Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa
File:                     6d4b6512-2087-3038-a178-02a39b6ae9a4.roa (raw, json)
Hash identifier:          CWnCq0EtHQmICaHVpHZ+iwWbK3pgZbtgTborh46R5bQ=
Subject key identifier:   2E:E3:5B:1E:B2:1B:BE:66:99:DB:5A:A9:8A:09:92:03:76:72:B7:CA
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CEA8D0B99C25080DB89FDF480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa
Signing time:             Thu 19 Feb 2026 15:37:59 +0000
ROA not before:           Thu 19 Feb 2026 15:37:59 +0000
ROA not after:            Wed 20 May 2026 14:37:59 +0000
asID:                     3170
IP address blocks:        154.51.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:8d:0b:99:c2:50:80:db:89:fd:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 19 15:37:59 2026 GMT
            Not After : May 20 14:37:59 2026 GMT
        Subject: CN=20b9265e-cfb3-45c6-a9ab-c6d6534aa5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:1a:a2:8e:12:27:77:a2:72:36:f0:3a:ae:
                    a9:2f:3a:4d:bd:a4:cd:dd:e7:a5:c4:3e:8d:cd:6b:
                    fa:ad:cc:cb:41:84:8e:3e:9a:9f:a1:83:3f:3d:e5:
                    35:9c:c8:87:a3:69:98:7d:83:43:3c:80:1b:db:b6:
                    e0:d2:22:ea:2a:4f:ca:14:41:8f:7c:e6:09:01:c1:
                    aa:53:73:fc:ce:c4:1f:d4:92:42:44:d7:1d:c1:d5:
                    e5:17:bc:fc:2f:6e:ae:c5:d5:5e:42:76:48:b6:65:
                    a8:3c:f4:03:e7:bb:c5:75:67:66:8e:fd:00:24:76:
                    2b:f2:36:61:72:e2:4c:a1:ca:12:1f:db:0c:1f:d3:
                    03:6b:7e:4d:bb:8f:fb:09:86:b6:cb:ce:0e:d0:66:
                    ed:63:85:35:66:92:e1:78:02:3b:95:e6:f7:fb:18:
                    25:70:82:96:86:0c:e9:59:9c:2c:93:55:8f:a7:9a:
                    8f:54:d8:ba:70:66:b0:81:10:cf:9f:e5:c4:1f:f2:
                    d7:44:0e:17:e8:0c:5e:42:a2:7c:cb:cf:25:03:5e:
                    5d:9f:a6:f0:cb:89:4a:c5:f0:bc:3c:15:e9:b8:9c:
                    95:67:ea:66:18:9b:d6:92:96:d1:bc:77:d4:c5:39:
                    e1:a2:a9:dc:f2:7c:bb:77:fa:55:90:16:4f:53:4c:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:5B:1E:B2:1B:BE:66:99:DB:5A:A9:8A:09:92:03:76:72:B7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d4b6512-2087-3038-a178-02a39b6ae9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.51.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:29:c7:22:a3:57:5c:d0:c7:1f:14:4c:10:9b:82:dc:1b:
         7c:de:79:3e:1c:d0:0f:fa:6f:46:be:ab:04:31:fa:a6:c7:7a:
         aa:8a:5e:70:a6:b2:f8:35:d1:c8:1d:4e:f2:2f:d3:ca:5c:6f:
         d7:2c:76:07:dd:42:1d:8c:73:a1:1f:13:ef:2e:db:06:2c:9c:
         38:8c:ea:3d:5f:27:76:b2:65:c2:d6:81:8d:62:09:c2:e3:60:
         a4:45:c3:4c:b7:a6:ef:7c:57:d9:a2:94:4f:98:4c:1c:a3:98:
         10:61:45:b3:fe:7d:d3:b8:09:a4:a2:35:e1:b1:c3:53:2e:28:
         ea:3d:09:3f:d6:58:f6:27:52:56:85:ac:3d:1a:25:b8:54:cb:
         22:2c:8e:fc:a2:1e:49:95:a1:d4:02:b1:d7:f4:a2:a9:0e:1e:
         d6:9b:4d:39:15:59:f7:d9:6a:f2:f8:81:32:03:a4:d7:2f:6b:
         ef:11:04:63:0c:15:40:83:82:9c:0e:5a:cb:26:82:34:b0:19:
         5b:b5:32:85:ae:c0:1e:7f:b3:7b:5a:b4:38:dd:bb:9b:8c:68:
         74:c1:c4:c1:e3:e5:49:d7:c8:fd:9e:6d:02:d6:c8:2f:26:05:
         72:df:d0:27:f7:ce:2e:d9:f7:06:5e:5c:a2:fc:24:69:fb:2e:
         44:7d:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:01 2026 by rpki-client