Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e775d38b-1d6f-359c-bc97-b1748cf6e36e.roa
File:                     e775d38b-1d6f-359c-bc97-b1748cf6e36e.roa (raw, json)
Hash identifier:          E5etF50ONX14aIf6vL5QZmaOwRE/TgEh5S/xPB9MC9U=
Subject key identifier:   8A:7B:48:0F:B4:B9:AE:8F:C8:77:8E:1D:41:F2:BC:F5:81:D6:02:63
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584CDF3277BB745DF15C3AEC3FA0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e775d38b-1d6f-359c-bc97-b1748cf6e36e.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     10506
IP address blocks:        168.99.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:77:bb:74:5d:f1:5c:3a:ec:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=761420d6-ed65-46bd-b126-11e7cbe3b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:03:a9:2b:91:dd:f4:77:8e:5f:c6:b0:52:
                    fe:73:b2:4c:32:18:cb:7b:95:c6:99:c0:b8:c5:22:
                    2c:23:82:4d:8d:05:7b:cf:c9:a1:2c:be:4f:95:5b:
                    49:60:28:3e:da:10:18:11:c0:ce:f0:9c:5e:6f:a9:
                    9e:ca:4e:fe:ca:ef:2c:53:41:2f:54:8f:39:16:b4:
                    a4:3c:ba:f2:59:63:b9:dc:59:30:3b:8c:f4:51:9c:
                    6b:ad:02:61:ab:dc:59:5c:1c:f4:b9:ba:74:59:a4:
                    6d:2a:e3:7e:e3:be:69:9a:74:f2:09:88:65:89:29:
                    ef:2e:ea:21:cd:65:52:9d:ed:c2:0f:4d:0e:8f:7d:
                    b6:f6:46:b0:7d:89:9d:49:a7:c9:ae:3b:af:a2:b9:
                    69:20:f3:01:aa:7b:eb:58:5c:05:3f:c0:65:97:89:
                    fe:1a:a4:ad:dc:13:de:8b:a2:42:21:1a:13:1b:0d:
                    aa:0e:76:d9:93:b2:5e:aa:f9:8e:28:9e:3a:c9:54:
                    63:7a:94:2a:0b:d3:0d:ec:18:fd:f2:81:eb:7b:36:
                    84:5f:ee:9a:b6:27:f9:5b:bb:b2:f9:36:b8:79:fa:
                    31:97:56:8c:1f:29:82:b7:6b:d3:c4:69:e3:6e:b5:
                    ec:2d:b7:9e:de:e8:77:38:c3:60:40:34:77:6c:62:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7B:48:0F:B4:B9:AE:8F:C8:77:8E:1D:41:F2:BC:F5:81:D6:02:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e775d38b-1d6f-359c-bc97-b1748cf6e36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:df:ec:a8:b9:a5:45:06:a8:6f:db:b7:4a:f3:4a:71:35:59:
         1e:ad:e3:6d:59:ec:c5:b1:9a:67:67:69:77:29:ee:f5:1f:61:
         3e:3a:40:a9:b9:34:3e:fa:31:7e:1c:e2:2a:9a:8b:cb:57:10:
         95:b8:cf:16:1e:1d:d4:16:5f:f7:26:ba:58:cd:f0:fd:38:4c:
         14:c8:9b:c1:6e:24:89:9e:e3:0d:44:45:c2:1a:f1:6f:97:12:
         28:e6:b0:db:4c:5a:41:d0:60:d0:18:d3:d9:45:96:02:12:ad:
         9e:0f:c0:4f:23:fa:af:88:80:c9:58:55:f3:02:9d:62:8b:aa:
         a3:c6:7d:ec:d7:cb:21:3e:22:d4:9c:2a:93:b3:d0:d0:93:2c:
         b6:e2:7d:c4:d9:15:10:8c:d1:dc:c6:96:d2:70:32:2c:3d:d7:
         e3:7e:4c:ee:cb:b9:0e:1d:31:78:a4:13:6f:c2:eb:14:43:f9:
         42:9e:82:ff:fd:52:7d:cc:17:ab:89:34:80:6a:98:23:e9:e5:
         e9:48:88:93:e8:45:1d:d1:9e:f7:85:eb:cc:e3:60:95:c5:60:
         3a:4f:f9:05:27:ad:b4:58:0e:8a:66:2a:a2:f7:d1:64:6c:05:
         69:41:83:23:86:db:a1:e9:45:0b:5f:0b:7b:56:ee:c4:4c:19:
         41:47:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:28 2026 by rpki-client