Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
File:                     b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa (raw, json)
Hash identifier:          lIwRPJDjSuVDjPOz9EqqS/OMgT+HINEyDMTA22QD0oU=
Subject key identifier:   0E:51:7B:EA:57:6C:4B:40:9F:01:79:4E:22:E5:57:94:84:37:97:3E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75BC43D4C4D99031EDD80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        174.137.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5b:c4:3d:4c:4d:99:03:1e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=9953009d-ef42-441a-9fd3-20720a699533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:51:b1:39:ce:0d:f4:e6:96:55:4b:78:87:
                    ad:73:0e:96:d9:b7:42:3d:53:14:fb:f7:17:ea:bb:
                    f6:40:28:7e:44:50:af:f0:d1:8d:4b:3d:87:7b:c9:
                    c6:b0:21:29:c7:21:9c:b8:41:8f:61:8d:08:d9:5b:
                    8f:62:50:fa:17:82:e4:3a:93:8c:39:7e:b4:23:87:
                    29:43:10:65:89:43:99:06:9b:be:19:2a:58:50:a4:
                    ef:16:64:4e:23:06:18:a4:b8:aa:2b:87:f8:bf:0a:
                    f7:39:58:5f:d1:44:63:3f:d9:4c:bf:6c:77:1f:1b:
                    53:35:e6:48:ac:02:de:3e:fc:1c:d3:a8:ce:53:5f:
                    8c:ff:70:aa:30:2f:20:29:19:5a:7d:16:6a:46:84:
                    fd:fa:79:3e:cf:03:00:de:0b:02:38:c2:bf:6a:34:
                    2e:6e:19:43:cf:5f:69:ad:36:3a:ee:53:f2:77:5b:
                    dc:f5:52:b5:36:06:7c:c8:92:20:4e:a1:53:65:63:
                    20:87:10:d2:e0:7b:a6:a2:e0:6e:80:88:1f:41:d5:
                    ac:3b:85:b3:c7:60:9d:75:94:43:0e:aa:24:da:c7:
                    b7:87:c7:2a:15:de:3c:85:ff:27:d4:49:83:9f:8d:
                    5d:3a:3c:36:c7:9d:97:57:9a:fb:c8:93:c8:1d:b3:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:51:7B:EA:57:6C:4B:40:9F:01:79:4E:22:E5:57:94:84:37:97:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:37:d9:c7:af:d8:2a:4d:a1:47:90:7c:dd:27:f3:cb:34:34:
         9d:9f:c6:6c:2e:04:cd:7f:97:f0:b3:c4:15:e8:5b:57:b0:6e:
         bd:e4:37:fb:a1:f2:d2:57:65:bd:2c:0b:12:fd:7b:30:b6:3c:
         b2:84:74:ce:47:fe:da:b4:88:cb:8b:2a:5d:89:be:2b:0d:45:
         20:4f:93:66:de:56:4d:3e:90:82:6c:34:b9:66:92:00:2e:d7:
         8c:6c:2b:43:bb:de:ff:17:bc:28:e2:b7:dd:ea:81:a7:f8:94:
         d1:06:81:5f:f1:c8:0d:eb:ad:38:79:d3:e4:a7:4e:49:96:f3:
         03:1d:89:f3:22:8d:53:bc:28:e2:8b:e2:97:a8:5c:a3:b4:8e:
         6e:9b:d7:83:b7:af:c6:aa:a2:36:a5:d0:ec:bd:17:be:9e:6d:
         eb:8e:fd:d4:c7:fc:bc:f7:fc:4b:12:1a:b3:08:fb:5f:e5:e2:
         88:b0:a5:b9:ce:47:06:4a:54:a9:43:8b:1f:bf:3f:a9:7c:a9:
         3b:6a:54:33:60:54:87:d5:65:8c:59:b1:34:5d:ca:f0:05:be:
         a5:79:14:2b:e4:96:35:ba:b8:d0:62:27:12:fa:55:b8:38:b8:
         d8:e9:e9:5e:42:71:64:4f:53:62:73:e7:4d:ea:9f:18:3b:4b:
         f5:0d:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:20 2026 by rpki-client