Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
File:                     3cb3247e-d780-36d0-8281-9099712cab81.roa (raw, json)
Hash identifier:          vVTnQWwpqiiYbGB+hwTO2VF7TSfp5Cqcm5geXas7TS8=
Subject key identifier:   42:BE:B8:78:A6:4B:A6:E4:DF:43:E0:0A:08:B2:C8:8D:03:AA:89:89
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CDF3226759F0FF999EF2C0660
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     54339
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:26:75:9f:0f:f9:99:ef:2c:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b6d14ff4-4a43-430a-94a5-c96500b59778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:87:97:f1:59:01:cc:79:ba:56:99:16:df:
                    0d:f4:ac:3b:71:31:8b:e4:d9:ca:2b:08:59:47:06:
                    c5:1a:ca:03:96:a3:35:78:c9:a1:34:4f:4c:be:ea:
                    ad:88:9d:78:94:51:30:d6:1e:a1:aa:f6:cf:09:71:
                    90:c9:d2:7a:bc:ed:38:fe:4f:48:df:6c:ce:af:f0:
                    8a:c7:b2:6e:50:50:3b:5b:4b:39:8e:58:77:6d:43:
                    9b:f8:58:7d:86:07:9e:a0:b8:6c:a0:3c:b2:a8:cb:
                    14:a3:ea:cd:42:00:4f:a6:56:ab:61:c9:c3:65:c9:
                    80:09:28:af:02:c8:78:90:69:7c:f8:48:d4:f1:14:
                    47:f7:ab:40:b0:83:28:d9:1b:df:1f:2a:c7:b5:5a:
                    c5:3c:1f:ca:b7:47:b3:09:86:1b:3b:f0:a8:be:74:
                    76:f1:17:99:ca:c3:dc:45:47:7f:2c:d1:a2:c4:04:
                    da:85:83:68:5b:04:84:b4:a3:a3:a5:8b:42:a2:6c:
                    d5:e7:aa:6b:ad:22:e6:61:93:f3:90:a9:61:95:7a:
                    5f:ef:e8:de:83:f8:d5:4b:6a:1c:f4:d7:9f:23:5e:
                    73:7a:ba:43:9c:b6:31:6e:d6:ac:c1:67:c7:80:89:
                    d0:6e:4d:51:b8:a2:99:3f:7b:7b:bf:45:d5:0b:0d:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:B8:78:A6:4B:A6:E4:DF:43:E0:0A:08:B2:C8:8D:03:AA:89:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/3cb3247e-d780-36d0-8281-9099712cab81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:87:a6:a2:42:07:8c:e4:b8:e6:96:d3:55:5e:a7:05:67:
         0f:f8:b9:0f:d6:32:9c:d5:0a:18:ed:ca:83:c7:8d:79:a3:41:
         ba:d8:de:ee:55:5d:17:a1:4d:93:16:a8:09:8d:47:53:6e:aa:
         0d:cf:8c:7e:2e:b1:9c:a7:07:54:3f:0a:3b:d7:ad:d9:e7:9d:
         55:3e:3a:57:7b:12:4f:25:07:9a:1b:04:ce:fa:a4:fa:d6:c1:
         e6:74:95:cb:8a:15:65:1e:8f:ef:80:38:c0:2b:ea:6e:3c:d6:
         d3:ba:5d:0a:b4:41:e0:ea:04:c7:f7:dc:4c:80:d5:77:73:7b:
         a8:b5:52:41:47:16:df:00:a7:60:70:7d:4f:4e:42:bb:ac:b5:
         d5:2b:1b:f2:ee:4f:5f:54:b4:2f:02:6b:12:12:45:f9:a6:5e:
         dc:5e:a3:26:05:fc:53:4b:85:69:69:fd:c8:b1:c4:f9:92:16:
         18:94:b8:0a:aa:06:56:98:3e:5d:6e:e6:b7:a7:5d:b7:94:eb:
         c2:c4:d9:b9:70:02:8b:72:e1:e3:56:d4:62:01:d0:24:be:e1:
         39:b0:63:f4:3b:15:73:16:44:19:7f:c3:a7:80:eb:bb:a4:56:
         b1:c0:15:4e:27:98:8d:fe:4b:9c:98:6d:fb:3e:7d:cb:d3:9c:
         53:d8:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:03 2026 by rpki-client