Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa
File:                     ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa (raw, json)
Hash identifier:          OIdEIQ7VTnamMzgn3kaAZ04ILprp4pU0Qs0HGNCssnk=
Subject key identifier:   C7:11:4F:C1:17:D2:67:36:2A:01:59:95:7F:38:CF:CE:5D:FE:7D:76
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF852331022079692EE688A80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     23473
IP address blocks:        96.63.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:33:10:22:07:96:92:ee:68:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=0cb70a44-581d-41f8-becd-7ec1b9c2eac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:62:36:24:4d:0c:43:15:87:c3:ac:ef:06:
                    3c:d0:3c:32:c5:89:8d:58:fe:4e:57:f5:b0:47:da:
                    af:60:62:aa:86:f4:ba:93:7f:31:1e:ca:05:98:30:
                    42:de:06:91:8a:89:d5:7e:16:98:2c:b7:80:93:51:
                    21:fc:60:23:a2:c5:ba:eb:84:77:d7:00:4d:f2:10:
                    e3:68:81:89:ae:0e:1d:8f:da:9d:65:71:0b:72:0b:
                    de:21:88:7e:50:4c:28:1d:57:9c:fe:ab:8a:af:2b:
                    45:e3:34:81:a0:0d:61:ce:cc:1a:d2:ea:2d:cb:63:
                    63:e7:6c:19:b3:6f:49:f5:f2:51:b7:8a:e2:e7:c3:
                    96:ff:54:c6:2c:4c:c5:3a:fa:18:dd:b7:84:f5:cd:
                    6f:d3:dc:43:53:cf:a6:72:7e:75:6d:f2:16:06:5b:
                    b9:a8:87:a6:b0:02:93:1a:a0:9a:3d:d8:82:54:7e:
                    48:96:ec:15:38:67:6e:76:f9:63:97:f8:ca:a4:0e:
                    aa:22:3f:5f:9f:e8:9c:8b:2a:43:85:78:92:cd:12:
                    ad:b2:ca:23:7b:2d:73:df:a3:48:56:17:f0:d0:ee:
                    23:ad:91:59:6c:95:e8:e7:ce:fa:cc:ab:2e:c6:69:
                    0f:74:8a:c1:02:9a:2a:e0:2e:d3:20:20:84:f3:eb:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:11:4F:C1:17:D2:67:36:2A:01:59:95:7F:38:CF:CE:5D:FE:7D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:95:82:fe:c0:0a:42:da:e1:3e:1b:a6:57:5f:22:f1:54:8c:
         ab:24:f7:27:ce:e5:d6:f5:02:bc:43:31:fc:0c:6f:0f:a6:1d:
         a2:ee:36:5a:3d:cd:f2:97:c1:87:3d:a7:dc:0b:08:d4:3e:0b:
         46:3f:54:2c:ce:64:f6:0a:35:33:13:87:47:22:e5:82:ea:6d:
         01:ef:a2:4f:77:51:f2:3f:3f:19:16:a0:6d:3b:87:83:89:dc:
         33:25:fa:d2:96:ad:36:15:db:c8:b5:03:bb:70:89:7d:4f:4e:
         ae:d4:8c:d9:fb:19:19:f1:6c:f3:42:1d:3b:6d:eb:12:64:3c:
         f1:3b:b5:aa:77:af:91:e0:3d:39:88:a5:f2:be:17:32:47:2b:
         a4:6c:83:c0:3a:38:16:1b:ee:43:99:aa:4b:2d:0d:8a:2b:fa:
         be:d8:a6:40:e8:a7:f1:a7:02:70:87:e7:90:9c:b3:68:2e:bc:
         85:0b:ba:cc:c1:70:1c:4f:52:ef:71:e2:4e:e0:06:68:b1:d5:
         39:66:f5:31:17:df:54:ed:aa:d2:4a:c5:de:e1:2a:74:c5:8f:
         88:40:ca:be:c8:f5:da:b0:89:5a:95:3d:ca:74:ed:99:a8:b4:
         57:cd:45:ef:65:8d:dd:15:e9:81:fe:f4:1c:52:ba:ae:59:2b:
         d5:d0:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:19 2026 by rpki-client