Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa
File:                     3e9f3944-0079-3bac-8692-466114e9cf63.roa (raw, json)
Hash identifier:          pF6ws/eRXJ0tOF2pXqD6pFKAa4ZWqMI6ecsf0lXCXZc=
Subject key identifier:   89:85:CC:78:DB:EB:64:2E:C4:26:77:D7:EB:E9:CE:64:96:AA:B1:6D
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584CE62CB5887DE91EE83E25AC80
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     16504
IP address blocks:        157.96.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b5:88:7d:e9:1e:e8:3e:25:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=c323874d-8475-486d-a4d0-988278e9418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:b7:30:27:6d:b2:22:dc:c9:03:3d:24:0b:
                    e2:fd:de:97:2e:e5:88:ee:dc:f3:46:db:7a:e3:46:
                    3e:82:ac:35:cb:fc:72:2a:87:2b:04:46:54:f0:83:
                    80:8c:ff:b4:8e:24:63:ed:cd:ee:56:a1:5d:45:67:
                    34:d6:77:48:81:3e:d1:65:dd:5d:6c:42:3e:9a:a0:
                    20:f0:3a:93:7e:a9:dc:8a:9e:9d:a2:dd:ff:96:a7:
                    39:6c:72:ea:a6:32:0f:05:55:a6:87:cf:9f:a9:52:
                    9d:30:5a:b4:de:ff:f1:c9:fc:56:ed:77:30:0e:1c:
                    72:a3:88:31:ac:d0:a9:79:83:85:df:f0:7b:88:67:
                    d3:dd:fa:58:16:ad:e8:c3:97:19:51:89:89:c1:3a:
                    f3:e4:24:7e:f8:70:21:36:b8:37:e1:3e:f8:b0:70:
                    ca:2b:4f:82:df:18:94:da:1b:81:4b:42:63:64:40:
                    cc:dd:4f:2f:bd:15:2d:1c:9f:79:95:e3:f2:32:7e:
                    63:8e:89:2f:18:a3:17:ac:6b:47:1e:a9:dc:9f:db:
                    ce:77:d2:4d:a7:f3:d4:54:9c:dc:df:9c:c6:79:26:
                    68:b3:06:bb:ba:0c:33:b8:37:c3:9c:87:8c:f2:e5:
                    6f:21:17:28:00:7f:cd:66:5d:e5:01:57:c1:56:98:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:CC:78:DB:EB:64:2E:C4:26:77:D7:EB:E9:CE:64:96:AA:B1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/3e9f3944-0079-3bac-8692-466114e9cf63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:43:e1:f7:e3:78:56:aa:48:98:22:1d:10:36:57:d6:63:
         1f:c6:6c:ed:c2:7c:6c:f2:e2:f4:a6:1f:d3:3d:a1:39:d9:0d:
         4d:31:16:bd:c3:f6:79:e4:86:d4:7e:33:0e:32:0e:a6:62:90:
         45:58:30:51:3b:13:6f:b2:db:29:f4:ed:91:31:61:40:a0:b1:
         7b:50:fd:34:e0:29:10:4f:b2:d6:79:35:4e:4b:bf:c6:ff:31:
         21:d5:d3:d3:27:8f:58:a8:d3:06:93:a5:a2:5e:00:37:69:09:
         d2:15:96:45:26:48:c1:89:4a:30:1b:0f:ae:b2:a4:61:39:03:
         a4:70:6f:c0:68:6f:96:e9:43:e4:3c:f7:a1:4f:ea:63:05:99:
         83:30:c5:77:fb:2c:ee:97:7c:6a:af:ff:60:b9:fe:f5:84:4f:
         7c:08:8e:19:16:1b:6b:ac:30:df:01:fc:17:07:36:54:32:55:
         f8:e2:a3:16:f9:29:da:16:0a:a1:96:f3:2c:1d:6d:ca:a5:e9:
         a9:43:89:7f:05:cd:3f:ed:c9:42:23:0c:5e:29:1d:b1:7e:f8:
         d9:e8:0c:68:ae:50:8d:3d:b6:5f:51:de:ff:f9:b9:57:4a:a8:
         63:62:62:53:50:87:f7:6c:24:af:af:76:b7:77:ae:80:9d:44:
         a1:2c:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:43 2026 by rpki-client