Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
File:                     37ae591a-6de6-3583-890e-cdf5a88acce1.roa (raw, json)
Hash identifier:          rHDaD2EicpO6UQX3T/t32S+95TqDs4Xncz5FlO1XTq0=
Subject key identifier:   8B:02:BC:03:0E:17:C1:1B:BF:98:B4:DD:02:87:12:6D:D8:55:D8:8E
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F4328584CED279033D2E91C67168BAA80
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        206.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:90:33:d2:e9:1c:67:16:8b:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=d8cf8597-27ae-4fbf-a5cd-57bcf3b4dc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:58:a2:31:91:74:9b:bb:74:ab:14:dd:50:
                    78:e4:60:2d:58:cf:43:77:59:bd:dc:ff:82:00:26:
                    ac:6a:41:c9:95:a7:83:bd:fa:0c:c6:11:73:d3:92:
                    d3:31:63:1a:c9:f9:78:2e:1d:99:c1:95:04:40:e2:
                    d2:dc:d0:72:61:55:bd:24:4e:ae:03:0f:e4:2a:a8:
                    c8:29:fc:c9:04:9b:bd:78:0b:d4:9b:7b:0d:a4:4c:
                    19:ae:12:d9:24:8a:e3:4c:94:58:6d:2d:9e:ee:fe:
                    6c:7b:6c:76:a2:aa:86:fe:d7:0c:0b:cd:c3:fd:d6:
                    77:62:24:83:37:35:f5:dc:fa:01:6f:7e:ac:eb:50:
                    9a:f4:c5:26:a4:0e:6f:cb:81:cb:b4:dc:1f:0c:3a:
                    94:db:ea:80:65:d7:56:15:43:26:1c:29:03:2d:5f:
                    e0:64:32:1a:5e:cf:a9:e4:49:66:79:00:2e:43:a0:
                    45:0f:b4:69:27:5c:38:c7:24:d7:25:27:53:7f:5f:
                    09:2f:e3:82:1a:c1:a6:fd:fc:83:26:79:50:b0:e3:
                    e1:e9:49:7f:57:1d:d3:a7:44:26:6c:61:45:d2:d3:
                    3b:6d:40:1c:39:2c:6d:5b:28:34:6f:55:47:0f:c1:
                    ea:50:5b:ef:a7:79:f3:97:8d:65:4f:43:96:d1:61:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:BC:03:0E:17:C1:1B:BF:98:B4:DD:02:87:12:6D:D8:55:D8:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/37ae591a-6de6-3583-890e-cdf5a88acce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:d2:0b:e6:aa:11:c4:f9:ac:be:b4:e8:0d:f8:3d:1e:cd:
         2e:f7:a2:3c:a0:0a:9c:a4:8a:99:b6:b1:99:2f:d2:7c:08:b7:
         32:0e:70:b0:cc:23:f2:a8:44:b7:bb:93:4c:64:2b:c3:37:bd:
         ec:50:66:dd:fe:91:95:62:02:f1:81:8f:b9:68:22:eb:41:53:
         85:a5:41:41:33:1a:92:75:e8:e4:09:fc:47:0a:65:b0:44:77:
         42:6f:04:69:14:48:a0:8b:8a:f4:a3:4d:e2:15:8b:2a:18:60:
         c9:95:85:78:8b:ea:6d:e2:55:53:49:60:d6:82:e6:d6:d5:f1:
         c5:cd:ae:09:c0:70:50:03:c2:17:c3:18:bd:e2:e9:17:85:ea:
         f2:62:0a:ec:1d:83:b0:37:65:70:90:2f:73:6d:c5:83:d1:50:
         f1:8d:39:3e:6e:0e:d6:23:9f:bd:cc:93:80:f7:bd:88:c1:79:
         49:97:00:25:c5:c3:ad:13:a9:79:fd:24:b4:7e:da:0e:97:b0:
         5a:78:24:20:a9:68:4b:c1:b3:fc:04:65:ad:5b:4e:a4:f7:88:
         cb:65:e9:ae:9e:84:35:ba:ca:12:c4:e0:03:a2:47:fa:76:17:
         82:8e:f0:83:7d:04:ad:31:be:dc:68:6a:bf:fd:a3:26:36:7a:
         33:1b:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:03 2026 by rpki-client