Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa
File:                     c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa (raw, json)
Hash identifier:          qTGdaLXjimNEjZR0rMYj7WAhKg/zrrGV1CTyod44D+w=
Subject key identifier:   63:46:D8:3D:85:04:F7:F9:B0:7F:49:FD:50:DE:87:D2:D4:D4:EE:EE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5D07F206B8786729D37318
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        172.96.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:07:f2:06:b8:78:67:29:d3:73:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=fbab2555-08f5-46b8-a8fc-ce34d7f33707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:19:11:5d:8c:38:9f:32:d9:58:c7:23:98:
                    b7:f7:53:2f:34:2d:91:6e:0c:b3:6c:8f:21:75:b7:
                    54:92:4f:c0:4c:c9:d5:02:3b:f8:da:1b:15:3c:34:
                    57:66:d5:e3:55:3c:4b:24:d9:0f:ff:ba:2e:0e:3a:
                    e3:b8:bb:59:6e:10:9e:cf:d8:5f:75:00:18:26:9a:
                    6c:bd:12:fe:64:49:44:2d:c5:40:c1:c0:67:bf:b9:
                    5a:b7:e1:aa:be:0b:b0:da:69:d2:37:25:75:21:e9:
                    b7:e5:bb:18:0c:62:d0:6a:a4:67:a8:b0:c1:10:58:
                    39:36:53:30:5a:57:c0:f3:17:f6:17:bd:b1:1c:86:
                    b0:19:be:8d:87:75:e6:c9:44:be:6c:6a:71:50:de:
                    79:f7:be:ed:82:4a:3d:19:9a:e3:cc:7e:2f:7b:c6:
                    6a:42:c1:9e:6e:1c:a0:24:6e:3f:ef:80:ae:db:0e:
                    60:3c:2d:4a:be:42:bc:8f:3b:fb:7c:42:d8:2b:97:
                    8a:da:cb:ca:8f:b6:4e:a6:93:4e:01:b6:7c:ae:a7:
                    34:26:6d:72:4b:ce:33:10:00:29:64:50:e2:ad:37:
                    86:7c:60:a8:9f:0d:01:03:d4:35:9c:15:88:bd:43:
                    23:e2:32:5b:92:fb:3b:7b:90:96:83:09:46:c8:8e:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:D8:3D:85:04:F7:F9:B0:7F:49:FD:50:DE:87:D2:D4:D4:EE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c08c0b71-24f3-3ee7-82a3-255dedbafdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:56:a9:ff:9e:18:01:ba:59:a9:cf:ca:13:aa:70:d6:c4:
         96:ac:27:a7:c6:8c:f3:0f:cd:01:df:0f:27:df:ea:97:98:fa:
         26:da:88:ca:c4:6a:6d:2f:64:52:1c:f4:d4:3d:65:7a:8d:f0:
         50:d0:cf:95:c9:16:0d:99:3c:8a:e9:e7:b5:95:6e:76:e1:da:
         77:33:83:92:26:09:f0:24:0c:9e:25:9b:5f:51:1f:90:f9:a9:
         5e:df:6f:cb:03:25:df:9c:fb:6c:49:79:22:3a:8b:70:ed:b0:
         d7:53:06:de:2b:52:a0:fb:32:33:50:03:91:cf:59:aa:aa:96:
         3f:ce:3f:b9:72:99:a3:e6:e3:bd:43:87:0b:99:db:43:5e:72:
         f6:c5:6a:a5:ba:14:fc:7b:a7:40:08:29:17:0b:80:87:d0:87:
         d0:59:1e:45:e0:dc:36:32:71:e6:30:e5:37:fe:64:a8:30:e3:
         76:cc:ea:09:f7:06:c1:c0:25:bf:a8:dd:45:f2:bc:d1:05:78:
         18:5b:35:a1:c3:0d:0b:3a:43:0d:ee:90:a6:3b:c4:a7:dd:80:
         ca:a8:81:a1:d3:4f:6a:7e:b2:fd:06:bd:b6:2f:92:59:51:3a:
         be:9a:4f:f1:cb:8a:4f:3c:97:95:00:bf:7a:b2:b8:c1:55:8b:
         26:00:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:54 2026 by rpki-client