Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa
File:                     8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json)
Hash identifier:          2TvXFSCEbe3aNo1CFV2e3t/uo6yOhy3H/eyl4L5bmmc=
Subject key identifier:   4F:11:C5:14:9C:4A:1F:13:F0:2A:5E:53:C1:BA:EB:B1:5B:E3:AA:DA
Certificate issuer:       /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
Certificate serial:       010D0C9F4328584D037D1AF5788F6BB1B1F51400
Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     398888
IP address blocks:        128.254.220.0/24 maxlen: 24
                          163.123.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1a:f5:78:8f:6b:b1:b1:f5:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=c0031873-b074-4190-8445-a6aea3ea36bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:bb:fb:f2:c0:af:eb:ea:c3:d9:91:d5:4a:
                    80:61:6c:6c:0c:d7:b7:69:43:5e:30:71:4a:0a:49:
                    14:20:22:d5:9f:19:e3:65:cd:2e:87:17:d9:a9:02:
                    b8:cc:e3:bf:db:39:3d:01:74:5c:eb:32:02:5a:6a:
                    09:de:c8:1c:c7:a2:bd:50:13:64:f3:a0:23:f5:c7:
                    41:24:15:0f:41:f1:b3:72:72:7d:a1:87:92:4c:73:
                    b6:ab:70:1d:0b:0d:a5:9c:e0:a6:c6:18:d8:23:e5:
                    fc:c8:28:2e:20:a9:56:d9:1d:1e:4e:cd:b9:e2:32:
                    ce:f0:1e:86:3d:d9:3a:f2:80:15:5d:c7:9f:71:69:
                    49:f6:03:73:36:f6:be:55:90:4f:79:3d:68:98:fd:
                    55:1d:72:71:9e:a3:e3:10:d0:3d:93:ad:b0:f4:16:
                    6e:2d:4f:b3:10:7e:83:74:ad:38:60:d6:d9:e4:fa:
                    95:bc:cb:c5:9b:de:20:2b:8f:45:56:84:fd:c7:d1:
                    9e:39:44:45:02:68:23:38:8d:d8:5d:97:8a:c8:9c:
                    a3:9e:9d:9c:66:87:cc:5d:f6:7c:0e:5b:86:d5:65:
                    d7:05:fd:a8:36:51:f9:00:7a:d6:a3:b6:1c:a5:db:
                    e6:51:e4:40:89:9f:81:fd:b6:29:29:2a:33:2b:a5:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:C5:14:9C:4A:1F:13:F0:2A:5E:53:C1:BA:EB:B1:5B:E3:AA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl

            X509v3 Authority Key Identifier:
                keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.220.0/24
                  163.123.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:e0:ac:34:31:e3:5d:a9:80:b4:d7:c2:c4:ae:3f:93:be:
         fe:36:74:79:a0:fd:67:83:ed:56:6b:4a:13:8f:d4:a1:f9:39:
         e4:52:f8:1f:6c:53:22:8b:77:97:31:37:2f:1c:d9:3e:c7:c1:
         24:f3:5e:bb:86:aa:fa:4c:f5:f6:82:da:5b:61:13:5a:05:15:
         fe:4b:34:f7:ab:40:b0:37:9d:c6:5b:bf:8f:15:90:59:41:a8:
         bc:80:27:36:b3:2b:0f:29:c6:b8:96:b7:46:b4:9b:a4:7c:a1:
         3a:74:36:06:b1:eb:ed:81:9b:5a:6e:fd:d3:92:d1:d2:36:3e:
         99:8c:5e:64:d1:7b:ee:72:f6:2f:1f:3a:ca:61:c6:03:a7:98:
         e1:98:fa:c7:4a:ce:52:b6:62:42:94:88:5d:05:20:b1:88:6b:
         b0:f8:5b:d6:6c:48:8c:1b:5d:a1:3c:e6:73:08:15:23:84:22:
         1e:8b:2f:22:75:b9:58:18:6a:83:44:e1:7f:49:9d:4e:e1:9e:
         d9:2a:63:91:65:1a:1c:90:76:55:d8:b6:97:d7:ca:25:a9:45:
         cf:29:6c:4b:58:2e:db:60:ae:29:ae:7c:4f:2a:13:8e:0e:49:
         76:78:4d:38:6c:bd:ca:f6:1c:d5:85:74:70:d6:3e:52:d6:19:
         cf:7b:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:35 2026 by rpki-client