Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa
File:                     ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa (raw, json)
Hash identifier:          ohj6/wVonmHnGiAeUdLYIwbNDSt6JAQ7wGQ8gv+M5T8=
Subject key identifier:   88:4B:C5:DF:57:45:02:BF:3B:9E:BB:ED:83:A8:21:E4:DD:A3:CF:CE
Certificate issuer:       /CN=04ea0880-2156-4bff-9635-feb716ac6fae
Certificate serial:       010D0C9F4328584CC611F27C6B081C696DE4A900
Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     400679
IP address blocks:        170.39.22.0/24 maxlen: 24
                          2602:fd45::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f2:7c:6b:08:1c:69:6d:e4:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=e369b255-f234-463d-a12d-be01334ce54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:4a:00:07:83:d9:6b:97:d2:a6:ef:a0:fb:
                    d3:33:3a:51:d5:52:72:a8:ed:7b:56:46:55:76:bd:
                    bc:82:58:4e:89:7b:b7:83:76:40:41:91:e3:aa:88:
                    94:68:a8:b5:0f:07:8c:07:85:81:12:64:88:b9:6a:
                    b7:79:0e:e0:60:18:a2:f3:fa:38:df:c1:14:ec:7c:
                    49:28:c1:70:10:ae:6b:78:49:ce:c1:38:6b:a6:8d:
                    04:ab:f5:57:cd:c6:db:9f:9f:2c:50:a7:38:2e:35:
                    13:d5:77:d8:7c:e4:1f:1f:ae:11:2a:82:0f:0e:c5:
                    74:cd:ad:af:e6:2d:d0:db:24:2e:59:76:ef:48:6b:
                    93:16:f7:3b:0d:ae:8b:2e:70:4f:c5:e5:8a:f7:8a:
                    9e:2b:99:22:c5:22:b0:f7:17:f3:17:0c:81:a5:df:
                    6c:1b:5b:ca:67:9b:e0:74:41:a5:93:f1:64:50:a5:
                    d0:30:92:38:2e:72:27:fb:5c:3f:32:12:3c:2c:87:
                    17:15:ce:5d:25:9b:16:39:09:0f:50:20:88:62:c7:
                    70:ef:bd:46:de:22:01:f1:0a:23:8e:e8:88:6d:de:
                    c5:75:d0:b6:dc:15:e5:46:a8:f3:42:85:02:6d:0d:
                    7e:3c:e0:9e:68:8e:c0:2c:ce:32:4d:55:ac:11:30:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:C5:DF:57:45:02:BF:3B:9E:BB:ED:83:A8:21:E4:DD:A3:CF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/ea613592-7c99-3b65-8caf-49e2fb45cf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl

            X509v3 Authority Key Identifier:
                keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.22.0/24
                IPv6:
                  2602:fd45::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:d0:7b:ed:fb:20:0c:67:e8:54:5f:79:56:15:95:83:7f:
         4c:c5:33:a4:44:b8:6e:5c:79:d3:42:8a:1a:a1:11:44:cf:6a:
         58:03:82:59:c1:c9:46:d5:dc:83:47:26:24:b3:7a:2c:44:7f:
         af:b5:da:10:40:58:35:c0:6a:9d:61:a6:f7:e0:4e:ae:88:46:
         a3:b1:11:3e:b8:37:b1:a0:ac:f9:2d:ba:ee:56:f9:da:9e:f0:
         3d:ad:e8:89:68:b3:bd:b1:31:98:c3:e0:49:1b:b6:e0:67:c3:
         16:7d:4f:6b:73:93:10:8e:5e:d0:f0:c5:2f:c7:13:6b:8c:fe:
         0d:72:81:fa:0f:ff:0f:21:f0:6b:52:a1:27:b8:e3:b6:b5:15:
         e2:4d:79:7d:6b:01:a3:60:1d:13:20:ee:20:07:f2:6a:f3:8a:
         dc:ed:96:cb:89:71:26:d0:81:1b:49:ac:31:d2:76:d6:90:28:
         64:2d:c8:02:97:06:e3:da:e9:32:70:a6:e8:ee:53:80:59:ed:
         5e:da:d2:97:56:c8:dc:1d:70:de:8f:0b:a1:62:0c:c9:56:77:
         a9:26:07:6c:ce:79:b1:b0:0d:20:b4:b1:c2:c7:32:f1:1c:5e:
         9d:e6:4e:41:2d:82:5a:69:50:c3:31:a2:7d:ad:16:04:68:f0:
         8f:9a:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:38 2026 by rpki-client