Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
File:                     66c24ca4-75ad-3583-bab3-0d338b0cb433.roa (raw, json)
Hash identifier:          b4vKFeHCgVpl07zfjiiGC504de2KIlT2B40xl52wtck=
Subject key identifier:   3F:F0:B1:4D:64:07:08:1C:66:9F:58:98:F5:47:8F:B9:CB:5D:1D:38
Certificate issuer:       /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial:       010D0C9F4328584CCA41F55C1CD7824D1EE5C080
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     271
IP address blocks:        198.162.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f5:5c:1c:d7:82:4d:1e:e5:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=a247c55b-198c-4a12-be62-7625581f016e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:f4:6a:62:4d:18:8b:1c:a6:a6:0b:a9:0f:
                    b9:a0:34:d3:ef:3a:3d:c2:2d:51:d0:d5:aa:b7:40:
                    d0:17:1e:f8:ca:3c:6e:43:0b:49:55:f9:00:e8:4d:
                    78:c8:c3:94:b5:ab:30:28:37:ba:27:e9:5c:45:38:
                    64:f1:79:94:10:3a:e5:d9:d7:5f:b0:f3:52:15:1b:
                    40:80:bf:ba:ac:58:25:c7:64:4f:3f:cb:74:bd:ed:
                    76:30:c8:7b:78:10:a8:1d:16:73:bc:a1:4f:32:6f:
                    ad:da:4f:96:68:0e:4e:ef:d8:95:c2:ce:5e:55:dc:
                    96:99:a5:8e:c8:c3:13:e5:b9:cd:4a:66:6b:e0:fa:
                    38:df:e9:5b:98:fd:f1:6d:eb:8f:d6:70:49:35:2d:
                    3f:1b:6c:12:e6:be:13:99:81:84:0a:dc:2d:4f:fd:
                    45:f6:0f:d8:a1:d5:3a:10:9d:aa:38:b3:a9:c1:18:
                    49:98:a9:0b:78:0e:65:83:3d:32:10:c9:95:dd:a1:
                    db:d5:96:6a:57:5d:df:c3:39:6b:a1:dc:00:d8:9c:
                    b3:1f:2c:41:af:14:24:07:8f:da:e5:b2:6e:e1:cd:
                    15:57:00:35:85:2f:d3:32:22:a6:92:17:e7:92:e5:
                    02:4d:50:f6:1e:6f:d6:e3:e6:bc:37:6d:87:c2:9d:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:B1:4D:64:07:08:1C:66:9F:58:98:F5:47:8F:B9:CB:5D:1D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/66c24ca4-75ad-3583-bab3-0d338b0cb433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl

            X509v3 Authority Key Identifier:
                keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:a5:f2:39:ee:08:b7:04:b3:86:db:ae:a4:f9:20:6b:e5:
         cb:77:a3:90:11:ea:61:b1:e9:a1:5c:b9:2e:69:42:74:29:eb:
         38:65:49:64:92:af:af:3f:16:26:30:1a:0b:a8:89:66:b8:de:
         ff:79:29:ed:ee:2f:4f:25:86:2e:90:64:72:6d:87:ac:56:5e:
         cb:06:13:69:ee:4a:02:f5:3d:76:31:87:b2:eb:f6:59:20:89:
         fd:28:6c:4b:4b:d8:95:ca:53:62:a7:67:5b:22:de:f9:d7:e1:
         95:f8:81:7a:41:42:5d:6d:eb:bf:c2:8b:e1:04:85:26:9b:d6:
         a2:cd:8d:42:80:25:0d:91:62:42:9d:24:7e:f2:46:dd:1b:0c:
         41:9b:1b:74:ff:52:12:ad:07:46:81:fc:ae:4d:53:62:b8:5f:
         80:4f:24:e6:c2:76:83:4f:a5:08:b0:8f:b3:cf:4b:7c:20:eb:
         a0:db:73:17:57:3a:20:f4:a1:17:41:cd:fb:54:d4:98:46:a4:
         05:60:f2:21:59:f0:b8:bb:fc:f5:c8:42:38:47:0a:d9:c3:e6:
         6e:25:49:f9:ca:7a:9a:5e:f3:9b:04:d5:7b:4d:e6:72:1d:d1:
         b6:6b:12:92:83:75:a7:10:fb:c3:be:09:e9:59:22:ad:22:1b:
         0e:43:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:28 2026 by rpki-client