Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa
File:                     275dad88-147b-3524-8dd1-125da05ff542.roa (raw, json)
Hash identifier:          hKACbvdKKR3ah3wGypYkQNG05Kds/3R3y4+pPPxTTDg=
Subject key identifier:   2F:54:29:87:64:E3:72:19:93:54:49:D7:9C:F8:C3:40:84:CF:F1:2A
Certificate issuer:       /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Certificate serial:       010D0C9F4328584CD407567CEB54438EA6EF2E60
Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     400519
IP address blocks:        209.25.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:56:7c:eb:54:43:8e:a6:ef:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=526a4a52-bec5-4694-b604-f118621d89ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:28:07:c0:b1:51:e2:b1:a3:95:da:34:d5:
                    48:8e:23:1a:ec:38:00:98:a1:75:54:ad:be:b7:00:
                    c4:36:1e:11:1b:f7:40:a6:27:6f:55:97:00:71:89:
                    bc:62:18:eb:53:7f:21:e0:44:4a:d8:33:49:57:e1:
                    ab:2e:4c:df:dc:21:68:70:83:13:d9:cc:20:65:64:
                    b8:be:f5:3d:11:b2:7c:f5:d7:0e:89:3e:04:03:97:
                    19:4c:c1:2d:89:16:21:69:37:53:7d:de:84:71:9f:
                    e6:37:f7:93:a7:ce:15:fc:86:2a:96:84:0d:03:cc:
                    9a:bd:ad:25:70:fc:28:90:0f:66:32:22:e3:db:23:
                    a9:b4:5c:b8:86:e8:31:a0:3c:4a:65:4d:7f:7b:01:
                    cf:50:88:7d:d8:c5:84:49:c3:77:da:42:34:66:04:
                    c0:a4:d4:36:99:51:9a:35:9d:8c:8d:eb:aa:9e:0e:
                    05:7b:fd:23:59:ae:16:5b:16:9c:45:6f:e0:78:fe:
                    d8:e1:ab:79:75:70:59:bb:1e:cb:83:35:af:96:87:
                    8d:6c:5d:3e:19:14:aa:94:b4:a9:b7:b3:34:5c:29:
                    89:1f:d1:45:06:5b:88:45:f9:3c:bb:84:99:d5:3d:
                    b5:ad:40:10:2d:37:cf:ac:a9:e4:25:14:9c:52:25:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:54:29:87:64:E3:72:19:93:54:49:D7:9C:F8:C3:40:84:CF:F1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl

            X509v3 Authority Key Identifier:
                keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.25.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:c7:6d:56:1a:e0:26:dd:3d:4c:ca:37:01:ab:91:6f:54:
         5a:00:17:f8:53:3e:70:2a:ee:0d:95:6e:4a:51:c5:2a:f3:60:
         ae:04:b0:e6:67:b4:47:81:36:ea:a7:db:f7:f7:86:f8:af:79:
         9d:91:5a:9d:12:a8:72:89:34:15:a0:5e:87:a3:26:4f:ed:68:
         61:0f:d3:93:15:5b:87:14:8d:dc:f3:b1:83:47:ac:98:38:02:
         bf:72:e1:e0:12:cd:c9:bb:99:21:f9:6b:e7:2a:f0:84:54:95:
         8e:27:db:fb:6d:7b:d1:ed:98:1e:ca:fc:b4:10:da:52:d4:e0:
         c2:83:33:7f:76:a9:d3:fa:b0:c7:7b:12:9a:c5:63:1f:ae:04:
         cb:8b:f5:25:f8:45:71:20:61:7b:fd:4b:8d:43:3d:f0:3d:31:
         0b:a6:53:ce:e1:7b:73:ca:d5:de:ca:e0:8d:a2:f7:87:05:e3:
         cc:78:90:67:48:3f:22:a5:6d:74:2a:0b:56:47:56:6a:a2:1e:
         48:4b:96:e0:4f:60:a5:0c:d9:07:6c:25:6e:5b:ad:6b:26:de:
         e4:e6:1a:e3:24:87:58:43:e0:3f:26:22:d5:a4:91:65:06:1a:
         d9:28:18:39:2d:9e:64:58:74:74:b1:0d:02:8d:ce:3d:d9:46:
         23:26:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:33 2026 by rpki-client