Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa
File:                     def0f716-2e24-38b1-ad2a-e47bf10bf940.roa (raw, json)
Hash identifier:          lc6uoJuolw9US4L8r0RRLPjHWu1JhFwtm+CSP/h1rcg=
Subject key identifier:   E9:7B:0E:1B:74:FD:67:D5:86:2F:4E:F2:4A:B1:0B:0F:AA:F4:F9:CB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CAE573A4C59495B0DA9C7BDC0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26744
IP address blocks:        206.180.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3a:4c:59:49:5b:0d:a9:c7:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=f9b4e881-082e-4191-989d-f02603f9829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:d4:22:85:42:be:35:9d:7a:97:44:88:4f:
                    25:7c:60:8c:a5:94:7f:e1:30:90:71:17:d8:89:66:
                    57:bc:7a:ef:8e:35:2c:fe:76:83:4c:53:d4:02:cc:
                    52:50:f8:9a:c7:e5:cf:20:a2:06:7a:25:ad:d0:73:
                    9c:92:cc:d8:95:9a:d3:72:34:99:96:d4:1a:b7:08:
                    1d:5e:01:d9:12:92:3b:f2:66:b2:17:2b:95:c2:34:
                    33:51:ba:92:86:19:9e:94:4e:cf:b5:d3:6b:c1:90:
                    eb:06:b1:6e:d9:f6:b4:60:31:fd:71:a3:57:91:60:
                    b7:8c:fe:46:04:be:90:a1:03:92:fc:80:a7:36:68:
                    83:22:d5:45:a6:6d:43:47:d2:63:f5:06:95:fb:d9:
                    5f:81:c3:84:cc:a8:5e:5c:65:65:ba:bb:59:a7:81:
                    82:7f:ce:a3:0b:70:33:38:b8:4d:e1:f4:1f:0c:98:
                    f5:e7:ca:e8:7e:30:6e:96:1d:63:28:8b:19:74:fd:
                    8e:42:da:33:ed:6c:f4:ec:1d:74:eb:67:76:fa:2a:
                    70:40:d6:db:04:62:dc:fe:9a:b2:d1:fa:9f:10:ee:
                    8f:b9:f6:06:8a:6d:4f:55:97:2b:03:33:1f:f3:03:
                    88:f6:56:94:8c:3e:bb:61:98:bc:90:23:c2:fd:cd:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7B:0E:1B:74:FD:67:D5:86:2F:4E:F2:4A:B1:0B:0F:AA:F4:F9:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/def0f716-2e24-38b1-ad2a-e47bf10bf940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:25:88:16:ea:cb:0c:85:d1:73:28:db:4c:68:28:4e:f3:a3:
         91:21:fa:04:0b:ab:6a:14:58:1d:5f:e5:b7:c3:58:91:ee:f7:
         89:27:b5:40:04:28:61:80:bb:39:da:f6:80:64:c0:c8:8c:01:
         09:b5:ee:90:91:58:b0:73:1b:00:e2:63:af:20:4a:0c:0e:86:
         e6:f4:e2:26:5f:3a:cf:24:54:98:13:27:ab:e3:e6:6f:ea:76:
         03:6b:8f:83:09:97:76:f2:01:57:3e:f8:8f:01:3d:c9:e6:9a:
         c0:3a:0d:57:ee:10:dc:f7:4f:3d:ca:18:4f:ee:cf:96:de:62:
         48:b7:4f:ce:04:5a:e2:bd:32:ef:a3:8d:76:9d:06:9a:67:81:
         ed:56:3b:66:fb:25:42:a9:fc:d8:ab:c9:91:8e:d5:88:44:fa:
         6e:f2:ca:07:96:b6:93:43:b2:d4:dc:12:fa:f2:ad:4f:07:35:
         01:77:1d:38:50:4e:63:a4:fe:7e:8f:97:5b:b4:e4:ce:a8:c0:
         64:15:e6:f1:0c:e0:c0:3f:a7:4d:0b:84:f5:3f:53:6a:8a:04:
         4f:47:89:ea:d7:6a:9b:56:e7:fb:56:e7:37:37:15:af:1c:0d:
         12:1a:c1:85:ad:73:7f:a1:cf:eb:c5:ba:73:cc:08:78:ad:39:
         82:3b:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:11 2026 by rpki-client