Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
File:                     10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json)
Hash identifier:          Cb6DqDzcfTlcEQpGYvIwHOV4cqj2Z3JxVD0UUvM4D7E=
Subject key identifier:   19:62:39:1A:93:CA:4B:BD:CE:5E:02:E3:87:0E:17:1C:74:7C:AD:6E
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584CFC8233D24754AC7EE5F2A900
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     125
IP address blocks:        199.64.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:33:d2:47:54:ac:7e:e5:f2:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=96e4b23e-f4bc-48b3-8a7e-f654ef0e5476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:e5:a1:14:b8:f8:a7:82:0e:0d:24:21:14:
                    9e:29:23:d9:63:10:f1:59:b1:0b:70:af:a2:fe:79:
                    25:e8:48:63:ba:43:cc:9e:85:0f:a3:cc:42:1c:29:
                    10:e6:04:99:8b:64:e8:d9:5a:c9:19:0d:a2:8f:60:
                    82:5b:a8:8c:43:20:db:51:a0:f3:33:30:c6:53:57:
                    9f:9a:40:28:0c:79:9c:29:9f:2d:4a:99:da:2b:2d:
                    53:00:b1:a4:34:e1:58:24:3e:95:ce:62:08:f9:94:
                    81:8a:cf:f1:a6:c2:a2:36:04:9f:81:a1:13:72:6a:
                    87:86:dd:b0:4e:ef:50:6b:55:52:72:30:d1:32:8e:
                    36:99:ad:f3:c0:de:e9:95:1d:87:9e:85:a0:5f:a1:
                    6d:d6:85:49:ba:14:61:8f:26:11:d8:d9:8a:31:78:
                    0f:27:e2:c5:97:8d:26:8a:0c:12:10:99:a2:f6:c4:
                    69:a3:5d:64:ac:85:28:32:68:07:45:42:63:a8:c4:
                    cf:f4:cb:8c:d5:e4:22:91:3c:66:ee:54:ca:57:be:
                    8c:a3:8f:be:49:31:a6:c6:b7:92:9d:1a:c9:8a:66:
                    76:0c:b7:3c:4a:ce:56:69:3a:b6:24:f0:af:d7:a3:
                    e0:72:b6:45:36:d3:29:48:25:09:51:66:b2:e9:30:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:39:1A:93:CA:4B:BD:CE:5E:02:E3:87:0E:17:1C:74:7C:AD:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:a6:0b:6a:c4:8a:35:3e:60:4d:6e:42:0b:b8:15:d4:c7:
         0e:78:22:ce:23:a6:0f:97:f9:0b:a2:bd:c1:23:03:db:cb:18:
         b6:81:ea:85:82:9d:42:ad:30:fe:6e:da:88:2b:0b:6a:3c:03:
         e6:aa:7b:62:03:c5:f7:4c:20:e7:8c:a4:c6:5e:2a:1e:d6:6a:
         89:93:cd:73:a1:05:e7:b2:80:06:12:57:f0:04:ac:bd:98:ec:
         26:b0:a7:ee:f7:3a:f0:7b:16:3f:5c:7a:77:e9:e0:dc:94:ba:
         06:d9:f2:d6:1d:4c:25:d1:7f:8c:8e:5c:1a:9b:ff:ee:1b:a5:
         c2:65:16:40:04:bc:4e:57:ca:14:11:19:d4:63:ef:a0:d3:57:
         c3:62:f1:66:68:30:63:80:95:22:c9:82:a5:c0:66:ac:8c:de:
         d0:53:c1:6a:e5:97:5f:1d:ea:00:e9:4a:e7:0b:19:89:76:2f:
         36:63:dc:6f:94:79:30:f5:37:c9:05:d8:ab:5e:f0:fb:bd:28:
         22:38:bc:a4:95:a8:63:d1:00:70:3f:ed:1f:c1:d5:b0:2a:b6:
         1b:fa:54:5f:43:66:fc:f8:7c:d9:c5:c2:c6:8f:5a:65:ce:74:
         55:68:09:1d:71:13:c6:1a:94:83:ef:83:d2:5e:7d:ca:88:95:
         b8:47:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:48 2026 by rpki-client