Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa
File:                     5359b938-c0f2-342d-8e6a-27b4ca320880.roa (raw, json)
Hash identifier:          3xMvwTj6GoFcySmsf8Pkpqxo3mMnNNeTYf5diFyX9Xs=
Subject key identifier:   B7:CA:BD:8E:F1:FE:9A:2E:4C:FC:76:82:77:D7:C3:3F:F1:CC:8E:77
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584CD99CE14E092AF1E3C10BB140
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11290
IP address blocks:        24.122.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e1:4e:09:2a:f1:e3:c1:0b:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=baec49da-766c-4817-a983-803b13be84a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:72:e7:19:58:84:8e:f5:db:be:a8:ca:04:
                    50:c2:06:c4:12:eb:21:74:c5:ae:f2:d2:31:46:df:
                    6b:ff:52:10:23:b8:bf:90:a5:79:f6:82:11:ea:ae:
                    b6:af:e6:e7:0e:f1:e1:3f:c4:49:4e:e1:31:5a:e4:
                    66:40:73:38:bf:62:29:f7:36:aa:8e:f6:75:8d:6d:
                    62:56:51:c1:06:92:98:39:b4:dc:af:dd:2f:88:39:
                    cf:50:f7:4b:41:8c:0a:6b:74:03:78:4a:51:7a:c0:
                    5f:a8:49:9b:8b:73:ee:6d:80:7e:da:04:58:bd:3a:
                    3b:bf:58:7e:c4:f3:fc:1c:35:82:eb:b3:e4:e0:d1:
                    f0:d7:e2:af:e3:88:30:5c:95:16:9a:4d:86:40:7f:
                    56:92:6c:d9:69:39:de:66:60:ab:70:f6:2a:db:95:
                    11:21:0a:80:d0:76:99:78:2f:84:72:49:6c:9e:cf:
                    cc:86:50:28:7d:51:3c:c9:71:0a:7e:df:8c:d8:1b:
                    a3:df:98:0d:94:09:b2:e8:34:8e:df:8f:32:38:1c:
                    52:b1:5c:65:5d:87:10:c4:35:1f:f4:16:e0:8e:ac:
                    f2:17:b3:85:4a:e1:5c:15:0b:33:f9:34:85:06:a3:
                    0a:76:14:e0:35:b8:7c:c5:8f:1f:42:fb:44:25:b3:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:BD:8E:F1:FE:9A:2E:4C:FC:76:82:77:D7:C3:3F:F1:CC:8E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:3c:e4:55:dd:e9:8d:71:0d:ad:f5:15:8d:bc:7f:73:a2:
         ef:75:76:b6:dc:5a:5e:26:99:0e:08:f9:b1:cf:e2:47:12:31:
         cd:b8:79:47:ba:79:fb:3f:32:7b:06:aa:bb:7d:a4:ad:81:72:
         d5:14:4a:4c:54:e1:51:8b:d9:3f:a0:68:5d:79:90:ac:8f:46:
         f2:14:93:58:48:46:b6:5c:b3:b5:38:cd:4f:67:83:e6:0d:02:
         ae:9a:6d:02:e0:b5:49:7c:5b:b6:16:c9:0c:06:5a:e9:d0:22:
         a8:50:3c:28:7a:68:77:d3:57:8a:75:f9:b4:43:78:45:c0:9b:
         87:74:33:aa:0f:c7:9a:e5:0d:f5:ac:70:72:7a:a2:d2:fc:d4:
         d4:01:f7:4c:cf:bb:b1:0d:cb:b6:91:19:30:dd:b5:24:bf:27:
         ba:38:6b:b3:d5:d0:4f:0b:52:c3:8b:c4:2a:b0:d3:87:40:ad:
         b0:ad:2e:e7:51:d4:03:29:c1:1b:77:99:c2:d3:76:7f:88:fb:
         ea:48:45:cf:d1:51:01:e8:77:c4:37:0b:ed:a5:52:2c:67:6c:
         d9:0d:07:e8:2a:d2:38:ea:af:e1:49:35:23:51:e4:52:1b:cc:
         2b:52:6c:d4:b3:9a:c7:a4:72:cd:23:0f:75:78:ab:22:c0:63:
         17:47:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:37 2026 by rpki-client