Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
File:                     280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa (raw, json)
Hash identifier:          2j35x3BfwP5qIkDvGztWhdM8StjRhnPxq0PAQAeEu/0=
Subject key identifier:   EF:14:37:29:62:AC:93:EE:07:E1:AB:B4:1D:03:13:5F:13:1B:61:28
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CDB021EC048D89E5767CB719E
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     9009
IP address blocks:        174.140.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:1e:c0:48:d8:9e:57:67:cb:71:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=93b499d3-8c97-4c66-8607-3640228c2347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:54:dc:ad:1c:5f:f7:73:35:e6:be:f8:f7:
                    46:ca:3f:7c:e3:dd:0d:4f:8f:34:a2:10:de:ed:63:
                    d6:42:79:3c:13:80:9e:78:db:71:2f:dd:71:01:23:
                    1b:cb:af:9d:d8:7c:5b:33:5e:57:df:44:1d:da:a9:
                    e3:4e:3e:f6:dc:ea:0d:80:0f:95:e7:7f:9f:1b:8d:
                    b0:35:07:37:10:91:f2:cc:10:2c:00:66:3a:5a:4a:
                    42:64:3d:4f:f1:04:b8:bc:1d:18:64:57:a1:49:f3:
                    02:f1:27:ef:47:59:cf:b9:af:b0:59:4c:b6:26:4f:
                    3f:1f:11:a1:70:b3:d5:4c:d9:b1:eb:af:1c:c9:c0:
                    67:c1:64:11:9d:60:c7:98:13:78:25:3c:34:77:59:
                    59:4d:1a:40:fc:6d:25:7c:7f:08:74:53:fa:b7:ed:
                    b0:7c:41:0b:42:e7:30:5e:36:da:42:47:8a:7a:f4:
                    66:be:34:e7:a1:37:c2:93:94:93:fd:5d:84:08:d7:
                    d4:7f:ff:59:a5:a6:1c:5e:67:24:df:f9:57:8d:8f:
                    20:2e:26:af:d9:11:20:d4:a8:5a:c3:5a:95:07:4d:
                    61:37:9c:b6:7f:45:0f:9a:19:a1:50:ad:a1:0e:17:
                    51:18:52:e6:bd:8c:61:eb:45:d5:d4:db:a3:6e:13:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:37:29:62:AC:93:EE:07:E1:AB:B4:1D:03:13:5F:13:1B:61:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:26:4b:78:bb:f0:e7:36:df:09:cf:9f:cf:99:fd:cf:70:61:
         7d:a0:b5:71:19:40:cb:73:b8:5b:fb:f5:32:09:b3:fe:e9:03:
         58:e7:ce:cb:8d:85:40:67:24:f3:31:9c:f8:cb:20:3b:5d:f9:
         d3:23:ec:97:0a:b9:c8:f0:04:51:ae:03:90:9c:33:01:ac:9e:
         a9:cd:9c:d9:65:8a:35:30:79:51:92:ae:99:0c:4f:f1:ea:21:
         8a:83:07:a2:33:fd:d7:58:9b:01:23:86:ab:8d:8a:6e:69:81:
         71:3f:4f:c2:7c:8b:aa:1c:5d:a7:ee:d8:1f:b1:78:72:9f:a3:
         31:55:24:ba:69:5d:67:9f:ce:4e:e9:5e:f7:34:98:bb:76:f3:
         9b:8a:df:f5:06:65:09:96:4c:03:61:2b:d3:8a:c0:f2:67:2e:
         8f:96:b2:45:5a:47:0f:74:11:27:67:3a:5d:e5:bc:bd:c2:7b:
         57:d5:92:e0:c5:f7:86:03:2d:44:82:d4:bb:83:a0:9a:0e:54:
         d3:4d:84:65:4b:ad:e1:2a:d7:35:26:a1:22:ac:93:01:90:3d:
         32:11:06:f1:8d:a9:a4:66:cb:45:23:d9:09:95:a5:27:6d:5b:
         8e:f7:7f:2a:27:51:52:4d:cc:e7:81:05:58:aa:c2:97:3c:11:
         4b:8e:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:28 2026 by rpki-client