Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa
File:                     f3c707ac-b579-39d3-ad25-79299f1b9b38.roa (raw, json)
Hash identifier:          UTbl/PDcnR0/sUrztoumXqutZ9WjEnDBl9pXGRGjZhU=
Subject key identifier:   3C:64:6A:2F:57:01:DC:5E:1C:03:10:19:D8:18:1B:1A:DC:9D:27:E8
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C74433026788CEF7DD840
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        162.247.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:74:43:30:26:78:8c:ef:7d:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=d514bc8f-4494-4ffc-8254-65720439c77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:a2:82:2e:6a:3c:22:8f:5c:cb:e6:93:49:
                    e4:6b:1c:3a:05:19:18:3a:ae:38:be:24:fd:13:fd:
                    b9:3f:7d:0d:f6:54:4d:26:5a:7d:ce:03:99:a9:91:
                    46:1d:5d:f4:45:40:6c:26:a5:33:f1:0f:a3:79:1a:
                    54:0e:8c:85:7a:d1:4e:1f:fa:71:b7:b4:a1:1e:a2:
                    e1:eb:7d:e9:3a:9a:8e:70:39:09:e8:c4:c5:a9:3d:
                    86:3c:86:e0:3b:1a:e4:3f:c7:cb:96:60:7a:68:90:
                    5c:e1:06:9a:fd:52:71:a0:c8:8b:c4:da:2e:77:cb:
                    87:5d:b5:5a:12:e7:77:14:f5:d1:d2:65:05:39:55:
                    06:84:aa:bb:47:e7:5c:27:44:d4:96:24:00:f0:af:
                    06:27:69:12:d7:5c:c8:ee:12:31:c1:a8:ed:18:92:
                    df:c8:79:ca:b7:fb:7f:c9:cd:7d:29:09:3d:30:fc:
                    71:8e:d7:af:c9:c8:bd:7b:43:8f:3d:9a:6f:27:85:
                    7f:d9:87:4f:53:4d:ec:aa:83:4c:c9:45:52:dc:0a:
                    16:92:a9:75:e9:fa:99:6f:d4:cf:70:05:34:cb:4c:
                    2f:51:cb:3e:84:95:84:f8:33:42:74:e2:35:9c:4c:
                    a3:11:c7:ec:3d:7f:42:f6:b0:8a:d9:5c:6b:79:8a:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:64:6A:2F:57:01:DC:5E:1C:03:10:19:D8:18:1B:1A:DC:9D:27:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f3c707ac-b579-39d3-ad25-79299f1b9b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:50:3e:b3:11:29:cf:97:59:51:6c:a7:9a:4e:23:4f:be:21:
         44:11:1b:4b:2a:40:b6:81:c7:9b:85:3e:a0:58:13:8f:06:17:
         e0:ae:e4:5a:03:37:38:5a:b5:bc:00:2f:d7:df:4f:4e:e5:05:
         5e:5a:a8:e0:ff:01:ca:da:f2:8f:ae:07:ec:5b:dc:cd:9e:ab:
         ef:ef:5d:2d:03:f9:e4:d0:3c:4c:91:e6:ac:f1:70:6b:be:5c:
         7a:c6:05:f0:b2:88:ec:34:d7:fe:8b:e8:f7:ee:79:06:45:c1:
         7e:50:b3:47:80:d4:60:2e:16:a9:c3:91:36:d3:58:57:1a:d2:
         c0:e5:13:57:2b:f8:70:7b:b4:49:2d:f6:8c:0f:d8:89:c0:df:
         ae:dc:c9:fa:32:60:61:ba:dd:fb:9f:48:33:26:23:ed:b8:ea:
         13:9a:d6:d8:bd:07:36:06:e2:c5:b7:98:aa:96:e1:ca:d0:f9:
         0b:7b:51:0c:c9:01:18:3d:c9:58:e8:df:b3:0b:8c:fa:3f:1f:
         5e:27:8a:e7:c1:a0:2c:4b:04:56:99:cf:ca:c9:5e:07:da:2b:
         58:78:b9:89:22:a4:7d:2f:13:16:ba:9d:6c:5a:80:22:d3:b0:
         69:28:37:06:76:0a:cd:5e:6f:24:64:f6:a6:76:ca:d0:97:08:
         87:37:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:52 2026 by rpki-client