Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa
File:                     ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa (raw, json)
Hash identifier:          EZ2xZLBbS2VDrpuuNWSakp9TR5Nw2iA6Gg1/El+a4pk=
Subject key identifier:   DB:11:AF:49:8B:7F:88:3C:5D:1E:D6:EC:A2:2E:65:E8:33:58:B4:9D
Certificate issuer:       /CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
Certificate serial:       010D0C9F4328584CEA5CF144AACA942035E67BE0
Authority key identifier: 31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     210008
IP address blocks:        64.226.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:44:aa:ca:94:20:35:e6:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=b3f6693f-a8b0-4afa-95ea-68b8fad1048c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:80:b9:d1:4a:ae:b8:ff:27:6a:b7:29:80:
                    d3:b5:a2:50:b4:8e:23:62:27:41:fb:0d:63:4e:da:
                    05:0c:22:76:ea:a9:f6:10:cc:48:90:9d:cf:ae:57:
                    f5:de:e2:92:5c:43:c2:79:24:d0:d7:db:a5:a8:3b:
                    16:77:cd:a7:c2:32:35:09:66:fd:38:68:d4:db:80:
                    0f:88:b0:a8:f9:c8:ee:ae:0c:8d:b3:c3:d8:1b:bc:
                    08:da:d1:e8:9b:f0:44:2a:47:14:df:f4:84:b5:5d:
                    70:13:06:60:02:fb:ac:8e:5a:bd:5b:d6:26:c6:ea:
                    a0:58:e5:ba:02:d0:6e:f1:dd:80:e2:f6:1c:27:2b:
                    28:39:9c:3e:98:70:48:51:5b:80:a4:03:cd:95:fc:
                    56:1a:47:cb:6d:22:a6:a2:dc:ee:57:4f:11:da:a9:
                    bf:f1:89:e8:19:ff:a7:44:dc:b8:e7:62:9e:a5:fa:
                    34:af:0f:a0:4e:4f:54:21:80:fa:ee:c3:41:e1:0f:
                    6d:a5:ac:88:ec:4e:a2:70:67:b0:b0:03:4e:a2:ab:
                    b7:95:3a:9b:fa:1f:db:19:94:0b:e7:d2:02:e7:4e:
                    ef:9d:32:1a:23:8a:f5:49:b3:f8:1e:a5:e1:d6:95:
                    f8:13:66:b5:fc:84:f1:bb:e6:a1:04:f5:99:01:3e:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:AF:49:8B:7F:88:3C:5D:1E:D6:EC:A2:2E:65:E8:33:58:B4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl

            X509v3 Authority Key Identifier:
                keyid:31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fd:d4:55:4a:4d:ce:71:40:b4:6a:ab:35:07:41:65:4d:70:
         12:65:ea:4c:4e:58:e4:28:04:70:01:e4:b6:1c:1a:03:dc:41:
         d7:1a:9b:88:d4:5d:9b:57:f5:77:e1:c9:3a:28:e5:ed:d9:27:
         19:0a:c1:2b:af:bf:41:b9:f2:0c:9b:af:ae:e3:3d:26:ac:6b:
         de:bf:0b:c8:9a:7e:19:90:68:a4:eb:75:b8:7d:cd:8b:7d:06:
         79:a1:43:b4:e0:b6:3e:b3:b4:22:37:97:81:c8:ca:c2:3e:9e:
         8d:f5:8f:d0:19:72:38:bb:e2:da:45:9e:6e:18:0d:67:14:28:
         02:bf:9c:67:69:f7:ba:38:34:ba:d0:37:6b:00:95:82:60:e6:
         6b:c4:1e:c6:09:cd:b7:41:6c:d6:c0:40:dc:7a:71:02:a1:75:
         66:5a:41:ad:61:e9:9f:68:c1:5c:3d:d4:a6:54:11:08:8e:e9:
         cd:77:38:bc:10:60:79:2e:4a:4b:c0:7d:67:72:67:ac:39:bd:
         87:2f:b4:b1:80:60:4b:67:31:ff:df:30:bc:7d:0b:bf:57:03:
         1f:bd:6a:1f:37:ff:79:a3:da:3b:7e:c8:73:53:b8:fb:08:d0:
         67:cf:36:15:a0:bb:42:a5:88:c8:89:03:63:b7:c2:7e:9e:7f:
         e1:f0:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:40 2026 by rpki-client