Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
File:                     5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa (raw, json)
Hash identifier:          ZD8S4VAelWDlFW5c30IZnMBFC5H00XArdMhsgN+WeM4=
Subject key identifier:   50:8B:25:87:D9:AE:38:C2:AB:6A:01:7E:F3:40:4A:4F:C6:84:DC:E6
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328584CE4C76D23877C52BE9C7A5D00
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     14333
IP address blocks:        199.168.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:6d:23:87:7c:52:be:9c:7a:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=ab110460-b3d3-4caf-a099-3cb3e9b2cd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:a8:08:70:e0:67:e5:64:46:23:75:a5:2a:
                    e4:df:95:9a:7d:85:6a:06:f3:9d:76:04:cc:1e:30:
                    e9:be:90:4b:cb:7d:d5:38:e4:89:d7:81:99:b5:98:
                    57:61:f7:6c:40:4d:ff:b9:cc:67:aa:a9:65:ca:e5:
                    9a:a3:33:f6:f3:9e:67:b0:05:c3:09:d9:3f:20:5e:
                    4c:04:7b:7c:b9:ec:cf:b6:2f:25:8b:db:22:7a:df:
                    dc:ec:53:60:21:bf:7b:c9:de:bb:6c:58:7b:b3:3a:
                    07:1e:6c:71:02:21:a5:5b:eb:e4:d7:dc:6a:8d:03:
                    e1:4d:8d:45:fa:b6:e7:7d:83:09:25:8b:4a:82:6e:
                    95:06:3a:a4:c5:3c:ed:1f:7b:25:8d:15:52:9b:bb:
                    12:15:43:3f:3c:9f:3a:03:a5:96:12:81:a3:fb:03:
                    ce:89:fa:18:9d:1e:2c:48:f5:d9:5d:c8:91:20:99:
                    fa:0f:0d:fc:df:6e:11:30:42:8a:e7:f9:1e:f9:96:
                    0b:4b:36:0e:58:ce:b0:dd:ab:18:b0:1c:e9:99:19:
                    9f:80:e4:14:e6:bc:51:bf:16:82:6c:ed:88:8a:de:
                    60:71:93:25:ec:30:9a:02:29:5a:de:16:ac:17:c6:
                    38:65:b4:19:72:ae:77:8e:aa:47:85:18:4b:9a:a8:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8B:25:87:D9:AE:38:C2:AB:6A:01:7E:F3:40:4A:4F:C6:84:DC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/5e9a64ca-d9c2-3a40-b218-442e2ded20bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.168.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:0c:73:8e:b5:7f:0b:81:3d:cc:67:c9:65:c5:a7:f1:52:
         fc:e6:fa:ba:62:ff:f7:af:50:ba:fb:89:6e:d4:e6:55:1e:b9:
         56:ca:5b:3c:b8:b9:71:40:6b:9c:fb:49:39:5f:78:c6:41:02:
         52:38:df:8e:64:61:99:9a:e0:44:71:8a:51:a1:2f:c7:f7:16:
         8e:df:ee:4c:82:a0:e7:34:11:30:e9:ce:b8:17:22:a8:53:62:
         87:43:18:ae:85:c4:77:fb:4e:44:71:b4:f9:1c:ee:51:04:8b:
         be:b4:93:f0:08:16:60:ba:cf:4f:a6:a8:ae:40:af:66:b8:a3:
         10:b2:77:15:b4:7f:f9:38:d2:d8:12:93:33:ed:95:c9:fb:58:
         0b:ae:4c:2b:e8:a5:14:32:bf:ba:58:2c:3d:d4:a2:f3:f3:87:
         f7:cf:1d:e2:fd:63:6f:e0:03:dd:3f:5b:f0:de:2a:b6:b3:42:
         b2:6f:8d:86:3a:d3:c6:ed:63:fa:f4:3f:e6:e0:bb:3d:d1:c5:
         8b:fd:25:49:50:22:ee:fc:2b:59:82:75:f2:5d:13:f8:fb:e9:
         b8:29:54:96:e4:6b:a8:84:10:ad:1b:dc:01:2f:de:8a:a6:be:
         b3:34:60:22:c7:b2:b8:b6:9c:7f:75:3d:c0:59:66:eb:53:3f:
         48:34:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:43 2026 by rpki-client