Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa
File:                     fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa (raw, json)
Hash identifier:          EOCHioZHrE+6UXrxOl3xjoHi4wSAsfT13OanGMlnYCM=
Subject key identifier:   7C:B8:2E:4D:1B:0F:71:8D:62:45:B5:4A:67:DE:15:A7:46:A7:23:81
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584CED2782AB36ECF8CD99E61750
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     394840
IP address blocks:        67.219.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:82:ab:36:ec:f8:cd:99:e6:17:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=820911c6-29f3-4dbb-9716-1816fbdf0b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:11:b9:02:65:11:e2:c8:5b:9a:bb:18:19:
                    f6:0e:33:ad:85:57:a6:40:b5:d4:5a:99:29:9a:82:
                    70:c3:7a:f3:09:e7:ce:7f:ac:ea:e2:db:c1:da:0d:
                    41:4c:fc:63:20:01:ae:7e:39:d8:2a:71:d1:9a:97:
                    cd:23:86:10:f0:1e:bf:4e:03:88:52:b4:9c:73:8a:
                    fa:80:83:8f:75:90:49:6b:96:0b:f0:c1:45:70:03:
                    d1:31:c7:76:57:0d:52:7c:f1:d9:ae:47:65:59:2e:
                    fa:a0:37:74:5d:5e:eb:68:a0:55:7a:5d:fe:ce:4e:
                    d3:f4:5b:54:e3:60:a9:02:a7:c3:8c:c5:bb:14:70:
                    c4:95:25:c1:f2:69:e0:49:7a:f8:a4:2e:9e:68:29:
                    79:1f:ce:1e:48:8a:5d:16:fa:51:10:cb:fc:d8:ed:
                    e2:19:3b:56:de:67:8b:81:af:3d:06:e3:8f:db:14:
                    77:ed:7b:fc:60:b3:45:cf:b6:d2:89:11:9a:f8:9f:
                    90:0b:c5:92:d4:87:1d:7e:79:df:b6:36:a7:c9:c9:
                    2c:bf:00:4a:6d:1a:5b:98:f4:0f:d9:5a:1b:4f:05:
                    c8:09:bf:6c:6e:0a:96:f9:24:37:a5:e7:6d:f2:b3:
                    40:1f:eb:3b:30:c3:22:68:b2:22:5e:ea:e7:fa:6c:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:2E:4D:1B:0F:71:8D:62:45:B5:4A:67:DE:15:A7:46:A7:23:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/fd2ea73c-b616-3d70-bb45-2d184da20f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cc:a3:08:ef:2e:33:bd:31:c0:a5:72:24:be:bd:e3:fe:90:
         1b:4a:95:87:05:6f:2f:64:48:05:a4:fb:1d:1c:63:11:fd:a6:
         6b:e5:9b:d6:96:5e:ff:a8:65:4e:9d:bf:5e:88:ab:b0:c4:aa:
         d5:1b:5f:4f:35:de:e0:91:7a:4f:a9:cc:c6:d8:44:7c:08:8d:
         8b:48:4b:5e:fe:85:30:ac:a0:b8:30:90:51:79:ea:83:51:6c:
         c0:e4:7c:5f:0e:4a:5f:2b:29:33:ea:e6:7e:13:18:c9:d4:b2:
         81:69:85:35:e3:f8:42:3d:c4:66:e5:3d:fc:9b:c9:c6:14:71:
         23:31:12:89:c6:ca:54:b6:c5:59:53:47:86:9d:11:8c:02:1a:
         e0:86:06:d2:b6:e1:3f:fc:f1:fc:58:b7:8c:b3:49:a3:ba:76:
         b1:47:30:fd:35:a9:e3:28:c9:05:90:ff:fc:cf:fe:5d:3b:50:
         e6:3d:a6:c8:ab:cb:09:20:38:3c:15:11:80:bf:54:14:c3:99:
         10:1d:9c:e4:0f:43:e0:d6:81:51:1a:3a:53:17:2c:a9:d2:fa:
         e7:b8:7b:70:8a:5c:a3:09:e0:5e:0f:4e:8a:46:a8:6e:5a:98:
         4a:dc:54:ba:ed:50:d7:78:da:94:42:66:42:1a:c3:ae:7b:44:
         86:6c:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:43 2026 by rpki-client