Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa
File:                     da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa (raw, json)
Hash identifier:          WK1TyCNG+zL0MLVq4ZBP+yxUrQdor9TTQ3uZFaIzNXs=
Subject key identifier:   CA:1C:16:6C:D3:86:95:A5:E7:EB:17:89:59:7F:52:42:77:69:D6:4B
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CAE5729969FE154F6084A0560
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     393740
IP address blocks:        206.180.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:29:96:9f:e1:54:f6:08:4a:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c7da6755-af55-4318-a478-063bf2ce7882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:4b:db:90:2e:2c:37:bf:25:a2:e4:0e:ce:
                    56:40:45:07:88:0b:0b:0a:91:cd:66:9b:9b:da:bd:
                    db:4b:05:c9:8a:1d:36:c1:fa:37:70:bd:46:58:05:
                    38:63:2d:82:26:0c:77:80:47:1c:de:91:10:81:c9:
                    a9:1f:0c:19:2d:ab:04:b9:74:40:6a:6b:4b:04:39:
                    e7:e2:81:9f:89:26:df:1a:84:af:3c:a1:84:5c:cd:
                    ae:f9:7b:59:00:19:38:ea:c8:2d:49:09:3d:69:bc:
                    11:4b:f0:28:42:78:16:b4:fd:73:fe:5a:89:ec:c7:
                    3e:79:40:78:8a:7f:9a:25:c4:4f:ad:c6:05:e9:f3:
                    97:ef:43:09:d3:52:ce:b6:76:6d:dd:83:e2:90:42:
                    de:10:da:6f:1f:e8:01:b5:71:4f:63:ff:7a:61:4c:
                    60:6c:29:fd:8b:3d:10:98:ce:07:c9:d5:89:ce:dc:
                    36:c7:b8:0f:5c:8d:da:34:08:0a:bc:a8:57:01:cd:
                    00:2f:39:85:76:13:ab:93:73:22:1d:2c:44:e3:89:
                    38:ff:39:a9:cd:85:b5:23:6d:85:67:77:b5:1e:d5:
                    1f:63:77:d5:c3:d6:bb:6c:a0:46:69:aa:37:b5:94:
                    5b:ef:f9:f0:65:af:84:e2:a8:b3:ab:29:27:fc:7a:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:16:6C:D3:86:95:A5:E7:EB:17:89:59:7F:52:42:77:69:D6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:ef:7c:7d:b2:36:de:14:f2:4a:2a:48:04:7b:1e:41:fd:
         0c:92:8a:dd:5a:67:b0:e1:ab:ef:f3:24:06:cb:ae:07:a5:b3:
         31:44:a2:91:e0:74:35:e3:86:09:3c:5d:66:f0:a7:16:29:09:
         08:73:e4:a6:29:44:52:df:6b:00:28:c9:22:79:1f:eb:21:76:
         3e:c4:64:17:95:db:8a:38:d6:77:f6:5a:52:32:dc:5a:64:7b:
         a4:e4:20:26:8d:00:05:58:85:db:ab:df:1c:fa:e4:9a:fc:75:
         98:49:82:bf:28:ed:55:0d:4e:0d:fa:c9:aa:ff:89:a7:dd:e6:
         3c:75:e3:01:cc:c2:f1:e7:1c:6a:30:c7:c2:b5:8f:5e:51:a4:
         e7:4d:2b:9d:25:ca:2a:4a:b0:11:77:0e:3d:c2:84:1c:74:e5:
         ae:2c:52:9b:3a:28:66:91:61:61:08:5f:df:f9:03:37:12:be:
         07:a3:a0:fe:dc:24:d6:5e:97:6a:3f:b3:54:9a:42:47:8e:7f:
         dc:f4:17:e9:8a:1a:64:36:e3:9b:b7:08:17:87:97:e7:a1:73:
         6c:62:1b:60:cd:55:de:56:5f:a7:7d:cd:c5:af:41:bb:49:20:
         34:8e:48:18:2b:cd:6d:44:33:e6:7f:62:7f:93:0b:36:51:6c:
         6d:a4:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:08 2026 by rpki-client