Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d2000deb-6ab4-3d81-8dcf-b73898e4a2bd.roa
File:                     d2000deb-6ab4-3d81-8dcf-b73898e4a2bd.roa (raw, json)
Hash identifier:          LetIA6ugGzGHz/15tPjekPwZisuHUVI9y0uDCHbKr4Y=
Subject key identifier:   36:2D:97:C0:77:D6:0A:3D:2D:58:24:45:E5:A8:AE:11:AA:F9:AC:A3
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584CF6ECD13D1416E83E234BA240
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d2000deb-6ab4-3d81-8dcf-b73898e4a2bd.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        198.97.212.0/24 maxlen: 24
                          198.97.213.0/24 maxlen: 24
                          198.97.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d1:3d:14:16:e8:3e:23:4b:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=a2fe84d9-9fab-4606-9123-1876b67fee31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:a1:13:61:3c:8d:88:bd:b3:56:2b:87:6d:
                    1d:fd:32:73:d8:d9:52:9f:32:ff:10:05:be:9a:2f:
                    5a:6a:f5:95:30:55:83:4c:79:6e:c4:62:38:53:c3:
                    07:d0:f7:ac:7a:84:c1:9e:01:cd:ca:99:ca:9d:94:
                    8d:05:fa:77:f5:77:d2:8c:a7:5b:59:b3:bd:47:d7:
                    09:e4:cc:87:7b:b7:0d:bd:e7:cb:c2:1c:28:d2:a6:
                    f5:bc:cf:25:37:9c:49:84:59:bd:8e:ab:a6:f5:1b:
                    70:8a:38:7f:db:44:ca:f3:cc:30:50:c8:a7:34:ea:
                    00:b9:a4:ba:a3:d4:12:71:66:70:a9:88:db:6e:ee:
                    05:01:c9:5e:b1:2d:08:d1:2d:17:c5:e3:cc:2b:09:
                    69:b5:ff:3e:98:f2:cd:a2:0d:e6:e5:87:18:0f:4d:
                    1f:ba:9c:f9:a5:2f:65:ee:aa:e4:0d:ae:24:24:b8:
                    19:99:8f:2b:30:1c:8f:52:6e:95:37:64:2b:93:2b:
                    57:39:8d:9d:92:d5:65:1e:7c:ba:1b:c9:dd:e9:43:
                    5a:58:48:f4:c2:45:47:c9:c1:81:ff:cf:29:6a:8d:
                    6f:a0:6d:58:68:56:50:d1:2d:97:6e:e9:a1:3e:f7:
                    13:16:8b:21:22:ea:66:69:0d:5e:cd:b7:97:39:a2:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:97:C0:77:D6:0A:3D:2D:58:24:45:E5:A8:AE:11:AA:F9:AC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/d2000deb-6ab4-3d81-8dcf-b73898e4a2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.212.0-198.97.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:21:5c:27:b0:59:7d:3a:13:80:f9:b3:6b:53:54:79:90:72:
         a0:10:ce:12:d5:87:42:2b:a0:44:da:d2:04:32:f9:45:77:67:
         b0:93:d4:41:e0:f0:3d:2a:ca:e5:6d:e2:aa:51:bf:42:82:61:
         a8:60:09:d2:57:ae:99:75:cf:45:0f:7b:92:e3:1f:b5:12:af:
         b4:47:05:6c:56:fd:5d:d9:08:13:1b:c5:ba:06:aa:81:7a:83:
         ea:3a:09:f9:5b:1d:72:39:2d:5d:d0:2d:71:a4:97:74:a8:9d:
         da:87:37:52:72:32:a1:32:59:82:55:ae:98:be:cd:33:e1:29:
         1a:80:6e:e6:87:0f:95:84:bf:a4:86:d2:9e:f6:f0:d2:08:eb:
         13:3b:8e:be:3a:f3:cb:95:0f:8d:97:af:54:75:85:c3:60:42:
         23:8a:17:ba:80:2b:d8:6d:4f:db:29:39:ff:ad:88:ca:71:7e:
         ad:16:2c:bc:1c:95:d9:80:f2:22:9f:ac:5b:b9:13:c0:5e:4e:
         6f:c2:76:4b:3e:1b:b5:cf:9a:4a:40:ff:b3:16:f7:a8:31:7a:
         1c:27:fa:3d:c9:5d:87:9f:80:a4:cb:11:e3:55:38:41:cc:7e:
         fb:12:5f:61:f6:51:35:f6:45:bf:99:30:0d:11:b7:e6:5f:46:
         b1:c0:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:21 2026 by rpki-client