Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa
File:                     98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa (raw, json)
Hash identifier:          OkF/exFm9c8gjiiFTImxc+O8U2lsLqjlm8ZchAX64hs=
Subject key identifier:   AC:CB:30:56:B5:C2:70:A6:68:FD:06:4C:2D:CB:07:6E:82:0E:8F:0C
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584CF2BCF3FB49E2D8B4257BFF00
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     46450
IP address blocks:        142.214.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:f3:fb:49:e2:d8:b4:25:7b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=bc365f5e-e41b-4341-8c6a-de752c08958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:94:53:c7:28:3a:26:6a:c8:e0:4b:d7:2a:
                    ac:85:e4:2f:eb:b6:7e:a6:4f:b7:22:07:c3:34:38:
                    0b:a9:71:5a:9b:36:1d:94:d6:e0:3e:b2:34:df:9e:
                    fb:ad:a1:8a:12:94:bb:b6:fa:fe:1e:46:80:c2:f1:
                    05:54:7a:99:0a:7b:17:2d:f0:82:25:45:18:b0:66:
                    f2:50:6c:63:e1:a4:be:f4:6b:68:4a:19:42:17:9e:
                    52:c3:12:0a:f5:80:ec:51:63:32:a4:64:7b:de:26:
                    43:81:f1:a4:9c:80:81:3b:9f:5f:d0:0d:6b:bf:7e:
                    1f:0c:d0:f4:45:6e:8e:2c:be:12:1c:59:06:b0:ce:
                    32:15:b1:c2:bc:a8:e6:94:52:3c:51:0a:19:b0:8e:
                    34:0b:f8:4b:95:72:a7:a8:c3:35:47:42:82:aa:9b:
                    70:5d:a3:ec:b2:56:58:41:ee:67:db:d3:9e:46:0d:
                    63:6e:95:f4:87:91:e4:16:0f:25:7a:dd:1d:cf:05:
                    df:3e:35:30:70:42:a7:f4:a8:2a:a3:78:f8:a3:0f:
                    f1:a4:9e:c5:90:38:7b:d3:12:95:bd:26:c4:dd:78:
                    29:eb:f6:cd:f2:db:f7:af:a9:53:b2:4d:d2:48:09:
                    29:29:ae:dd:08:7a:22:14:cb:ce:ed:e0:88:4e:21:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:30:56:B5:C2:70:A6:68:FD:06:4C:2D:CB:07:6E:82:0E:8F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3c:d6:63:63:27:68:a9:8c:7a:00:a2:b6:d4:6c:88:0b:c0:
         8e:c0:d6:bb:c4:c3:2f:93:71:00:ea:96:28:1f:06:f0:45:6c:
         43:d8:be:5b:ef:10:04:a0:7c:09:53:97:1b:ff:bd:40:54:15:
         0a:a7:2c:72:7f:07:9d:7c:fc:f2:11:d9:58:97:7a:47:e7:d7:
         14:d3:0e:97:1f:ad:0b:4e:97:d7:d7:9f:69:87:18:1b:88:21:
         6b:bd:87:c5:5e:89:37:f9:df:e5:ab:d8:3b:dd:1a:ae:dd:79:
         b7:25:09:56:2d:f8:4b:4a:3e:70:ae:30:1b:e1:59:9b:2d:f4:
         e1:56:cb:36:79:fe:e4:cb:c6:e9:3d:eb:66:fd:c9:98:29:ff:
         98:90:1b:6b:b2:30:a2:67:34:fc:c4:ea:35:ec:84:b9:9b:ec:
         0f:52:13:4e:ba:6c:22:d0:d5:96:78:4e:e2:ed:46:52:05:4f:
         8a:a8:a2:e9:40:79:f5:93:2c:1c:b4:49:d8:e9:87:9f:7d:94:
         6f:44:04:17:0e:18:db:f7:c5:be:ca:88:2a:a2:83:d4:af:9d:
         60:cd:bf:c8:98:3e:e7:97:ab:cd:ba:a5:84:c0:e0:a6:12:35:
         23:01:7f:8f:a0:3f:d1:dc:85:15:cf:0b:fe:29:49:0b:6a:a3:
         55:f6:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:48 2026 by rpki-client