Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa
File:                     86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa (raw, json)
Hash identifier:          7ZqPvsnUCp67kM+dvObjxQ+KmJsBHAHTRfc/WWiOt80=
Subject key identifier:   2B:3B:D4:E9:AD:45:D6:1B:B7:B8:A0:5A:EE:86:28:CD:A7:E6:99:D4
Certificate issuer:       /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial:       010D0C9F4328584CE8F76BA569A2D94B7B506FB8
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     36195
IP address blocks:        130.250.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6b:a5:69:a2:d9:4b:7b:50:6f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=0f918eaa-37f7-45c5-9523-6310f6dc1be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bc:3e:61:b4:34:eb:ab:e6:66:56:ac:77:c1:
                    f4:23:48:9b:8c:64:72:40:62:f6:56:4c:be:75:48:
                    ee:25:f2:f7:2d:3e:da:c9:37:4a:23:ae:22:f1:13:
                    db:33:fa:18:f7:aa:92:e5:af:a6:01:a7:89:e5:08:
                    4a:80:c4:74:0f:eb:4e:a4:a8:82:e3:d5:ce:ec:5c:
                    dc:db:12:48:cf:15:e8:35:2a:a7:b7:96:c8:24:6c:
                    5c:06:7d:5a:e9:26:9a:52:ad:30:55:54:c8:72:ee:
                    e3:5f:b1:df:f1:70:48:09:6a:66:3e:a6:f7:af:c8:
                    64:7e:47:39:c8:a1:25:07:c0:0c:34:49:e2:08:5d:
                    8b:1e:3b:9e:a7:5c:a7:24:e2:19:4a:8e:56:7e:d3:
                    e6:6d:0a:87:4d:d1:e1:21:a8:99:92:46:3a:0c:e1:
                    10:0e:e2:5d:07:8d:6d:f4:d8:d9:64:9f:91:b5:f1:
                    58:02:a6:5c:f8:e5:0b:51:da:ab:63:68:16:10:68:
                    7c:da:13:2a:4d:c4:70:8c:03:23:55:3b:eb:d8:9a:
                    a3:31:71:f0:dd:75:92:33:bf:de:8c:d4:30:ac:15:
                    fc:68:5e:45:b9:61:2a:77:33:17:fa:9e:7a:f5:23:
                    a6:38:1a:7c:f3:65:b6:c9:52:a1:6c:62:6c:de:61:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:D4:E9:AD:45:D6:1B:B7:B8:A0:5A:EE:86:28:CD:A7:E6:99:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl

            X509v3 Authority Key Identifier:
                keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:17:c0:d1:df:17:9c:29:a5:1c:54:35:fc:97:55:f5:ab:c5:
         00:56:e8:15:80:01:31:e8:a6:ae:ec:c7:78:4a:75:67:19:75:
         fe:36:9f:fb:a9:55:80:9a:f0:ca:3f:ca:d5:40:2b:15:fe:f7:
         36:1a:65:ff:96:84:3a:f8:bd:66:d0:b2:ab:44:0d:4a:c9:b1:
         fc:c3:26:c0:7c:5a:e6:86:47:c6:d2:b7:9a:fc:eb:bb:6c:cc:
         e4:d2:6f:4a:72:7e:91:4e:04:a0:63:f7:d0:2d:01:b9:8c:ca:
         4b:69:5a:3b:57:14:0f:d3:ad:e7:07:dc:14:ec:8f:1d:99:89:
         ac:3c:02:e8:98:89:78:5b:d1:9e:ef:de:e7:08:1b:d5:37:6b:
         6e:2f:b9:61:e1:b3:63:4b:9f:fc:0b:9b:46:6f:92:c3:41:0c:
         d9:ac:af:9a:40:31:36:d1:b0:8e:b9:11:54:4a:44:1a:77:82:
         a5:e0:ab:0b:eb:2c:77:7a:3f:b6:a7:e6:08:0e:89:63:d6:fc:
         f7:cd:eb:1a:8a:ba:14:07:7e:08:03:28:9f:24:d1:a7:9e:14:
         67:52:46:df:25:37:40:e6:88:2b:ef:99:a9:50:2c:3b:36:37:
         2f:b8:52:5e:f8:07:d4:0b:f8:97:07:aa:fa:d5:b5:71:ac:44:
         d8:a5:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:36 2026 by rpki-client