Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/192caa70-e232-3197-b6be-e14c85ed4d7a.roa
File:                     192caa70-e232-3197-b6be-e14c85ed4d7a.roa (raw, json)
Hash identifier:          ZxMtv/q6WHjEpNVN+7fyD38shD0zTrE42eNDRvhbUIY=
Subject key identifier:   BF:F0:CF:E4:8E:9A:63:60:E4:DD:8D:93:E4:0D:FF:0C:42:EE:20:A2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CEFF2448509B7F9E76BEAC9A0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/192caa70-e232-3197-b6be-e14c85ed4d7a.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     16462
IP address blocks:        206.12.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:44:85:09:b7:f9:e7:6b:ea:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=725fb175-a151-4bd6-9828-a2c9cd9ec904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:a2:32:22:81:0c:17:71:ab:bb:2f:d2:11:
                    6f:ed:f5:7f:7c:7f:2d:93:51:49:af:80:a5:3e:ee:
                    47:bb:88:12:c5:00:99:42:e1:3f:7b:bf:d1:4d:50:
                    b3:cf:74:f0:b4:15:ad:bf:d1:1d:4e:d0:0e:3d:96:
                    44:53:4e:53:54:65:db:4f:d1:dc:e2:bc:28:2b:a1:
                    01:0d:54:89:0d:c5:71:24:f0:73:45:c4:34:8b:a1:
                    fa:e8:47:cc:71:6d:97:5e:4c:f8:42:10:87:e3:4c:
                    9c:d4:7f:b3:98:dc:ad:fe:cd:95:59:a6:6b:e2:1b:
                    af:83:73:65:cb:ab:fb:d8:4a:fe:52:23:46:17:f5:
                    83:b4:9d:d8:ac:54:4b:7c:48:aa:8e:84:c5:68:7e:
                    a3:d0:1c:85:04:3b:81:6a:9c:75:e4:23:b6:c2:b7:
                    58:af:7b:ed:db:45:d3:70:12:de:cf:66:b4:c7:04:
                    38:9a:cf:1a:7a:ce:03:99:3d:28:f3:b0:0f:e3:76:
                    b6:89:e0:bc:66:85:d1:30:5b:47:ee:d7:9f:eb:bd:
                    c3:05:9d:81:d0:25:6c:ad:a3:8b:8a:10:23:f3:7e:
                    d8:03:82:a9:ed:93:db:72:89:e9:91:5e:d8:56:5d:
                    38:72:1a:d8:04:c8:25:0e:1d:87:dd:b0:91:53:ad:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:CF:E4:8E:9A:63:60:E4:DD:8D:93:E4:0D:FF:0C:42:EE:20:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/192caa70-e232-3197-b6be-e14c85ed4d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:1c:53:e3:09:eb:cd:0e:43:f9:bb:fc:8a:2f:15:23:67:
         7c:76:13:81:2b:2c:69:da:8a:5e:f0:c1:c5:cb:3b:1b:a9:a8:
         00:5c:56:0d:ba:70:dc:e3:2f:50:6f:77:ab:ec:04:ec:04:05:
         c7:bb:b7:a5:7c:d3:5b:2d:5f:aa:fc:fe:98:c2:ca:4e:3f:ff:
         7a:53:9b:6b:c9:cb:e5:8b:1f:db:84:8f:42:39:44:84:c5:b9:
         19:56:35:88:fe:6b:af:bb:28:b3:67:33:eb:26:c7:f8:d0:f4:
         6b:fb:41:d7:72:99:91:dd:cd:6f:9b:4d:e9:e0:35:21:02:d6:
         e7:ae:ba:05:9a:78:2f:92:60:4f:aa:07:03:19:5f:52:90:e7:
         3c:ea:03:b5:27:43:e0:47:df:36:c8:00:7d:06:a8:ae:6f:eb:
         3b:77:0c:09:18:35:6e:15:2c:2f:81:c1:a5:3a:35:74:fb:a9:
         ed:e2:5b:11:a6:b3:21:0d:03:d4:1a:4e:94:d8:b7:af:2a:eb:
         70:9f:51:5b:96:e6:e1:20:3f:3b:ef:40:1e:9c:74:17:aa:c5:
         69:43:f8:34:eb:57:a1:0a:a0:72:17:1a:07:b6:4b:03:b5:20:
         0b:72:00:c3:58:f9:c9:3d:eb:f0:09:14:8f:f6:98:62:14:13:
         21:8d:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:33 2026 by rpki-client