Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
File:                     d66336d4-f99d-3fc4-83d2-187c721b004e.roa (raw, json)
Hash identifier:          kAgh5Rc5ZA9MYi8sM9m1633zz6wZr74cHWv86RLUdpw=
Subject key identifier:   B3:50:44:08:F2:5E:5B:F7:08:41:77:74:92:85:6D:03:7C:87:54:9A
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584CCD0CA00B599A5670A681BF80
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     3464
IP address blocks:        204.29.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a0:0b:59:9a:56:70:a6:81:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=41194c54-5200-43dd-9d0f-3c025a8e7546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:eb:81:30:77:cb:d1:5e:67:9a:b3:01:26:
                    d4:ba:99:8f:a7:aa:3e:36:4f:cc:d8:04:5a:8b:de:
                    74:12:b5:c6:ec:db:e8:13:b6:e8:bd:98:2c:48:9a:
                    f1:9d:85:bd:4e:52:f0:0f:4b:0e:04:25:fd:3a:5a:
                    cd:41:77:01:6d:62:66:b5:f9:5c:c0:b8:10:58:49:
                    7a:a0:2d:5a:72:f7:b8:48:21:1b:4a:fd:57:eb:f3:
                    d3:bb:fd:59:2e:1c:9c:55:4f:83:1d:73:f4:e9:a9:
                    11:8d:52:c8:69:b5:82:a8:09:7f:5f:0d:6b:06:fb:
                    c8:28:1c:03:f0:c9:cb:7c:c4:56:ed:58:b1:df:22:
                    a3:03:95:21:aa:f6:53:b2:ec:6e:8d:c0:40:c2:fe:
                    15:aa:85:1a:19:aa:48:8e:15:92:c9:21:a7:58:02:
                    68:57:44:4c:e4:f6:0c:d2:b9:96:60:cc:7f:17:fc:
                    86:b1:75:04:86:e8:c2:17:f1:9e:d7:12:38:b5:8e:
                    51:c9:c9:23:38:37:30:53:1f:5a:4e:5b:ef:3e:83:
                    72:3a:13:b7:1d:fd:ad:51:18:f2:1d:32:b9:2a:cd:
                    08:50:3c:75:d3:e9:16:9b:2e:04:4c:ed:9e:1a:f8:
                    90:81:d3:2e:5f:1a:82:fa:a4:3d:7c:bc:6b:eb:3c:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:44:08:F2:5E:5B:F7:08:41:77:74:92:85:6D:03:7C:87:54:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:5d:a2:6f:ac:f7:d7:c2:cb:e4:42:79:87:7c:9f:e8:6f:
         64:40:fb:5b:ea:13:06:36:21:fe:1b:88:95:b6:12:ab:90:e6:
         e7:ad:51:c8:fa:e0:f2:ed:9c:ed:eb:0d:51:73:2f:74:4e:5b:
         fb:cd:20:98:4b:67:21:80:e3:39:2d:cc:24:ef:e0:c6:f2:01:
         35:59:f2:c8:fe:0f:fb:13:a6:1b:80:80:05:d5:b7:b0:ca:31:
         96:d3:72:7f:1e:7a:23:63:06:21:93:ef:b5:36:5a:46:0b:fd:
         72:93:21:3c:20:5a:1e:67:08:0e:60:d8:48:ef:5c:12:51:76:
         1c:61:b9:b0:18:73:a1:0a:12:59:f2:bf:42:8c:68:08:90:36:
         d9:e4:74:60:57:4a:34:4c:12:0b:a1:77:16:9c:77:bb:6a:bc:
         10:5a:44:8a:e6:ff:d9:23:99:4b:39:d9:9c:c7:44:3a:b3:16:
         b4:e0:bd:b7:d3:3d:99:48:62:75:b3:ae:9a:79:bb:d9:84:ab:
         79:87:0a:45:64:ca:a8:38:6e:a8:a6:9e:fd:2d:0d:47:fa:12:
         97:19:12:d9:c3:78:42:1f:92:5c:8a:ce:3c:99:3c:eb:a7:82:
         64:60:16:ce:a6:fd:9c:c1:7d:56:3c:70:8c:a0:06:a4:cc:cb:
         85:1a:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:48 2026 by rpki-client