Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa
File:                     2e383e3e-0344-3c61-8718-33b9fa1deed1.roa (raw, json)
Hash identifier:          4ZytL2bThhO6xepzSq/VRfA0ZgkWvEHmRtRTgwd0ON8=
Subject key identifier:   4C:4E:B0:CF:55:BE:DA:C9:A9:FC:19:CC:12:D0:16:50:6F:0E:DE:C0
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584CD13CAD7C23CA55511051DF80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     11290
IP address blocks:        208.118.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:ad:7c:23:ca:55:51:10:51:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=26793ca8-6e6b-4130-a812-1b13ff587efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:eb:ed:c2:07:2f:5e:33:ea:f4:99:08:6a:
                    6f:fd:f8:1e:01:5e:62:5b:3d:40:be:39:38:2d:06:
                    5a:24:ff:a2:85:25:ca:d7:e7:ec:00:3f:e1:be:1d:
                    96:c1:d1:08:e9:90:b1:2b:e0:03:e5:75:60:fd:d5:
                    5f:f5:40:e2:e5:c9:3b:d3:33:9a:41:d5:fc:a5:88:
                    b8:24:3b:b5:f8:10:6c:45:5b:ca:3c:cf:08:a5:38:
                    61:cc:c1:61:09:ae:a4:84:a4:ce:4d:95:97:e5:2b:
                    f9:c6:66:30:7e:ae:52:06:7d:2e:cb:a9:64:80:86:
                    38:36:e9:27:bc:b8:49:65:59:ed:c4:fd:62:7f:9d:
                    1f:fa:17:b8:7a:60:a2:17:7e:08:a4:3b:31:a8:4f:
                    3c:51:d1:1f:33:cf:7f:80:37:34:5c:00:a6:bb:35:
                    b3:ef:c4:bd:7e:09:13:8f:7a:8a:20:98:fc:fe:d3:
                    73:59:59:38:08:1d:ae:d5:11:09:86:2a:79:4a:ce:
                    54:1a:ef:13:e4:f1:4e:95:3c:77:76:d3:65:46:77:
                    c2:28:7b:b8:56:9f:94:87:4d:38:51:fb:7d:0d:8f:
                    81:47:c5:a2:fb:ee:5c:98:37:d6:68:3d:59:84:6d:
                    ee:2f:d0:3d:4c:e0:a6:75:94:54:8a:51:8c:e8:b8:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:B0:CF:55:BE:DA:C9:A9:FC:19:CC:12:D0:16:50:6F:0E:DE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:fe:e7:27:88:0c:99:41:2e:80:3e:75:aa:c4:a4:ff:b6:
         03:f6:4c:c7:1f:0e:02:ab:85:3c:89:76:5e:78:1e:3f:dc:cf:
         8e:71:74:4a:a4:ac:0b:82:17:63:f5:f3:6f:1d:1d:d6:d0:8a:
         46:72:d8:19:82:29:2a:6e:0b:70:b3:35:22:6d:fb:dd:32:d3:
         c3:ce:51:e8:ad:6a:da:df:87:0d:92:fe:39:24:ea:60:6e:91:
         7b:21:d5:bb:b0:57:45:e7:23:b1:e5:f7:a4:f5:62:25:c8:a9:
         ac:6d:88:fb:da:a0:92:d7:54:05:9d:87:5b:2a:fd:1b:00:49:
         c3:62:9b:b6:06:28:3a:e5:e2:db:cb:b1:82:65:e5:4b:62:c8:
         2c:72:cd:13:88:e2:85:46:54:be:b5:09:f1:d1:8b:b8:79:38:
         55:aa:3b:4c:a3:7e:61:7b:7a:22:7c:9f:bd:4a:dc:45:14:3a:
         76:bc:7e:b3:d9:dc:87:8a:98:b4:7d:5f:bd:27:5b:14:2c:24:
         80:74:31:c2:99:46:78:63:4f:1d:ea:e9:c5:3d:f4:e4:96:f0:
         1c:7e:1e:8a:06:02:d7:fd:c3:da:a0:d2:93:d6:51:7a:62:29:
         5c:8a:c1:02:00:2a:af:0a:88:32:d7:53:b9:9d:64:f3:b8:78:
         19:ed:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:13 2026 by rpki-client