Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/77d4a1e6-6819-337e-b895-60b392f7ba8a.roa
File:                     77d4a1e6-6819-337e-b895-60b392f7ba8a.roa (raw, json)
Hash identifier:          3/QtIW0jaet8S5C25OY+8Bpo+ZcRujHZ60UxdI9m1t4=
Subject key identifier:   16:CE:E0:D6:21:B8:B0:64:E9:A6:E7:A6:DF:71:E3:2B:53:55:08:6A
Certificate issuer:       /CN=1534b7d7-f616-427d-9bc3-85d1bd789f38
Certificate serial:       010D0C9F4328584D00B26FDDA1A5A2965A2E2C80
Authority key identifier: 10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/77d4a1e6-6819-337e-b895-60b392f7ba8a.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     33141
IP address blocks:        204.89.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6f:dd:a1:a5:a2:96:5a:2e:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534b7d7-f616-427d-9bc3-85d1bd789f38
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=c732a000-1ed8-46de-aee1-b90c63ae2e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:11:30:d7:f1:29:e7:84:5a:71:ec:cf:99:
                    9d:82:2a:80:1f:0f:8f:a5:d0:be:1d:8b:8a:18:62:
                    f4:24:ae:d9:14:9a:67:4c:f5:c1:82:bb:7d:8d:ea:
                    a3:be:22:86:7b:a7:dd:3e:49:37:22:21:cc:e5:9c:
                    8f:14:20:a6:08:7f:93:72:0d:4b:8f:f5:18:37:d9:
                    21:a2:fb:7c:c4:45:77:3a:4d:31:76:5d:d6:8f:b1:
                    5b:42:e8:f0:5f:67:39:d6:83:60:f0:2c:b2:60:ec:
                    c0:f5:b6:ba:ac:40:7e:fc:fe:cb:76:15:8a:3b:61:
                    f2:42:5f:d2:66:85:29:3b:bb:44:40:fd:56:e6:1e:
                    25:64:c0:d4:32:76:f8:9d:44:29:1c:2e:1c:6a:00:
                    3a:38:4a:09:f5:b3:00:4b:f2:d4:ec:7d:d4:45:94:
                    d7:5a:75:3c:94:ce:b3:19:a3:10:e9:de:b8:ce:c1:
                    73:d0:46:d5:10:b1:ca:1b:3f:c1:b8:46:f4:85:53:
                    1b:7a:a2:10:7c:b8:19:a6:e3:4f:2b:1d:43:f1:85:
                    b5:4e:a2:df:86:c0:b4:52:1b:a0:55:7a:57:22:78:
                    c5:01:7c:02:70:c2:a5:19:e3:ad:14:b5:b1:fd:dd:
                    ac:33:86:29:41:3b:bd:ff:ad:c7:6f:a0:75:5c:d5:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CE:E0:D6:21:B8:B0:64:E9:A6:E7:A6:DF:71:E3:2B:53:55:08:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/77d4a1e6-6819-337e-b895-60b392f7ba8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38/1534b7d7-f616-427d-9bc3-85d1bd789f38.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:D4:E6:05:D3:61:6F:A3:C8:32:72:85:02:09:5B:58:BE:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1534b7d7-f616-427d-9bc3-85d1bd789f38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:c7:89:f1:2c:dc:d0:7a:52:d2:32:57:13:a3:fc:a8:31:
         1a:c0:30:e9:40:1f:87:19:b8:84:c5:22:06:1c:f8:4d:cf:a9:
         95:4d:ed:54:f6:67:62:65:12:01:74:5a:ce:c3:9a:da:5a:29:
         75:44:40:cb:12:fa:3d:92:01:be:09:9c:d0:c4:20:f1:5c:01:
         5c:7c:92:c8:46:4c:c7:c4:a5:10:31:48:a9:40:20:a2:48:3c:
         00:b9:50:b1:3a:aa:56:dd:be:64:a1:b2:fa:9c:df:e8:7d:c4:
         14:6f:7e:9d:bd:2f:99:8b:25:f8:a7:a8:74:2e:da:32:61:bc:
         6b:54:f5:a7:4e:ed:f4:3c:31:7a:af:7f:3c:36:c2:81:74:2c:
         b8:fb:68:a9:07:45:7e:a3:08:e9:93:ec:4d:a0:46:16:ad:f9:
         05:f4:e0:38:3f:6b:fe:78:61:e4:69:c7:39:01:97:42:24:64:
         09:e5:dd:c8:0c:17:f3:78:34:17:bb:2d:c2:c0:6d:17:a3:9f:
         12:e3:f5:3d:1f:91:c1:f2:66:56:59:50:c0:21:b2:ab:78:67:
         d1:12:b2:d1:16:bf:ed:d3:bb:a4:63:d4:9b:37:09:41:ab:f2:
         ce:0c:f0:ec:63:69:83:37:3d:e8:58:ca:6f:7b:d7:41:02:47:
         46:f5:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:47 2026 by rpki-client