Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
File:                     b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa (raw, json)
Hash identifier:          3A7MW1Iwv5p0q3FGamWKCWb71+41PnEcPkjGGQwzjcU=
Subject key identifier:   DC:57:E6:99:14:92:62:41:1F:C4:66:0B:B2:68:9E:E6:FD:9A:9E:BF
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584CEA5CF135861793A4B0281F80
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     25697
IP address blocks:        209.151.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:35:86:17:93:a4:b0:28:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=6f96ad7d-99a4-4ae7-bc8f-c92aaba2de25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:60:a0:da:ba:a4:25:03:c0:6b:be:51:ef:
                    0b:db:72:f2:a9:de:dc:a2:ae:85:0b:33:10:40:23:
                    7f:a6:03:72:90:d2:8a:a4:f2:44:8a:bc:56:82:d6:
                    87:6a:61:51:3f:eb:24:8b:42:d5:77:47:00:69:40:
                    39:72:56:7b:a6:a8:6a:2a:7a:2b:47:67:8f:8c:2b:
                    20:6e:21:f1:0e:88:bb:18:7f:cc:59:cb:36:5d:64:
                    51:18:f7:44:99:35:b9:e5:87:cc:bb:ec:39:60:84:
                    6b:a9:5f:ce:de:3b:94:82:43:44:cd:5c:69:66:fb:
                    54:30:bf:d6:3b:6c:5e:26:fe:37:7b:ad:e2:32:f0:
                    38:ae:64:eb:7d:57:b6:8d:be:a5:9d:88:c5:88:92:
                    58:5f:23:17:a9:5f:e8:ac:e6:73:b1:a2:59:74:c3:
                    a9:72:37:5d:d8:6e:8f:79:c3:08:18:17:32:a8:22:
                    7b:29:32:db:9b:e2:54:4c:b1:d7:ca:37:32:5f:4a:
                    25:9e:75:fb:cc:cb:cd:24:3f:c3:76:44:f8:b3:f3:
                    af:3e:55:14:4d:92:d0:73:98:fa:39:41:14:ea:56:
                    ea:33:b6:bf:b2:37:4e:9a:b2:c2:14:a7:19:8d:73:
                    08:cb:26:83:9d:55:25:0f:84:2a:de:ee:0a:2e:9f:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:E6:99:14:92:62:41:1F:C4:66:0B:B2:68:9E:E6:FD:9A:9E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:f3:d1:b3:89:a6:83:7a:8f:84:40:7b:fb:1b:35:ba:66:
         0e:6e:5e:04:7f:a1:ce:c7:18:52:0b:99:9f:b4:d1:da:75:9f:
         44:ff:0e:95:a7:82:d2:fa:d1:84:84:23:e0:e1:59:04:57:fd:
         68:64:29:01:c6:38:b4:28:21:6e:2a:e7:8e:ad:02:6c:f7:c6:
         12:ab:0f:2b:97:a5:8c:b4:4b:70:d0:2b:a3:67:11:9b:40:55:
         5f:11:9f:c5:33:4c:ec:69:13:b0:8b:be:14:e6:fb:f9:e9:0d:
         08:94:76:a2:87:1f:5a:6c:0e:7a:bf:c9:86:33:40:a8:de:c6:
         d8:18:ee:e5:d1:c0:71:63:a0:e0:3b:7c:92:d8:84:ec:cc:c3:
         86:a4:12:47:94:3c:fb:4b:fc:8b:82:20:19:2b:ca:00:8e:36:
         83:c8:ad:8e:eb:1f:bc:94:55:b0:6b:df:a0:f1:5f:f9:b4:ff:
         5f:13:1b:88:da:1e:04:a1:e6:95:8a:a8:49:43:d5:28:c2:0e:
         65:50:33:ba:a2:8b:09:7e:b5:89:43:fd:81:25:b6:d0:3e:4a:
         6d:81:9c:1f:de:94:45:04:05:ad:b2:5f:65:db:17:e9:78:57:
         45:cf:38:2e:e8:3c:a9:15:a2:f2:3a:10:f0:f6:f1:07:1d:f0:
         86:1e:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:22 2026 by rpki-client