Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/850b6ee4-0f27-3171-8913-95bd992b11b4.roa
File:                     850b6ee4-0f27-3171-8913-95bd992b11b4.roa (raw, json)
Hash identifier:          2MfUgG9wTlNQOZvdmTPLJgZgYEyYjyDt3FSyI+TnB5A=
Subject key identifier:   F8:66:D4:4D:16:A3:FF:0F:2F:1A:03:26:C6:3B:EB:24:F5:1E:72:71
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF1577F169E35146A69C97BC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/850b6ee4-0f27-3171-8913-95bd992b11b4.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     2924
IP address blocks:        207.96.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:7f:16:9e:35:14:6a:69:c9:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=a5273c3e-9a0d-48a1-b226-a7432d19ef2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:23:53:96:e6:aa:1a:78:85:49:b6:9f:83:
                    0d:4a:b5:d9:fc:b0:0a:d5:56:34:d3:f9:64:00:88:
                    cb:fe:1c:8b:f9:95:96:0b:7b:bd:75:03:3b:f6:b2:
                    db:0f:bc:34:8e:45:d3:80:ba:16:12:1a:a2:71:e2:
                    58:9f:15:2c:fb:c2:59:d4:e3:67:e7:a5:7d:2d:ee:
                    be:d4:3e:2e:b2:47:c5:2a:28:bc:82:6f:cb:de:17:
                    c6:45:d6:37:03:48:c2:a4:93:82:de:77:59:6c:85:
                    6d:27:d8:34:fa:9f:17:7d:58:a4:65:9e:90:ac:71:
                    07:ab:0b:75:58:1b:26:20:45:d8:9b:3b:82:85:b2:
                    2b:a6:58:df:8f:7f:08:03:50:60:ef:83:1c:b3:95:
                    e3:15:91:89:40:80:0b:c7:2b:90:5c:b6:05:3e:c5:
                    1e:c1:d7:09:d9:68:75:78:fb:c8:bb:fc:04:a9:e6:
                    26:21:fd:7d:de:4a:ba:98:19:c4:f2:c1:8d:39:fe:
                    81:a9:6c:ef:39:00:18:36:f6:86:12:3d:bc:21:ae:
                    99:93:92:32:f5:b3:12:bb:a9:bd:53:9b:8d:4d:76:
                    eb:f4:47:67:df:80:ff:99:d1:4b:67:63:c2:df:89:
                    f2:99:6a:dc:6f:10:d2:f0:c4:5e:b3:9d:52:af:84:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:D4:4D:16:A3:FF:0F:2F:1A:03:26:C6:3B:EB:24:F5:1E:72:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/850b6ee4-0f27-3171-8913-95bd992b11b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:c6:04:ea:12:a5:f0:6b:49:b7:a7:0e:24:20:0c:9b:fa:
         2c:2c:56:2a:62:86:c4:71:7f:90:66:4e:90:fb:5f:3f:86:b6:
         16:44:db:ad:f9:cc:96:b5:05:ae:2e:e1:da:d0:3c:60:3f:c4:
         71:af:06:bf:5c:fd:75:ec:dc:7e:45:6c:ac:ac:e7:14:18:fe:
         72:92:b8:31:3d:7a:09:0e:65:f2:ed:9e:ab:37:e3:a8:ea:61:
         fc:86:36:07:be:da:cf:a9:b0:4f:9a:44:12:04:9e:8f:a4:de:
         60:a9:33:d3:62:09:a0:37:8c:4c:18:de:c7:eb:df:39:63:74:
         a2:bb:ae:0e:3e:56:f5:01:50:75:8d:64:e4:8f:87:e6:8f:76:
         7d:42:1f:2e:07:23:00:99:f4:9b:74:c8:df:b9:44:67:b3:17:
         dc:f3:8b:4d:87:7e:24:34:ac:e5:3d:c2:7f:16:1a:03:93:e7:
         7b:0c:01:25:6f:ee:b0:83:25:46:e9:ff:fe:99:38:40:be:cd:
         75:8c:0f:60:4e:c8:7a:bc:ce:b0:d0:c2:3e:d1:6e:82:a3:3f:
         ee:f6:36:1f:a3:05:95:f0:92:1e:9d:1f:a6:7e:74:83:bc:a4:
         d9:c6:9f:2c:71:2c:41:61:68:c7:66:6a:c8:f0:5b:60:12:a3:
         6b:28:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:42 2026 by rpki-client