Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa
File:                     37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa (raw, json)
Hash identifier:          x6xeeZVgzfFNNYdc6earGPIJ8UkIEcPDHRNMKLIdEuc=
Subject key identifier:   68:EF:0F:B6:60:41:CA:0F:79:49:23:57:F6:4D:D7:72:E0:33:39:B5
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584CE1FCCA0316CC893E2F75CD00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     10430
IP address blocks:        168.212.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:ca:03:16:cc:89:3e:2f:75:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=f080a22b-8afb-4276-b615-9be51d98052b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:dc:ea:93:5c:14:9b:f0:18:cf:39:dd:58:
                    c6:6c:87:6e:61:af:2e:00:f0:d3:25:91:24:46:42:
                    bd:26:92:46:83:d9:a1:2d:f8:f7:8a:f5:aa:1e:84:
                    d9:fb:c9:ec:7c:5f:51:cf:52:2f:27:d4:78:e1:16:
                    ed:9a:8c:3b:2d:be:7e:a3:2d:7b:c7:06:ed:f5:ea:
                    b5:97:eb:e1:9e:a4:25:dc:63:dc:8c:c7:6e:f9:7a:
                    67:b4:1d:64:be:51:34:df:b7:41:2e:15:98:a4:7b:
                    13:5d:20:f2:b2:34:71:40:6f:8c:5e:e1:b0:1e:7d:
                    bd:47:71:ab:40:bd:53:ed:f9:b0:41:ea:63:d9:1f:
                    ed:1a:5c:34:a3:78:e1:fb:be:18:de:11:6b:10:aa:
                    f6:98:d2:63:8b:bb:b2:f3:90:86:2f:c7:3b:1f:c5:
                    d4:46:a1:a1:43:af:1a:df:b0:29:4f:e9:8d:b5:50:
                    31:0c:c8:80:12:28:96:4b:9e:98:e9:2e:ac:13:14:
                    71:5e:ae:11:da:f7:9d:77:51:cb:2e:36:be:29:8a:
                    be:ae:7d:ac:4f:7e:3e:3b:83:88:3c:ef:d8:5d:9f:
                    2f:9d:9c:55:0c:3c:c4:df:59:75:e4:ed:b8:8f:ac:
                    b8:71:68:75:b2:ce:63:a3:15:4c:6c:e3:71:4e:6a:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EF:0F:B6:60:41:CA:0F:79:49:23:57:F6:4D:D7:72:E0:33:39:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/37f1429b-77f5-3d28-9e7b-38d9c55c18ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:10:4e:12:ba:dd:8c:ac:0c:50:de:94:24:0c:12:9f:56:
         9f:da:f5:e4:f0:8a:6e:a0:9b:02:15:b7:63:16:44:df:2d:85:
         47:c9:51:db:d4:95:9a:b7:d0:c0:6f:27:f4:4b:13:c0:5e:67:
         f5:8d:94:14:ab:3a:9f:b8:c2:eb:a7:8f:f4:be:04:85:a5:c6:
         aa:e9:23:66:77:c9:a3:fe:6f:36:a9:63:ca:eb:d0:cf:d1:6f:
         a8:a2:b7:b3:a1:e2:d9:a7:36:d0:8f:eb:0d:2b:76:1f:f2:85:
         0b:6d:3f:f3:07:03:d4:a4:1b:da:40:6f:7d:3f:22:1e:39:41:
         e2:81:23:37:e5:a3:5a:10:20:c8:09:16:af:6b:db:26:fc:20:
         35:60:4a:93:be:c7:4c:e8:b4:25:c7:a9:4c:3f:9c:93:b6:0e:
         5c:2d:14:27:65:2b:ed:5e:99:2e:f3:f5:52:13:ab:05:26:07:
         5a:fa:7e:d2:85:dc:49:f2:06:9b:62:19:4d:f1:f4:e5:15:d1:
         70:3a:57:48:54:7c:55:e1:93:11:49:b1:ac:e5:91:9a:8e:63:
         8e:11:56:70:0f:0e:02:a1:72:b2:65:58:29:70:cf:20:ff:3f:
         6e:a1:bd:bb:f5:8d:b2:9f:df:c2:b9:77:3b:5b:28:81:c1:3b:
         fb:50:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:26 2026 by rpki-client