Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/4bdf3f06-000b-30f9-adb4-e5c65560fa31.roa
File:                     4bdf3f06-000b-30f9-adb4-e5c65560fa31.roa (raw, json)
Hash identifier:          FsjtQtJ2MTmlaRxn9sPVtMeiBlXe22DvoOBs2q3bA5M=
Subject key identifier:   1C:F3:A4:D8:70:B5:09:0D:A1:74:4E:7F:75:75:66:95:9B:A3:13:9D
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584CD1BD86D03E2F4B380E697F80
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/4bdf3f06-000b-30f9-adb4-e5c65560fa31.roa
Signing time:             Tue 10 Feb 2026 18:20:27 +0000
ROA not before:           Tue 10 Feb 2026 18:20:27 +0000
ROA not after:            Mon 11 May 2026 17:20:27 +0000
asID:                     14499
IP address blocks:        208.94.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:bd:86:d0:3e:2f:4b:38:0e:69:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Feb 10 18:20:27 2026 GMT
            Not After : May 11 17:20:27 2026 GMT
        Subject: CN=3f143364-6e1e-49ec-a3de-9d2fd42b190c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:31:c1:ed:01:2b:40:81:f8:ef:1c:d1:f0:
                    45:6c:25:ad:c2:33:30:35:24:c8:5e:2a:2e:20:e0:
                    3e:44:26:b5:62:b6:31:1d:4d:be:59:38:23:d6:d3:
                    68:a9:30:ce:80:7a:6b:37:1c:2f:5f:6f:de:11:63:
                    64:73:a5:23:3e:00:84:c2:91:08:a4:d4:eb:86:ec:
                    12:ca:a0:36:ad:21:37:77:be:ed:ea:de:a6:45:0e:
                    ad:91:6d:da:fc:8b:f4:5a:e3:ef:e6:75:76:bb:0f:
                    56:88:a9:bd:4f:62:63:30:c0:d3:af:35:49:f6:bb:
                    86:2b:6b:b5:5c:1e:1a:6b:cc:b7:10:a2:d0:38:9e:
                    d4:59:0a:77:9e:e4:e7:26:87:49:23:fd:f4:f5:11:
                    c9:19:69:46:96:8f:bd:77:bc:12:59:fe:9b:6d:f7:
                    97:4d:41:81:91:1a:4f:77:66:3c:0b:95:ab:8b:1c:
                    2f:eb:56:a4:47:6c:1d:e3:3d:ae:b7:a2:38:69:8b:
                    3b:86:60:47:e8:68:ff:03:82:45:fc:59:c7:1c:dd:
                    7c:8a:d2:af:8f:10:c1:0c:1c:d3:5c:cb:d1:6f:dc:
                    04:5d:7c:0d:c1:88:a0:72:40:e5:49:07:e3:fa:68:
                    b2:7d:13:5b:4f:13:0b:3f:f0:88:2c:0f:fb:96:ae:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:A4:D8:70:B5:09:0D:A1:74:4E:7F:75:75:66:95:9B:A3:13:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/4bdf3f06-000b-30f9-adb4-e5c65560fa31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:52:18:20:35:3f:3c:e3:40:ce:14:bf:ee:e6:6e:c3:3a:dd:
         f4:02:8b:21:7c:fa:a2:ad:d6:c3:ef:71:2f:58:14:b2:7a:0c:
         5a:7b:25:65:7d:bd:10:b1:26:e1:09:10:d7:f7:4e:04:3a:02:
         45:47:43:f3:0d:dd:b1:e7:96:00:8d:c1:b5:b5:a2:0f:d5:4c:
         77:10:05:b4:31:f0:ef:2c:55:ab:c6:10:14:c2:7a:65:12:89:
         c6:5e:4f:16:59:13:1b:ff:b6:2f:dd:fc:59:6c:b5:30:4c:76:
         d6:8f:b1:3d:ec:b4:99:3c:c9:7b:df:f7:bd:6b:09:f3:e8:4c:
         ca:a9:7e:63:7a:6c:f8:d4:9f:89:72:5f:5c:46:8a:d5:fa:91:
         fe:24:e5:de:74:ef:b2:e4:31:83:6a:71:e4:82:3f:5d:5f:29:
         6f:6e:99:72:da:4d:81:30:5e:31:bf:99:c0:d9:39:5d:b9:29:
         0e:02:94:62:f9:fc:06:14:e4:cd:df:52:41:d3:5a:43:bd:3b:
         89:14:9f:7b:1a:4b:63:57:b8:57:13:9b:9c:e5:9e:5a:7d:36:
         33:3b:44:97:49:76:81:57:a1:ba:4f:0e:47:e0:1d:5a:25:28:
         d9:9a:00:6b:fa:02:a2:44:c7:79:27:83:93:02:b4:6a:73:6a:
         04:58:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:46 2026 by rpki-client