Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa
File:                     1802470a-c29c-35f1-a149-883ec3509bb2.roa (raw, json)
Hash identifier:          7toz8ufEvPZO0DIA1u9A/wYaFVLKEWLRZxu49v8Elew=
Subject key identifier:   38:6A:B8:E6:6E:81:EA:E2:41:F7:33:D7:BB:40:68:D8:F8:73:16:85
Certificate issuer:       /CN=c9172e12-dbd3-4048-a60b-ef696451c4c7
Certificate serial:       010D0C9F4328584C8046D442EACCCF1870FF6E40
Authority key identifier: A8:0E:AC:67:5B:CB:BA:D2:74:55:AD:92:05:C3:17:39:67:9E:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     399205
IP address blocks:        204.225.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:d4:42:ea:cc:cf:18:70:ff:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9172e12-dbd3-4048-a60b-ef696451c4c7
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=915acfa6-1237-4001-aefb-e7e6abb9caea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:fc:fc:9d:0e:23:92:e3:cb:ff:92:ee:d3:
                    e3:32:62:e0:c8:aa:27:9c:e3:16:16:30:3f:25:59:
                    f1:be:6f:cc:56:e5:6c:8d:77:36:4e:5f:0f:78:95:
                    42:0f:74:9a:95:7d:45:f9:fa:5a:50:1d:a6:0d:a8:
                    b8:dd:82:55:e4:0a:42:c7:d4:a0:0d:a0:af:a3:9a:
                    55:5a:b0:46:f9:a8:9d:62:2a:c3:fa:71:21:1d:76:
                    74:07:41:06:af:1d:dd:86:b9:d3:21:d6:f4:9c:cb:
                    af:bf:85:ce:ce:d7:03:8c:a1:6a:86:ff:92:90:06:
                    20:26:0c:8e:23:60:a0:2e:92:c0:50:6f:59:87:eb:
                    f7:6d:6a:b4:ce:00:99:f1:de:fa:e0:91:b4:4c:23:
                    a4:db:2b:5d:57:c7:fd:17:c0:ab:f2:11:b5:3e:61:
                    d6:5f:c9:83:6d:c5:6d:7c:9a:a4:c1:03:01:5f:1c:
                    6a:07:50:cd:71:72:26:a6:dd:e3:fa:7a:bc:86:dc:
                    a0:be:d0:16:f3:76:00:05:72:2c:19:0d:91:27:01:
                    bf:bf:17:58:c9:9a:b4:a1:0c:26:2d:94:fa:0c:2b:
                    68:ec:90:b7:9f:b7:f9:f5:fb:39:08:29:f1:1f:43:
                    7b:e8:2b:ab:32:d2:a2:09:ed:08:03:ae:24:59:16:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6A:B8:E6:6E:81:EA:E2:41:F7:33:D7:BB:40:68:D8:F8:73:16:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0E:AC:67:5B:CB:BA:D2:74:55:AD:92:05:C3:17:39:67:9E:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:e6:6e:3c:dc:ed:8b:68:fc:cf:7e:7b:bd:91:7c:75:31:
         56:ab:27:f2:5d:f5:9e:b3:ae:a5:3c:51:bd:5f:97:0a:25:a6:
         7b:6e:de:27:d4:a6:32:49:23:c9:d3:61:e4:96:46:25:4c:53:
         42:6b:42:ea:e9:27:90:53:a0:62:46:8a:07:c7:62:cd:5d:a2:
         8f:c2:07:66:f4:6e:af:2e:27:df:66:40:a0:e9:24:f4:2d:30:
         50:2a:43:f6:63:5e:dc:ce:b6:b5:22:cd:2f:82:88:53:f1:51:
         83:f5:63:39:c3:e6:a1:34:ed:8b:88:73:be:62:3e:f8:2c:94:
         1a:e1:78:e2:55:be:b0:23:4d:14:01:c6:64:21:a3:db:12:c3:
         21:8f:95:32:2b:7c:84:f9:a9:ad:86:43:b6:db:8b:dc:c8:70:
         c7:4a:28:e6:32:d1:35:c7:cf:21:07:58:4c:e0:66:79:99:20:
         0d:29:b4:90:9b:81:88:13:9e:30:ec:4d:4f:b7:e2:c0:67:15:
         c7:5f:d7:60:1b:98:15:0e:b2:ba:75:13:e1:c7:db:ed:9d:d8:
         b1:14:19:e0:0d:3f:aa:b7:c6:12:62:4b:e1:d1:65:4e:34:92:
         e7:25:a7:b0:5e:6a:0d:b3:87:0a:3d:a9:ba:ee:e5:48:03:6b:
         3f:24:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:50 2026 by rpki-client