Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa
File:                     4df5c292-7aeb-3af4-846a-67b39255c210.roa (raw, json)
Hash identifier:          L2yIRBfCX6vgoB/GxRc6x4TqwTzv7E7kay/RLnEMm7A=
Subject key identifier:   B5:45:34:15:9F:A2:64:7F:F0:21:38:CF:17:58:87:32:92:8F:99:93
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CE8F7755C9A3D4A4A3206AB80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     5769
IP address blocks:        207.96.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:75:5c:9a:3d:4a:4a:32:06:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=ab056b1c-6b35-4ed0-b8fb-aefc165d5f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:e4:ba:1d:5c:56:53:eb:e7:78:0d:26:8b:
                    98:26:a2:a0:b8:3f:e0:e0:52:9f:88:bc:4a:39:15:
                    1a:93:64:6e:6f:ff:5b:38:32:63:28:c0:65:59:a9:
                    79:9f:f9:6d:60:71:0a:d8:a5:cf:e9:24:c4:d7:54:
                    5e:91:e0:2c:99:c0:e2:ce:9f:a8:90:d7:e3:88:85:
                    c8:8c:ed:40:00:07:86:7a:1a:fb:39:e6:82:b6:87:
                    bd:a8:55:25:72:0e:1c:a9:82:89:5b:83:4b:56:4e:
                    0d:22:5d:78:b5:eb:0b:13:be:ed:ee:93:cd:f4:f3:
                    9a:ec:d5:e5:93:dc:3a:d4:86:01:6c:71:8d:f4:a6:
                    75:db:07:ff:fa:e7:33:81:be:7c:eb:6a:c1:4e:15:
                    16:09:35:7f:db:45:94:dc:dc:b9:5e:22:33:8b:03:
                    ac:45:f4:f8:3f:c2:63:05:9c:58:e3:59:f4:df:59:
                    45:e2:f6:36:dc:46:6b:7c:e3:3c:ae:18:59:c8:77:
                    38:0a:ea:98:80:a2:4c:97:ee:67:3b:5f:44:b3:b4:
                    53:b7:bf:c1:de:47:a3:d7:16:9e:19:58:a5:a8:32:
                    42:2e:70:03:13:63:8a:e9:5e:e1:a8:fc:f3:83:fe:
                    70:5c:c9:35:78:32:4c:52:06:e3:4e:d2:a0:8d:98:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:34:15:9F:A2:64:7F:F0:21:38:CF:17:58:87:32:92:8F:99:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:50:d7:10:a0:a4:32:40:41:63:b7:6e:c9:77:10:12:5f:e0:
         28:33:93:2c:bd:93:9e:c8:56:8e:1e:ae:1b:64:f7:94:53:71:
         d1:81:b1:da:26:1a:e6:0a:14:9e:1e:73:7b:e3:f1:a4:5d:04:
         72:21:bb:8e:b2:6f:87:de:73:b5:39:fe:cc:8e:49:81:be:b1:
         cd:da:3a:1e:ef:3b:06:b3:18:6d:5b:bb:3f:1e:eb:ab:bc:34:
         e9:8b:2f:49:ad:f5:92:33:06:50:fc:21:1d:e7:bc:e2:ec:40:
         5d:25:a0:67:86:20:18:a1:a6:64:8d:2a:52:62:5f:5e:b9:7a:
         20:8e:4a:a4:da:0c:06:ce:10:51:1c:2b:b4:2e:98:94:93:a4:
         58:48:40:51:ca:70:37:2e:42:51:c6:6b:6f:8a:4f:b9:55:fd:
         8a:51:e6:4a:90:b4:16:87:3e:59:5c:ce:78:f8:ca:27:02:3c:
         01:e1:7b:86:b1:29:9c:99:39:8d:22:1b:44:20:54:9b:c7:37:
         cb:9b:bf:4c:72:9d:a5:7d:5c:25:c9:f9:b8:a9:dc:1c:a6:d0:
         b7:b5:45:55:4e:e5:5b:5e:9d:5a:a1:c8:60:0a:5e:d0:08:11:
         16:e3:be:e9:72:e6:ce:3a:c3:2c:fa:be:a6:f8:e1:3f:bd:20:
         31:8d:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:08 2026 by rpki-client