Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/ed412c93-5964-38bc-8f2f-212c05d6473e.roa
File:                     ed412c93-5964-38bc-8f2f-212c05d6473e.roa (raw, json)
Hash identifier:          uyJQsm5s0NjZeguo9mutvCud3/0ePeXhOm8zIq1I7DI=
Subject key identifier:   69:9D:7C:AF:84:52:46:3D:E0:DE:61:8D:0A:B9:DF:F6:E2:41:24:B4
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584CD13CB65B84F539ECC6EBAC60
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/ed412c93-5964-38bc-8f2f-212c05d6473e.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     32157
IP address blocks:        199.71.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b6:5b:84:f5:39:ec:c6:eb:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=d9832c78-cdcc-484c-aec4-fa799bcccb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:a8:14:34:5b:f0:35:dd:09:84:1e:5b:b2:
                    65:e1:fa:36:7b:3a:75:38:f1:bd:b9:c1:c1:d6:28:
                    74:e1:84:b0:1a:7d:64:59:a3:ec:47:48:77:bb:24:
                    35:c8:1e:7a:a4:06:2f:d7:3a:2a:4a:41:81:aa:83:
                    55:51:1d:6b:b7:18:c3:1d:0b:82:98:68:dd:1d:3f:
                    d8:a4:49:27:45:0b:c3:06:7a:47:3e:a6:20:d9:34:
                    98:11:dc:0a:58:36:61:54:f7:52:31:ad:78:a1:f5:
                    45:f6:6d:ec:15:50:51:81:d7:ef:c7:ef:0f:6b:79:
                    8e:a5:dd:63:74:7b:b2:96:6d:4f:e7:5d:74:dc:fb:
                    3d:8d:86:dd:ff:23:27:c8:cf:b2:87:6e:f9:f8:13:
                    5d:80:86:67:8f:d3:a8:08:53:64:93:34:e0:f8:1d:
                    0d:fa:ab:74:98:7b:28:f6:c5:9d:70:89:ee:a9:6a:
                    a8:de:df:7b:f7:f5:8c:d9:bb:46:a0:80:74:43:3b:
                    98:ad:7f:7f:13:03:7d:d9:8b:b4:ff:d9:49:33:be:
                    4f:62:e2:47:35:58:4c:58:d4:82:fc:3b:a5:94:c7:
                    ac:f4:d2:be:59:6b:78:82:bc:58:77:23:8b:f8:d4:
                    81:da:d3:75:4d:b2:b2:0f:2e:85:df:b5:3e:2b:f2:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9D:7C:AF:84:52:46:3D:E0:DE:61:8D:0A:B9:DF:F6:E2:41:24:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/ed412c93-5964-38bc-8f2f-212c05d6473e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:09:be:5c:c2:b7:f9:9e:ed:d7:83:4b:d2:0d:d1:62:8f:
         3a:94:e7:27:c0:ca:9b:69:b8:d9:73:1b:57:ab:38:20:d0:bb:
         54:c7:7d:50:2c:e8:06:94:b5:e5:bd:59:dd:c3:c0:ad:48:30:
         51:95:ed:33:78:d2:84:27:25:bd:bb:a9:6c:25:9b:14:4a:8b:
         fa:4c:12:23:7b:b0:8f:9a:96:34:11:84:45:a6:58:72:48:26:
         73:ad:f9:cd:2e:e3:92:13:ba:62:a9:03:98:16:2c:a4:b8:09:
         95:4c:bf:e7:6d:43:6b:ef:9c:ca:2c:82:d1:b7:f3:b9:4a:2e:
         92:80:4e:77:5f:1c:ef:59:d4:f1:3d:d0:12:73:fd:48:df:84:
         19:d7:5e:d1:58:2c:bc:0f:81:8d:9f:83:7c:d1:67:ad:05:de:
         0c:0a:52:1f:c0:01:4d:da:a3:34:82:35:fb:6e:3b:0c:91:e9:
         a8:d4:e7:bd:d7:d6:8e:1b:ef:fa:48:ec:8a:2a:74:c1:cb:8e:
         9a:86:2d:36:83:72:54:26:4d:2e:37:5a:04:12:7b:cc:0e:2d:
         38:78:eb:78:24:6f:8e:c7:21:b4:ed:05:3d:aa:c8:7e:db:d3:
         43:81:93:63:2a:01:71:84:d1:66:f1:7a:d5:cd:11:27:c0:f6:
         30:b6:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:12 2026 by rpki-client