Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebc950cb-f69b-325f-8b60-f4f3404fa22a.roa
File:                     ebc950cb-f69b-325f-8b60-f4f3404fa22a.roa (raw, json)
Hash identifier:          /rsrMZ3Dc6ENPalL61LndytHGVPVny2qwT2f99jUvVk=
Subject key identifier:   F8:0B:E7:B8:07:C8:33:83:3E:FB:E1:44:B0:55:40:12:79:B5:6E:BC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CB17548866B55BC222100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebc950cb-f69b-325f-8b60-f4f3404fa22a.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        152.44.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b1:75:48:86:6b:55:bc:22:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=e95d6107-2387-428d-864a-1f27a168b3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:bd:50:4c:4b:82:18:b9:6b:0f:51:45:16:
                    ce:ea:45:80:af:a6:c5:03:f3:0e:d9:16:f1:81:a9:
                    cc:37:de:ee:9d:7c:44:24:38:a9:4a:b6:51:2f:59:
                    89:1d:d8:cf:ae:b8:80:66:78:fd:bc:63:21:8f:5e:
                    97:e2:2c:57:15:8b:13:39:40:17:89:33:26:bb:23:
                    a9:59:12:29:3c:93:22:8b:dc:ab:d5:b5:f4:b9:fe:
                    bf:c3:63:e5:7b:bc:f8:c2:f2:93:a8:e1:d1:5a:74:
                    a0:c1:02:d5:7a:ac:84:41:81:19:bd:c8:6a:45:34:
                    bf:cd:8c:4b:e1:06:f0:19:f6:c4:bc:a4:95:15:5d:
                    be:b5:6c:3b:54:45:53:f7:14:93:d7:ff:a9:3d:32:
                    30:b1:3e:95:4d:97:f9:d1:7e:0e:dd:0d:82:ce:9c:
                    47:8f:46:5d:6e:83:86:84:f1:cb:fd:ca:81:23:56:
                    55:2d:f2:d4:6b:0c:84:24:3d:49:42:e7:4e:3c:7f:
                    ac:56:5a:46:d3:a2:05:e1:6b:a6:4c:d3:38:a3:1f:
                    6a:82:82:96:b7:ad:c5:08:35:63:95:e5:20:cc:ae:
                    16:ac:cc:ec:46:d8:f6:16:03:e2:40:c7:1a:83:15:
                    b6:e2:03:22:6a:3a:71:0b:bf:2e:dc:78:f9:28:72:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0B:E7:B8:07:C8:33:83:3E:FB:E1:44:B0:55:40:12:79:B5:6E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ebc950cb-f69b-325f-8b60-f4f3404fa22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:d2:67:a1:c2:be:d3:9c:57:0c:ff:31:98:36:4b:33:cb:7f:
         be:b6:db:6b:10:92:6c:23:74:f3:51:fb:00:45:d6:c2:6f:ad:
         2b:ea:4b:9e:f1:62:97:b6:a3:64:57:cd:6c:b8:39:f9:de:f3:
         1e:e6:96:7c:1a:17:4f:97:e3:69:11:0b:9d:ce:a7:54:65:75:
         8b:7d:f3:c8:84:9c:b2:de:3e:7f:a5:99:e9:03:f5:de:4d:c7:
         91:6b:3a:5a:91:51:f8:f0:0b:8d:f4:87:eb:8e:a2:56:4e:c5:
         0f:50:89:6f:73:85:b0:4e:e7:36:a3:52:01:ef:ac:91:86:3e:
         14:79:11:5b:f8:c7:f4:eb:74:53:c5:67:51:3b:b5:e7:98:72:
         1a:d2:f0:98:21:0c:c6:db:7b:22:a1:8b:d9:d1:5d:44:0a:ac:
         7c:69:fa:f3:37:65:1a:73:d1:a7:c3:05:32:bd:d4:77:db:e0:
         0d:6f:13:50:a0:68:b0:98:c4:27:78:71:c6:9a:c6:5c:54:d0:
         0d:14:d0:50:bc:d4:53:05:54:5b:60:13:3d:cd:00:c3:60:ff:
         4b:4c:51:ba:40:43:08:ec:84:14:88:ef:5a:75:e1:7c:b7:31:
         c4:2c:70:f4:59:9a:71:91:8d:3d:89:d7:51:ef:43:4c:0b:0e:
         80:80:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:20 2026 by rpki-client