Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
File:                     446abe31-2685-30a7-992e-ef5bdffad3fc.roa (raw, json)
Hash identifier:          FDfsvLBnTSjDAf4/g3C3PA0UNH3xam3SfkDqoJoOiLw=
Subject key identifier:   02:04:93:B5:FC:60:F0:47:3B:64:20:D1:AE:2D:9A:64:7C:2B:8D:5A
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584CBDB203A0929C9A8F2F92C300
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     26380
IP address blocks:        216.119.208.0/24 maxlen: 24
                          216.119.209.0/24 maxlen: 24
                          216.119.210.0/24 maxlen: 24
                          216.119.214.0/24 maxlen: 24
                          216.119.215.0/24 maxlen: 24
                          216.119.216.0/24 maxlen: 24
                          216.119.217.0/24 maxlen: 24
                          216.119.218.0/24 maxlen: 24
                          216.119.219.0/24 maxlen: 24
                          216.119.222.0/24 maxlen: 24
                          216.119.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:03:a0:92:9c:9a:8f:2f:92:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=2f871895-199d-45d1-a3ef-e64eae43a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:88:bb:93:48:75:7d:39:86:b1:7a:f9:38:
                    e0:18:3b:c5:2d:40:45:6d:f1:cf:07:bd:76:b9:ff:
                    f9:af:9d:82:25:3a:ca:82:01:be:2f:4b:80:62:5b:
                    23:30:49:4c:fd:c1:90:20:b1:1e:6e:42:51:e2:74:
                    9a:79:2b:cd:e4:4f:c6:ef:60:05:8a:e0:72:a3:66:
                    87:b7:63:6d:80:07:3a:2a:c9:57:d5:39:fc:79:00:
                    44:36:f6:ad:29:91:59:5b:99:74:8c:99:7f:46:a3:
                    d8:6e:83:5c:7f:fb:ee:db:63:41:88:4e:f3:6e:ca:
                    20:d0:f4:98:cf:2c:a4:17:da:f7:15:05:34:df:4d:
                    18:c7:ce:58:28:50:22:9a:01:27:cc:26:a8:32:ce:
                    ad:27:d6:51:e1:4f:95:44:f7:84:4d:09:78:ef:a6:
                    06:5f:39:72:d2:42:b8:d1:c5:09:32:c1:9e:a1:df:
                    65:e9:48:77:3a:70:cd:38:a0:c4:c5:42:54:68:5f:
                    33:9e:ae:35:69:ed:3d:31:ff:8d:af:29:90:6b:6f:
                    e8:3b:76:df:06:2e:09:83:38:96:96:58:6c:51:e1:
                    77:c2:21:95:f8:b5:02:ec:38:5d:fc:77:2d:85:0e:
                    6b:0a:2a:60:fa:73:66:18:a0:50:f2:99:84:f2:5b:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:93:B5:FC:60:F0:47:3B:64:20:D1:AE:2D:9A:64:7C:2B:8D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0-216.119.210.255
                  216.119.214.0-216.119.219.255
                  216.119.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:61:28:4e:84:fa:42:e4:6b:03:e3:fb:6b:9f:cc:2c:d9:75:
         63:5d:70:82:f0:84:a3:35:d8:30:af:1f:70:60:f6:a9:85:1d:
         33:e3:25:bb:1c:11:cf:6b:21:0b:df:09:62:db:d6:10:44:d4:
         b7:51:a0:0c:55:b3:d3:69:3f:53:80:8a:58:b1:0d:49:b7:44:
         44:b4:bb:a9:8f:32:e2:f5:fb:79:79:5a:86:40:4a:3a:10:68:
         1d:52:24:61:e4:53:f0:0f:91:21:00:41:8a:ea:72:dc:a2:73:
         60:64:3d:92:9b:c8:5f:22:ac:e6:3c:a2:57:fb:28:df:3a:98:
         49:12:9c:c8:bc:3a:2a:ae:15:4d:aa:82:f0:52:2e:72:65:82:
         18:6b:ef:56:04:99:73:e0:28:ef:c3:8e:44:2e:25:15:ac:5d:
         29:0e:48:73:e5:e7:56:04:7a:ff:51:34:f9:ea:84:0b:01:47:
         a5:24:0a:f3:58:47:3d:7e:5a:c3:a4:63:40:61:60:d4:38:62:
         1d:ee:46:1c:d7:4f:24:f9:9e:61:af:9d:7e:84:c8:f1:c0:bc:
         00:ca:3d:d3:54:2d:be:d1:30:b9:38:98:cb:b3:18:8a:14:91:
         66:9d:04:70:94:2b:ea:ca:c0:61:1c:07:e9:5b:8c:fc:a2:30:
         5a:94:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:29 2026 by rpki-client