Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/08e22640-f7ef-382b-8f22-b2db60d9458f.roa
File:                     08e22640-f7ef-382b-8f22-b2db60d9458f.roa (raw, json)
Hash identifier:          Xw1Dn5JVfkeaYpBTUNuzaDT0mzl0spOpJzfhr5w6ZXE=
Subject key identifier:   4A:90:86:6E:D2:DE:55:FA:49:AC:E1:C8:BA:FE:AF:BD:16:91:77:F1
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21F8080D68C7E44D97C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/08e22640-f7ef-382b-8f22-b2db60d9458f.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        198.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1f:80:80:d6:8c:7e:44:d9:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a29558c1-abc1-4f34-95ae-7a6a3a3647d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:4c:10:7f:3b:79:fe:25:04:95:f2:d9:73:
                    ed:e0:18:ff:86:4f:e1:50:fe:0e:8a:5f:c8:48:87:
                    d6:bc:07:ff:96:37:97:45:79:f9:7f:44:05:7c:53:
                    da:9b:39:a8:96:f3:e3:9e:8a:e1:4e:88:1a:27:85:
                    5d:05:e9:1f:37:21:63:d9:06:94:f8:0b:c9:c3:c6:
                    29:c9:a2:5b:20:92:51:21:ae:bf:18:4e:8c:1b:b6:
                    10:8b:81:41:1a:8a:58:a1:c1:37:b6:ef:de:f6:50:
                    2e:70:a4:12:d7:45:c0:ca:ca:61:e2:cd:73:84:92:
                    3e:15:85:39:85:16:60:9e:cb:21:51:99:b8:ed:46:
                    28:f6:82:6b:31:7d:4f:35:84:11:3a:3c:68:37:5e:
                    79:d4:ed:23:e1:d5:68:e3:24:07:dc:af:4a:81:f9:
                    f7:36:4d:a7:a4:eb:ed:78:df:17:f5:aa:72:0a:43:
                    67:3c:c2:21:be:b8:b9:0d:af:4a:f3:03:3a:58:a6:
                    1f:85:20:9c:06:9c:a4:25:8a:f1:1e:d4:13:a3:96:
                    94:dd:a3:be:07:97:86:0b:1c:15:b8:6a:8b:8d:57:
                    ca:6e:44:45:58:79:e1:95:22:19:02:a6:c9:65:8e:
                    9a:a3:a0:74:96:70:69:73:66:34:af:14:34:73:8e:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:90:86:6E:D2:DE:55:FA:49:AC:E1:C8:BA:FE:AF:BD:16:91:77:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/08e22640-f7ef-382b-8f22-b2db60d9458f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:9a:c8:48:10:90:f1:81:db:25:3f:76:80:1d:c0:07:4d:
         73:2d:f1:50:18:aa:dc:ab:d3:0b:af:19:cd:7e:1c:ef:99:5b:
         6b:fd:a5:01:13:bd:67:32:44:b8:d4:0d:4f:a9:ef:5f:cc:9c:
         09:b7:50:e1:ef:b1:99:ae:42:0b:25:81:6f:75:4b:5d:1e:c3:
         1a:a3:26:85:cb:9f:8a:eb:0f:71:e9:e1:d6:9f:0f:a7:34:2a:
         db:54:54:8e:bf:5e:46:92:63:62:3d:e5:2d:08:db:34:7a:5e:
         15:f1:7d:c1:11:ef:a7:fa:77:6e:fb:57:bd:8c:12:0a:d1:5c:
         e4:f0:dd:32:b7:98:ed:2e:39:30:9d:fe:17:7c:74:d0:67:11:
         f9:62:ce:24:d6:56:87:98:8b:96:a2:21:b1:a7:9f:fe:34:22:
         78:96:c1:f9:f4:eb:ed:e4:f6:78:98:ce:2a:21:66:77:14:6b:
         b2:2e:4d:8b:bb:0f:9d:12:e1:c8:d9:f5:50:cb:7b:93:e4:e2:
         8e:7e:e8:a9:2c:3d:c0:f6:df:85:45:97:0b:72:83:37:81:df:
         23:43:cd:c9:ac:06:bd:03:4d:ce:54:e0:7a:a4:00:d1:48:31:
         45:68:95:8c:7b:39:67:d7:25:32:8c:9c:55:7f:60:49:e9:22:
         e3:52:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:23 2026 by rpki-client