Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/c126a89e-f3fd-382c-a3fc-643028fabadc.roa
File:                     c126a89e-f3fd-382c-a3fc-643028fabadc.roa (raw, json)
Hash identifier:          YQgoRGCXZ4u6eVtyo7yaPzqN17ugDEp12Ts9Pzpc8Yc=
Subject key identifier:   3D:D8:B4:45:04:FA:D3:CC:8E:63:2F:C8:3A:FF:ED:3B:01:9F:CB:C9
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F4328584D037D0416C796DFE9746BB900
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/c126a89e-f3fd-382c-a3fc-643028fabadc.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     26336
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:04:16:c7:96:df:e9:74:6b:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=df4ebf89-f6d4-4cf2-9188-9b7781680524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:df:23:3e:84:37:cf:ae:f3:7f:29:75:6f:
                    2c:50:f2:71:cd:89:14:2d:d0:8b:5b:2f:5d:3c:6e:
                    b1:2a:4c:07:75:b2:2e:0e:ef:da:3c:80:d3:47:83:
                    bb:b2:51:c6:3d:e7:dc:a6:c4:72:7a:8c:5a:c2:64:
                    6b:85:11:4c:ce:39:ae:1b:36:0c:3e:af:c9:76:d3:
                    8a:f4:21:b2:bc:1d:7e:38:79:6c:e4:2a:96:18:ea:
                    59:31:15:ae:dd:bd:72:30:13:53:e0:d3:29:92:7a:
                    ae:1a:1e:0c:3e:0e:56:b3:2a:2d:c5:5f:95:4d:82:
                    b1:1f:82:e9:65:a8:3c:a5:c5:46:9e:8f:34:17:80:
                    f4:c4:e2:dd:d1:86:fc:c0:be:b4:7a:bc:a3:08:7c:
                    20:25:b0:2d:38:9d:ad:06:62:1f:6d:87:0d:20:b3:
                    82:b6:f9:51:2a:50:3d:67:82:ac:42:aa:2d:ec:b0:
                    0f:27:97:ea:77:9c:2d:d7:de:0a:5e:68:f0:2b:c2:
                    58:8c:97:c0:40:e1:c2:28:7d:27:f7:1d:cf:08:83:
                    36:dc:db:f9:7f:3a:2a:fa:59:92:77:6e:61:29:44:
                    ee:a7:ca:c0:c8:2d:39:ec:bb:23:cd:5b:8c:0c:07:
                    2d:8b:da:c4:9d:4a:9e:b1:5c:a8:5a:fa:44:0b:ab:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:B4:45:04:FA:D3:CC:8E:63:2F:C8:3A:FF:ED:3B:01:9F:CB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/c126a89e-f3fd-382c-a3fc-643028fabadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:17:9f:39:16:77:8c:a6:c7:ba:7a:12:f6:02:04:c9:05:
         0c:2c:92:d0:fc:04:e9:16:a5:2f:d6:af:14:bb:36:ba:b3:aa:
         66:93:c3:6b:f9:2c:ff:c7:59:9d:fa:8a:83:0e:2f:82:ff:0d:
         ee:0e:64:98:3f:f2:14:9a:7f:57:92:eb:d2:a9:34:6e:af:d0:
         b2:22:20:da:7e:8d:a2:99:ff:32:ac:45:b0:30:53:40:5c:36:
         bc:a5:a0:b5:31:93:36:03:b3:81:a8:06:da:b6:f4:73:a8:9f:
         59:3a:09:63:be:5c:43:72:aa:4d:83:d7:4f:ad:78:48:41:c5:
         6c:2c:f6:69:a6:a2:5f:ff:4e:e6:06:8b:2d:8b:2a:0d:a7:92:
         0e:d1:c6:d1:fe:46:cb:92:ee:c1:a1:18:34:53:e9:40:aa:a6:
         e9:35:e1:89:47:7d:40:f4:24:13:1b:de:3f:63:65:a0:22:d6:
         c5:07:b5:f6:ca:30:d1:8e:00:91:c9:a2:2c:df:42:51:dd:aa:
         19:eb:57:5f:b5:e0:1e:76:8f:ed:7c:1a:f6:cc:39:d5:a9:a0:
         40:7b:53:d9:c5:2d:6d:e3:ff:9f:ce:91:9e:8f:fd:1b:8f:9f:
         72:9c:a5:4e:11:e6:8b:f4:59:f9:89:ea:a7:4a:ef:e7:ac:5f:
         bc:f6:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:57 2026 by rpki-client