Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa
File:                     f465a6e5-5591-34dd-a559-1c8626c17563.roa (raw, json)
Hash identifier:          CSHq/1oZuR+VJI36v7KVL9u+YEETNXWxB89Fw97aVsg=
Subject key identifier:   DB:25:F5:FC:00:B9:34:1E:95:8B:05:F5:DC:BC:30:2A:08:69:B5:D7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA76DC86DAEB80B2735A500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54858
IP address blocks:        199.189.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:6d:c8:6d:ae:b8:0b:27:35:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=5476096a-7042-4e8e-95ae-e0602b850847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:e9:ae:7a:af:37:95:fe:5a:fc:98:d2:ae:
                    36:2e:37:a6:e8:7e:3a:69:c0:07:f3:72:3f:29:13:
                    41:0c:7a:9c:4b:9d:06:2c:4a:8f:11:ab:9d:14:2f:
                    1c:8e:ae:67:b6:00:07:b4:76:41:4a:c7:cf:02:d9:
                    ca:b2:0c:6f:4a:78:ea:2e:3a:08:19:12:cd:84:8e:
                    97:4a:57:5b:0f:e9:a2:37:d6:93:1f:f2:5f:ba:95:
                    87:d4:f8:5a:60:a1:4f:ed:d2:d0:5d:10:bb:47:cf:
                    aa:24:ae:13:25:c8:3b:8c:05:27:b6:72:93:b6:95:
                    02:29:cb:9c:f3:68:28:a5:f6:fa:b5:fd:37:0c:d0:
                    0a:57:14:ac:68:0d:e4:9b:e6:92:89:74:f2:3e:4e:
                    25:2e:dc:cb:a5:b5:12:04:34:8c:71:b3:9a:48:20:
                    d7:7d:4d:a2:9f:6f:c0:05:45:64:1e:9f:88:3d:67:
                    16:93:d3:5a:46:02:7e:ac:ba:2e:25:f4:8e:1f:07:
                    49:c2:a0:43:5d:45:ae:b4:0e:96:b7:9c:47:6f:f5:
                    b6:ef:2a:19:0d:fc:bb:f0:5b:be:30:89:82:24:4c:
                    6d:18:19:89:07:1f:3c:74:48:6f:a1:dd:a2:d6:c4:
                    2e:bf:b2:83:53:fd:82:f5:20:60:72:bd:53:ff:2c:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:25:F5:FC:00:B9:34:1E:95:8B:05:F5:DC:BC:30:2A:08:69:B5:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f465a6e5-5591-34dd-a559-1c8626c17563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:dd:f5:9b:59:fc:02:76:0e:60:00:45:58:ca:ad:f6:6e:
         a3:1f:22:58:f0:1f:35:38:29:1c:01:82:1b:e3:21:f4:93:bd:
         98:92:18:97:bf:75:5b:25:ad:1b:8e:79:f3:ed:88:75:fb:86:
         99:cd:83:bb:f6:be:5b:4d:c4:74:00:51:06:a4:02:e8:7e:82:
         8f:23:d0:a7:31:2d:d5:d5:91:52:f9:8f:f1:83:c1:d2:6a:7c:
         3b:de:23:b2:ff:28:c4:e4:a9:07:c1:c5:1a:60:7e:5f:57:5d:
         cb:10:0e:45:3d:8b:45:5b:26:45:f6:70:e1:9c:6b:ed:fe:a0:
         e3:ab:7f:b5:f9:47:ef:80:b4:57:6f:f8:c0:e6:cb:07:b1:de:
         e7:1c:6a:19:79:cf:8f:a2:a1:70:1a:1d:dc:05:92:9d:9a:0c:
         c7:7b:ef:51:7e:0d:12:39:64:53:2c:a2:52:e5:44:a8:19:b4:
         78:47:a6:72:5c:e3:d1:90:f0:e6:cf:52:73:54:17:f4:8f:ad:
         dc:5d:f1:5a:48:19:51:b4:a5:f7:cc:19:6c:e2:c5:92:3d:b2:
         b3:c7:70:e7:88:fe:1a:59:50:2c:6e:63:ad:f4:32:ae:91:ef:
         dc:fd:ef:6c:2b:93:a8:97:f7:55:32:64:8c:53:c3:87:48:82:
         fd:bd:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:02 2026 by rpki-client