Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa
File:                     3cf07f19-636c-3ea5-a053-127861611f6e.roa (raw, json)
Hash identifier:          ZXi9U4ZfCQYv5+Pn7lR3SQUOq1Djqs/ESlUoUXz1zL0=
Subject key identifier:   3F:13:26:85:D7:E6:0C:77:C2:26:40:49:A4:5E:89:C3:8F:18:E4:6C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CEA5CE662D6901A41CFB80800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     21570
IP address blocks:        216.123.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e6:62:d6:90:1a:41:cf:b8:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=5d945806-b36a-4544-8e6b-827b1ac156e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:4e:4b:2e:34:6d:8a:c1:c3:a9:38:88:1d:
                    bb:94:52:9e:1d:06:61:c8:92:77:5d:df:12:a2:6e:
                    af:5c:d4:cc:ca:74:35:8b:85:85:e0:83:90:7d:dd:
                    66:a2:01:d8:ce:2e:b5:8a:d5:ec:6a:67:1e:15:8b:
                    02:ff:f3:80:f6:19:ec:8d:5c:01:0c:75:ec:0e:c8:
                    63:d4:ff:45:ae:d6:2a:8e:a7:a3:65:e5:6c:f7:3e:
                    65:07:f9:02:d4:1c:57:f2:bf:fc:cf:e1:0a:58:de:
                    13:84:dc:5a:c9:b8:48:d9:30:0d:db:c2:d8:10:41:
                    4c:02:17:b9:d6:ac:f2:1b:5b:03:fa:05:83:6e:a4:
                    55:a7:61:01:c7:a5:82:da:13:70:dd:54:a0:ef:50:
                    09:1a:07:98:c4:59:a3:af:34:43:e2:fe:00:08:9c:
                    e4:36:2f:63:fd:aa:9b:ec:84:38:6e:f6:2a:d9:54:
                    28:55:d9:79:27:ba:d7:6a:f9:32:44:8d:24:ea:f8:
                    b3:18:53:26:aa:14:05:a0:1b:bb:9e:60:36:f3:cf:
                    69:31:ba:a3:11:f8:b6:b5:47:74:43:31:e5:6d:34:
                    3d:6c:cf:b7:f0:7c:eb:c0:18:b0:c6:a0:00:a7:be:
                    42:c3:9c:f3:f2:d6:20:33:93:82:ca:b1:10:9c:71:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:26:85:D7:E6:0C:77:C2:26:40:49:A4:5E:89:C3:8F:18:E4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:60:a0:5f:34:d8:b8:75:eb:3c:86:75:3c:71:61:88:c8:4c:
         88:92:29:88:b8:18:11:48:54:48:58:d5:77:e3:7f:a9:08:78:
         b4:15:bc:86:aa:70:98:56:69:f3:d8:e6:31:e5:60:2d:c8:d2:
         37:2f:2c:3e:af:44:b1:ee:a7:ea:4f:78:c0:27:9f:d9:6b:5a:
         79:68:e8:79:dc:7c:18:02:41:08:01:02:ff:d3:db:75:34:25:
         a1:a2:27:65:81:84:48:ff:7b:4d:76:8d:a3:02:b0:95:d3:aa:
         60:fd:3f:d1:42:24:38:d7:e6:51:09:6b:89:6e:15:b2:84:0a:
         ba:59:9d:ee:fb:30:5f:78:37:48:ca:df:5b:6f:7b:42:32:51:
         00:7f:b1:92:e4:a6:01:53:9e:3c:c0:13:3b:2b:a1:60:ef:ed:
         6e:21:c2:6b:d6:a2:f7:1c:50:04:37:db:76:71:37:dc:61:3a:
         d7:82:86:21:27:54:e4:fd:08:33:ca:48:fa:d4:93:4d:fd:4e:
         a5:fe:0f:c6:7f:35:4d:cf:4d:18:a7:48:bc:3c:5e:53:00:98:
         ee:32:8f:ba:27:66:cf:c5:2e:3b:20:e3:f6:4b:18:c1:c3:13:
         0f:d5:5e:4f:c8:dc:58:82:6f:25:04:30:67:e9:14:5f:05:52:
         c2:e3:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:20 2026 by rpki-client