Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa
File:                     da97c974-1728-31bd-91cd-689b5712cf39.roa (raw, json)
Hash identifier:          pzzegwAntTWiGDe9cKKlt+k0Hv6ZUD6VXKlhIABRGro=
Subject key identifier:   05:7A:A4:30:46:C5:6C:23:A6:3D:28:BA:54:CF:29:1E:3B:24:E2:DD
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584CCD0C9FD1E3633C3865454B00
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     3464
IP address blocks:        192.35.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9f:d1:e3:63:3c:38:65:45:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=0e380048-280a-4f15-8754-8ad3ffbebd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:fd:61:1a:3c:20:22:c9:0d:6e:d3:23:a9:
                    63:f2:80:2b:c7:f0:4a:ad:44:50:59:e4:8c:e5:73:
                    fa:16:07:2f:72:f5:80:4c:b1:40:03:c7:c7:18:01:
                    56:4f:51:0e:8d:a7:f1:c1:9a:4d:71:7f:e6:21:25:
                    a4:ed:08:06:39:2b:32:08:93:a6:ae:f4:61:58:7e:
                    8f:64:ca:63:3f:6c:04:ba:9c:f1:fe:07:26:38:42:
                    e5:06:f6:81:f0:b2:fe:ef:03:aa:83:a3:9a:4d:9d:
                    7a:1e:e1:22:19:4a:15:50:f4:21:78:07:90:f2:6c:
                    49:33:90:59:b9:4a:a7:15:6b:1e:dc:d8:bf:8d:6f:
                    f5:9f:24:2c:fe:68:4d:e2:68:6f:99:ea:1f:de:dd:
                    01:84:5b:8b:d8:43:45:22:9b:b8:b0:3b:02:e0:b6:
                    16:ac:3d:73:06:9f:2b:ae:e9:40:dd:60:bf:9d:4c:
                    25:be:38:76:93:3a:a7:f5:ff:fb:f9:3b:f2:c3:69:
                    89:1b:17:97:d4:6c:db:20:f8:be:8e:75:5c:f0:af:
                    c4:d4:b6:89:34:15:5b:f8:59:53:29:1d:b3:26:64:
                    2a:eb:d5:2b:4e:b9:79:24:26:e3:bb:a8:50:03:1b:
                    a1:c4:43:76:d3:e4:2a:bd:f0:fd:42:95:c1:81:f4:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:A4:30:46:C5:6C:23:A6:3D:28:BA:54:CF:29:1E:3B:24:E2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e3:49:77:c8:df:88:72:0e:57:20:57:dc:eb:ff:35:ee:c4:
         33:3e:fb:5b:68:f0:e6:a4:bc:66:62:75:a3:d9:2c:fa:66:f3:
         c5:99:92:dd:d5:18:87:bd:ab:95:73:51:d3:43:01:8e:90:6a:
         1a:ef:65:b0:a2:5a:ca:e9:05:43:9b:c5:02:91:71:40:b3:e8:
         6e:9e:ef:07:f9:a0:95:89:f3:3a:9e:ba:3f:d7:13:b3:f2:f2:
         76:03:ae:1b:c9:56:43:c0:d4:fb:43:e3:e1:5a:c6:4e:ff:33:
         ed:2a:12:23:25:a2:bd:94:61:1f:69:85:38:62:7b:9b:2b:11:
         99:4f:5b:92:7e:10:56:92:fa:b5:e1:c2:0f:54:e6:2d:99:39:
         ce:80:0d:d4:44:7b:29:b9:6f:02:37:87:5e:4b:86:c3:c3:66:
         ba:58:65:63:6f:c8:1f:68:31:92:a6:a6:9b:53:b7:5d:41:9f:
         87:14:1c:7d:a8:d6:22:c4:a8:13:1d:e6:4c:be:a1:10:cd:04:
         44:7d:4a:f5:fb:f2:06:1f:51:60:42:a2:40:c6:6c:25:8c:53:
         27:6f:ad:64:15:47:8d:ae:6e:f5:ff:f7:3e:b4:31:c3:12:16:
         8e:06:2d:53:b7:df:f8:7e:95:c1:e5:f0:bc:1b:8d:61:75:ac:
         1b:bd:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:47 2026 by rpki-client