Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb34fab6-e67a-3776-9c8a-13d62e04d5d6.roa
File:                     cb34fab6-e67a-3776-9c8a-13d62e04d5d6.roa (raw, json)
Hash identifier:          sxqqfYCV4EH0xnY4U04sgBTvK/ErUpzIaiR9KT8YxnA=
Subject key identifier:   2D:19:16:0F:00:8A:51:E2:CB:50:4E:C8:83:A8:C1:A1:5A:2F:A8:0D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CEBC2100BB22CEF91473F9D40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb34fab6-e67a-3776-9c8a-13d62e04d5d6.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        216.171.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:10:0b:b2:2c:ef:91:47:3f:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=7cd4b955-ea70-48c1-9276-793709572f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:51:9d:8b:51:05:7d:8d:18:1a:5f:3b:d9:
                    70:07:8c:30:0d:9f:7e:9b:6d:22:b1:38:3b:ec:ea:
                    85:09:97:df:d7:5f:47:de:c1:73:55:4d:95:9c:82:
                    73:52:b6:74:9f:47:c0:b6:ee:f2:f1:b8:dc:4a:f0:
                    ef:1b:6d:1e:92:df:84:d8:f5:73:dd:5d:b0:95:e8:
                    de:88:70:4a:73:53:52:96:d7:ac:97:66:fa:84:a2:
                    ea:32:ce:14:f8:69:4b:83:54:6a:ec:4c:21:37:06:
                    63:7d:1c:27:42:78:a8:28:10:4b:35:ee:6b:27:2b:
                    a4:3b:ae:ae:0f:5c:60:6f:ef:63:05:ed:ce:b9:26:
                    d9:9e:f0:73:a9:97:00:7d:c8:9a:05:eb:f4:2a:2f:
                    70:c4:23:9c:86:41:7a:0f:e8:b0:da:2e:2e:92:b2:
                    68:63:23:cf:be:25:d0:f0:84:e1:98:6b:33:db:92:
                    64:5a:f8:d3:46:c3:75:da:21:46:0f:a6:59:63:f4:
                    c6:49:8a:b8:2e:f7:5f:e1:74:ea:b5:d3:01:a1:ef:
                    9d:64:39:10:45:0a:39:0e:45:2d:bb:01:7a:48:1f:
                    a6:5d:27:2e:d7:da:8d:64:17:c2:63:ea:15:ee:f4:
                    a2:b7:fa:34:ab:a8:b4:a0:14:9c:ae:48:fd:66:c3:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:19:16:0F:00:8A:51:E2:CB:50:4E:C8:83:A8:C1:A1:5A:2F:A8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb34fab6-e67a-3776-9c8a-13d62e04d5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:75:1c:17:fd:9e:c2:87:70:36:91:49:c4:e2:e7:92:b8:bd:
         e4:6d:bd:2d:78:75:a2:1f:00:95:27:90:2a:c0:80:c4:92:63:
         1c:47:6d:a1:d2:7f:9d:46:5e:13:cb:e6:0e:09:bf:be:14:de:
         5d:1b:a6:7a:6c:a5:02:13:aa:6c:40:31:5b:8a:d7:ef:9d:f5:
         86:38:6e:2d:77:44:27:57:2a:ba:ff:47:fa:ad:86:f6:fd:81:
         23:95:3d:5b:a2:51:b0:56:4d:b3:50:43:1f:16:3c:fb:17:66:
         03:9e:ab:b9:88:2c:10:31:0c:26:0c:ab:3a:62:d1:b2:fb:05:
         5b:87:a8:64:52:61:2c:58:a8:96:e6:5c:2f:b9:bf:65:01:ec:
         55:5a:7e:26:bb:7e:b0:8e:cf:76:99:fc:00:be:b1:7b:ec:b9:
         be:60:5c:7f:30:15:73:af:98:c5:ce:c6:8a:90:46:08:6f:56:
         f6:ad:0a:38:71:97:d8:ae:10:02:d6:da:a2:64:bb:8b:60:a8:
         3b:6b:54:4a:88:02:73:64:ac:f8:1d:7d:15:7c:ea:78:16:3c:
         7d:60:d3:b2:42:84:9a:2d:38:59:0a:18:25:43:3e:bc:02:66:
         e0:28:fa:4b:0c:1b:21:5f:c4:4b:5d:51:6d:8d:85:f0:e2:e4:
         9a:36:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:18 2026 by rpki-client