:8c:4e:30:c6:3f:2b:23:dd:ed:d0:d8:1f:90:ee:bb:4f:
         69:d8:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:56 2026 by rpki-client