Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
File:                     709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa (raw, json)
Hash identifier:          uCzcbCEkxAgK04mZE/+P5S46v8Dld6Wdn75cFECk49s=
Subject key identifier:   DB:81:79:71:C7:34:D7:5F:C1:BF:8A:19:96:AF:FD:BC:A1:D5:A1:8A
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584CEBC23260CED0DA8C066CA300
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     22359
IP address blocks:        208.52.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:32:60:ce:d0:da:8c:06:6c:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=9920c4f3-2c11-4aba-93a8-f13e104ef073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:0a:a8:ba:3b:fb:28:62:9c:4a:59:14:5b:
                    a1:1c:f5:65:59:db:22:ff:29:a5:63:6f:83:0a:13:
                    4a:ce:7a:a5:98:d5:af:5b:10:0c:93:cf:ac:9c:8b:
                    62:98:69:9a:51:94:e3:13:42:b9:12:a9:e8:bc:6b:
                    a9:b8:9c:eb:48:34:b5:c6:76:d2:0c:e5:22:15:4f:
                    ac:23:65:ec:b4:09:29:57:0d:15:83:c7:7e:8e:a5:
                    53:12:ce:28:24:51:5a:12:12:a8:6c:6c:0e:5a:b2:
                    c8:f5:87:91:8c:64:e8:ef:c0:81:92:49:02:de:bd:
                    70:c3:dc:3e:a4:6a:43:07:1e:22:94:a1:c0:e7:75:
                    74:a8:66:ea:94:0a:90:29:f4:02:32:ae:12:52:e6:
                    8e:d4:22:59:e5:cb:a2:45:4c:8c:56:f6:5d:65:86:
                    06:98:81:42:8a:55:2b:76:1e:71:21:d0:fe:e2:99:
                    b9:8c:12:87:e1:ee:e3:43:c7:a3:c1:f8:ed:5e:2a:
                    c4:d2:89:e3:c1:4c:1b:08:d8:68:b8:54:3c:7f:e1:
                    54:df:12:63:1a:23:02:a5:b6:13:fc:89:11:c1:c0:
                    2e:3f:e4:9d:24:a2:55:67:15:bb:fb:f8:d6:d4:d9:
                    38:16:bb:32:69:b7:ba:46:0e:49:a1:bc:7e:37:57:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:79:71:C7:34:D7:5F:C1:BF:8A:19:96:AF:FD:BC:A1:D5:A1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:32:5f:81:ce:b8:cd:51:87:7e:98:63:97:a9:76:b2:81:
         47:5d:53:cc:01:17:b0:3c:4f:c3:97:65:97:fa:9a:dd:1f:68:
         c1:61:16:4f:41:a8:62:06:0b:f7:91:92:b5:58:0b:c0:db:03:
         8e:49:09:2a:4c:6f:26:b1:98:fa:ae:ce:e6:d0:8e:86:6a:2f:
         6d:ef:9c:97:d9:50:67:ab:63:31:35:5d:37:e4:1c:19:3e:eb:
         f8:4e:f6:ba:01:93:29:db:95:26:0c:5b:e2:11:96:08:91:00:
         bb:1b:7e:72:39:8e:9c:0c:e7:b5:70:f5:cd:ee:c2:0c:a3:58:
         15:01:40:95:45:af:54:c0:cd:58:d6:4f:cd:e6:90:07:89:c7:
         65:d1:50:c9:db:38:ad:0f:fe:3f:4e:20:e3:dc:a6:8a:c4:b1:
         d7:fe:bb:e2:8c:a8:cd:a4:5c:8a:96:cf:d2:2a:ad:83:5e:54:
         17:ba:5c:9b:40:b0:f4:65:b3:9f:b0:ad:49:11:63:de:84:c0:
         7d:aa:17:de:ad:df:ea:14:24:ec:78:7b:49:14:14:b8:3d:e7:
         1d:97:c6:6f:e7:69:aa:24:23:2b:eb:a6:11:11:da:55:68:9f:
         bf:88:86:cf:82:cb:70:dc:cf:4e:1b:00:62:5e:af:77:ce:42:
         2f:7b:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:42 2026 by rpki-client