Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/3661814c-f3e2-3700-8a60-84c35292ef9c.roa
File:                     3661814c-f3e2-3700-8a60-84c35292ef9c.roa (raw, json)
Hash identifier:          9QFbF2rlvnVMPcfZs5OhNjiUycWhhwt6NgFvfu7Rff8=
Subject key identifier:   F3:FE:A1:73:FE:AF:D1:E6:06:0E:3B:A0:0B:75:E1:6B:6C:3F:B0:94
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F4328584D0217B1B29405B39E753C4CC0
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/3661814c-f3e2-3700-8a60-84c35292ef9c.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     13875
IP address blocks:        204.235.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b1:b2:94:05:b3:9e:75:3c:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=92c67321-2013-4587-868a-545f658d3cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:35:50:5e:c5:91:41:39:e3:41:f0:6b:73:
                    8e:de:e3:38:6c:33:d5:d4:2a:5e:bb:12:75:c0:49:
                    0f:9a:15:ad:fa:d7:7f:2e:5f:f8:21:37:11:ee:62:
                    18:b1:9b:35:2e:09:57:47:0f:9c:c9:4f:8d:78:84:
                    1d:98:62:6b:27:c8:dd:51:64:9c:75:de:3b:4c:6c:
                    14:13:b1:f2:31:12:ba:ae:5a:9e:84:90:aa:5c:9a:
                    8e:d7:64:f1:e0:a5:a8:8b:b9:6c:e3:4a:77:2e:e2:
                    ef:4b:a4:56:1a:bd:89:43:4c:39:a1:1f:ee:71:37:
                    90:b8:c8:e7:67:91:a1:a1:13:0f:c3:71:2c:ed:cb:
                    a9:f2:e3:ed:21:b4:d9:e0:f5:f0:c5:1b:41:d4:ec:
                    2b:cb:27:9a:e0:8e:02:0c:2e:dc:67:ad:b1:15:5f:
                    96:3f:0a:13:95:0a:d6:73:bd:e8:2a:d1:0c:ae:bd:
                    1d:4d:ce:9c:5f:46:93:6d:e3:06:b4:7c:49:4e:41:
                    06:51:e9:29:c0:8e:df:33:5f:3b:2b:3f:ee:37:3e:
                    e6:ee:6c:4b:2c:95:82:c9:5f:1c:95:e1:2d:84:8d:
                    38:46:12:5f:27:aa:73:9a:7c:20:e3:fc:bb:0a:45:
                    c4:d3:8a:b9:81:57:56:2d:76:2c:93:92:1c:60:7c:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:A1:73:FE:AF:D1:E6:06:0E:3B:A0:0B:75:E1:6B:6C:3F:B0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/3661814c-f3e2-3700-8a60-84c35292ef9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:53:5a:b5:1e:e0:6d:5c:a5:f7:72:e1:5a:3d:bc:19:ab:
         a7:b9:98:80:1d:18:3c:d1:eb:a5:56:9a:11:a6:f1:0b:35:7a:
         fb:7a:d8:70:55:a1:c6:55:69:4e:90:4f:a8:df:7b:68:e2:18:
         3c:c8:c5:51:81:0f:c3:7e:59:bb:c6:34:60:4c:91:c1:14:da:
         7c:84:24:8a:d3:a1:ee:3f:41:c2:f8:81:2b:39:25:0a:b4:c9:
         24:64:c3:13:66:11:61:e2:44:3d:96:15:96:86:32:47:4d:81:
         ab:c9:0f:63:b6:77:88:fa:86:4d:51:ee:0e:cc:14:ad:e5:06:
         7b:d0:0b:c1:db:eb:69:ba:cd:d3:b9:0e:92:8b:e8:3f:72:cd:
         3f:f4:dd:d8:f1:85:d1:15:80:5a:7e:9c:8a:24:34:8b:79:fe:
         7a:63:7f:5d:c9:f2:56:fb:af:65:e1:90:d1:1b:53:f1:ef:bb:
         fb:a3:32:c6:49:5d:fa:7d:13:cd:64:83:1b:37:ab:85:b7:11:
         5e:63:1f:4b:e2:a0:01:ac:a0:28:89:88:a4:c8:78:88:0d:d9:
         2a:48:bc:a6:df:f5:b6:2d:67:ff:5c:a0:e0:d2:84:6e:77:74:
         27:4f:d1:57:55:27:8a:92:f1:45:1b:4e:a5:80:3d:5b:68:fe:
         7b:07:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:49 2026 by rpki-client