Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f5d009-0b31-3a89-8c7c-aa4f9c9a3c97.roa
File:                     12f5d009-0b31-3a89-8c7c-aa4f9c9a3c97.roa (raw, json)
Hash identifier:          04XkpWE/lbZIkd0seDEx5S++8GAZNHSiXFTgudc55Go=
Subject key identifier:   08:9D:8D:40:06:23:E3:68:87:F4:C0:D7:15:16:89:DC:EC:2E:16:97
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584CD3A17D6EEAE7B171F9C7FC80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f5d009-0b31-3a89-8c7c-aa4f9c9a3c97.roa
Signing time:             Wed 11 Feb 2026 10:35:35 +0000
ROA not before:           Wed 11 Feb 2026 10:35:35 +0000
ROA not after:            Tue 12 May 2026 09:35:35 +0000
asID:                     215224
IP address blocks:        107.182.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d3:a1:7d:6e:ea:e7:b1:71:f9:c7:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb 11 10:35:35 2026 GMT
            Not After : May 12 09:35:35 2026 GMT
        Subject: CN=b57fe1d9-45d4-4cb5-9018-75d20ae19b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:18:62:a1:2f:3f:16:9a:6b:96:bb:5d:cc:
                    ec:57:34:19:a3:b0:06:2b:5a:37:bb:7b:63:98:18:
                    7f:22:81:c0:1a:d4:7b:6d:3f:69:ba:ff:ae:94:ea:
                    cc:7d:a3:f7:05:b4:c3:57:b9:2a:fe:63:87:8c:96:
                    ba:35:70:43:86:f2:65:1e:6c:81:1d:9f:6c:6f:0d:
                    c0:71:a5:e8:3a:4e:94:ef:c4:53:7e:e8:02:4f:d0:
                    65:37:1f:28:11:8c:01:9f:96:49:8b:eb:72:0f:4f:
                    09:02:3f:33:c7:ac:19:3e:4e:ee:ec:2e:8b:fa:15:
                    8c:7d:1d:0c:d9:7b:7d:f7:e2:b8:e9:3e:d4:b2:da:
                    91:c7:e4:19:95:6e:4e:d2:47:12:4d:bf:68:ef:9c:
                    9c:61:d4:e3:e0:fe:b5:eb:ea:ea:88:11:c3:84:fb:
                    ae:b8:ab:6b:ea:da:6e:8d:14:cb:b3:62:69:c0:17:
                    95:0e:9b:d6:7c:6a:8a:a4:49:84:2d:e2:9c:3c:a0:
                    0b:e7:39:df:8c:89:67:ad:df:15:f3:45:83:46:e4:
                    b7:35:43:5c:50:2e:51:05:92:67:2c:4d:db:16:7b:
                    44:ab:bb:ad:54:28:c5:43:a0:16:35:ee:48:b4:22:
                    99:18:9d:a2:63:93:99:ae:5c:02:4d:01:3f:37:ef:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:8D:40:06:23:E3:68:87:F4:C0:D7:15:16:89:DC:EC:2E:16:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f5d009-0b31-3a89-8c7c-aa4f9c9a3c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:00:00:be:d7:a0:45:1c:98:76:e8:b4:c4:22:03:43:ce:
         88:0f:d3:cd:a0:10:ef:c1:bf:30:5e:c9:33:47:69:d3:22:dc:
         e5:48:c7:51:8e:98:ce:70:d1:72:8d:f9:32:be:a3:dd:2a:c9:
         58:36:38:35:1f:ec:fa:c4:f4:11:27:e9:89:15:e0:df:92:ab:
         19:89:46:27:d0:13:a3:7f:5c:12:63:1b:cc:ce:7f:5d:8f:10:
         67:76:12:cd:92:e5:09:86:c1:45:41:49:7f:21:db:56:c3:bf:
         10:14:19:3a:34:2f:e3:a2:16:ae:51:db:98:47:80:a6:f3:36:
         ac:da:32:c8:76:44:de:8f:3f:20:a0:74:2d:4a:d8:c5:77:9e:
         4d:dd:c7:0a:48:d8:3e:6b:75:aa:1c:f0:a0:b7:b2:eb:5c:da:
         5f:50:57:6a:e4:8f:f0:17:d1:0d:ec:e6:7f:21:d1:20:24:6d:
         86:28:e3:a0:94:ab:17:84:b3:fa:30:2a:94:c3:68:f1:94:df:
         1f:dc:36:2e:a0:44:6f:7a:db:05:c4:5a:9b:95:5b:60:3a:0d:
         65:d1:ae:ed:2e:d0:e6:09:95:6b:77:e4:38:ec:85:fc:fe:bd:
         58:de:e3:b7:d7:43:c2:10:8a:1f:d6:b8:9b:17:f0:ff:84:ed:
         55:54:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:05 2026 by rpki-client