Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
File:                     f9798137-b618-3b75-a215-c6897b42d2ee.roa (raw, json)
Hash identifier:          GpDskxRemTVKx2KIW9OvqgF2/naNOwhOndfwKJsQ9GY=
Subject key identifier:   E3:30:48:77:97:CF:82:7C:9A:D0:07:60:1F:89:38:0D:C5:5B:98:AA
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F4328584CB551EA972270E24B4364DDC0
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     26677
IP address blocks:        199.212.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:ea:97:22:70:e2:4b:43:64:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=de03b769-c53d-4fb4-917c-0e4805777cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:06:86:31:b9:66:dd:8c:6b:6c:71:34:36:
                    a4:7f:67:a9:4c:65:f8:1a:16:74:7d:7a:f5:a7:a9:
                    da:ac:4e:fb:15:aa:88:dd:cd:07:cd:fe:4b:ba:e6:
                    26:1b:4d:65:3d:95:25:a6:73:d5:c0:0b:26:b7:0e:
                    20:f0:ff:2d:91:b0:6a:06:3f:00:2f:56:38:a6:0e:
                    80:bb:83:f7:7d:9d:03:32:c3:a0:8b:20:9d:e6:c9:
                    f4:55:0a:e5:f9:7d:83:1d:b5:d0:d7:2f:82:40:a4:
                    e5:44:4e:28:ae:6c:bd:c7:18:46:7f:40:5c:a7:7d:
                    8d:78:95:6a:58:d1:48:ff:18:e2:8f:20:0f:46:70:
                    c5:3d:b2:b1:82:d5:39:fd:cc:af:9b:bd:25:02:7d:
                    c1:d3:aa:6d:4e:67:05:dc:0c:ff:e5:5b:cd:67:83:
                    9d:bf:fa:a1:b8:67:48:a5:a1:c7:98:48:bf:ec:a5:
                    98:e8:33:f2:1c:30:33:6c:57:30:26:20:23:e3:0e:
                    6b:04:b4:e6:82:f9:eb:18:d7:66:85:b3:95:96:e5:
                    12:c5:06:2c:3a:73:42:d9:e7:44:c5:c9:19:5d:15:
                    95:14:32:4b:d7:02:0a:b4:11:03:a9:44:56:05:24:
                    aa:0e:a7:a9:6a:37:77:c8:0e:a4:96:d9:e3:47:1d:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:48:77:97:CF:82:7C:9A:D0:07:60:1F:89:38:0D:C5:5B:98:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:9a:d2:93:83:6d:f9:37:ad:d4:5e:38:33:90:f7:f7:f4:
         e9:36:2f:86:bc:83:08:d6:b0:10:01:91:06:a1:85:85:b3:b5:
         76:4a:6a:1c:f7:e2:bd:f1:59:c7:ee:00:a5:70:5e:d1:2a:ec:
         57:5d:81:4c:74:98:12:b0:c9:b5:68:7d:71:72:2d:7a:95:5e:
         83:e7:f0:ef:b0:d3:f3:b4:dc:da:5a:c3:07:5d:4c:91:b5:17:
         c9:64:d4:a4:78:69:02:81:ae:5a:82:08:46:6d:9d:e8:3e:6d:
         0d:01:14:45:42:4b:c2:42:c5:70:0e:b2:b8:34:43:3f:91:9a:
         45:f2:97:ea:4c:03:69:18:6b:31:38:5e:c8:ac:34:d2:e2:8f:
         e5:b2:86:52:ec:19:01:94:09:4b:b4:14:6b:c3:33:ac:d2:73:
         32:7f:39:fd:0f:5c:7b:c5:07:62:cc:d2:80:3a:25:24:55:0e:
         76:96:58:d2:c6:8f:54:50:b2:f8:a4:99:3b:2f:31:b4:b8:bb:
         54:10:f1:04:eb:be:ed:c9:a1:00:68:b9:e8:75:c9:7b:f4:8d:
         80:aa:03:83:27:81:29:8e:24:0c:12:51:7b:0f:82:ce:4b:9f:
         86:04:3a:03:e7:6f:af:6f:54:0c:11:41:df:ed:9a:80:e8:73:
         a6:2d:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:26 2026 by rpki-client