Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
File:                     b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json)
Hash identifier:          1Ke32eJVRhEtTSJLcqAX349KCQCzg5ZyA8NdEezYrMk=
Subject key identifier:   D2:23:E6:0F:54:05:92:98:65:A3:CE:98:D6:26:D0:AA:52:BA:24:45
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584CD99CDCA9BEB750721D44DAC0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     19905
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:dc:a9:be:b7:50:72:1d:44:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b4284314-ef48-432c-b1e7-b02929f031bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:fd:0c:18:8c:61:d7:69:3c:d0:d4:e0:af:
                    75:bb:2c:0e:44:ba:81:87:f0:8b:9f:5e:a2:5b:6e:
                    06:c7:93:2b:2f:84:22:c3:96:00:ff:ba:83:12:9c:
                    93:59:92:18:2b:9a:bc:9e:76:e4:8e:06:3e:a9:be:
                    b4:67:96:f5:be:e1:b8:72:e4:7f:81:a2:55:61:d6:
                    4f:ee:44:35:0a:fb:be:b2:95:75:e3:48:5a:37:a9:
                    34:5b:b6:d3:25:b0:24:21:dd:10:11:f6:6c:94:ac:
                    60:d2:1e:08:dc:82:bc:a5:8f:d2:eb:1b:d2:85:7d:
                    18:f7:38:80:d8:e5:a7:85:0d:51:6f:25:9b:62:19:
                    24:d9:c5:8c:e0:b2:8b:2e:51:5f:39:f8:d7:8f:f7:
                    22:9b:85:5d:d7:5a:23:91:8f:05:ca:78:7d:35:77:
                    6a:a0:dd:f0:84:70:7e:a3:88:83:cc:aa:da:99:70:
                    61:70:75:12:64:29:e1:cc:78:98:43:54:d8:f2:74:
                    ac:6f:00:b8:37:41:78:74:21:da:31:49:39:66:ae:
                    ee:56:3e:20:00:94:72:9e:9a:36:8f:88:87:83:d1:
                    a6:68:8a:6a:33:3a:11:b9:f8:2a:4f:98:1b:60:f9:
                    ce:5c:5a:a5:78:ef:67:0c:80:c5:d6:eb:c7:0f:e2:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:E6:0F:54:05:92:98:65:A3:CE:98:D6:26:D0:AA:52:BA:24:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:ae:f6:00:53:af:a7:ff:7a:bf:fb:d2:9a:4f:d7:2d:eb:
         98:1e:16:05:4f:df:14:6d:e7:90:f0:4a:ac:3b:c0:d9:b6:2d:
         b7:34:6b:ad:bd:d4:e9:f4:32:39:c7:f8:60:59:ec:cf:12:e4:
         aa:88:9a:5e:c4:8a:e3:76:48:ad:ac:80:cb:15:d9:58:4d:ab:
         20:5a:aa:8e:26:82:f1:53:c8:31:f6:63:90:6b:34:4a:93:41:
         48:8a:c5:85:e6:b8:d2:98:d0:b4:d5:0f:07:42:6b:c2:07:f6:
         c3:4b:d6:e1:13:f9:94:f5:61:3f:5c:ef:71:e6:ac:9c:f3:aa:
         53:1c:0d:0f:47:79:31:46:7b:bf:9a:7d:1d:09:0d:a0:3c:4b:
         d4:ef:50:b4:eb:f3:3d:45:08:65:fc:72:78:88:85:3b:a1:18:
         b3:ed:c2:f7:0d:51:6b:a3:00:5b:b3:29:2c:27:1a:22:6c:c0:
         db:a2:46:58:15:57:2a:a9:43:ac:f4:ea:f9:2f:16:1c:28:3c:
         48:41:6a:a0:50:38:13:8f:52:77:61:f6:46:e7:6e:97:6f:d4:
         71:36:dc:29:ba:3b:0c:71:33:74:fa:0c:63:b2:a3:5a:f3:78:
         04:03:df:b6:07:e4:cd:35:44:47:ce:fb:dd:30:e3:ed:49:44:
         41:97:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:32 2026 by rpki-client