Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa
File:                     b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json)
Hash identifier:          2JIzmBxvnvHXQ4411Omer0IF2Zf+OEwlZRbNiFG+MEk=
Subject key identifier:   94:C6:EB:05:8D:02:6C:C4:63:76:47:42:00:C7:37:A6:E4:EF:61:E5
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F4328584D00B27B3DC732EE2B000CE000
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     25617
IP address blocks:        216.222.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7b:3d:c7:32:ee:2b:00:0c:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=4c3acaf7-262a-49b8-bb39-394890d8160d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:2e:66:a3:ad:05:5b:a4:76:42:8b:2c:00:
                    e0:b9:81:5f:80:b8:4f:36:ad:dd:48:17:e2:26:03:
                    8a:89:cd:22:08:1d:6e:ce:1c:0b:ed:49:a4:9c:25:
                    ac:d3:22:cc:f0:2d:5e:3c:ce:63:ae:ec:7c:6f:83:
                    ea:99:9d:33:fd:af:49:1e:ac:cf:c3:bf:42:67:1a:
                    a7:3a:da:6f:dc:32:39:2a:10:70:0d:e6:c7:b0:b9:
                    1b:1e:df:9a:ad:47:f8:a9:ef:5a:f4:8a:42:92:2a:
                    ea:29:3a:6b:72:e5:f9:f4:88:d8:54:40:a9:26:26:
                    05:fa:00:1f:ed:05:0a:35:9f:e4:c1:ff:2a:82:e2:
                    c3:3c:23:d7:f0:84:18:56:a5:ad:18:f4:f4:ac:d7:
                    08:06:2f:fa:e9:a7:18:78:ab:2b:1e:88:b6:c5:3d:
                    82:5f:3e:98:57:93:97:33:1a:c9:9b:ae:76:ed:0a:
                    39:52:bd:b0:3a:4c:c5:2b:35:ed:d1:eb:89:8e:9e:
                    e4:c4:13:7c:b1:90:22:1c:17:be:c8:bd:ea:2b:98:
                    c4:71:13:70:1e:f2:c8:48:e5:b8:df:89:ce:c3:5e:
                    61:50:29:02:44:50:42:27:d0:e8:7e:01:34:18:56:
                    74:47:ee:8b:45:d5:8c:6d:9c:47:21:a6:78:97:68:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:EB:05:8D:02:6C:C4:63:76:47:42:00:C7:37:A6:E4:EF:61:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:74:6d:d2:73:2f:9e:3f:c8:0e:6b:b4:0e:b0:0d:44:6b:41:
         eb:4a:c5:0a:90:7c:e3:fb:dc:8c:93:fa:33:66:86:4e:98:4e:
         ff:52:3e:0e:01:3b:4e:76:32:b4:4c:dd:6c:e7:6e:b4:ff:f9:
         2c:8c:30:d9:94:23:5f:7b:14:45:e2:a7:ab:8b:e0:68:2d:53:
         22:5d:48:8a:50:2e:33:59:c3:85:34:5e:2f:4b:79:d4:66:b5:
         66:f9:e0:fe:d7:17:25:1e:d4:fa:08:26:16:c9:ba:f9:01:90:
         66:26:88:b2:e8:45:51:9b:02:b3:b4:c6:c7:88:19:27:fd:56:
         e6:fc:d7:9c:bb:15:39:41:f6:4e:4a:e3:8a:7b:fd:c7:b9:c6:
         d4:22:9a:bc:9c:1a:f5:84:86:21:ec:32:c2:d7:a0:2c:f8:17:
         13:86:b4:aa:88:e8:5c:55:89:56:67:36:9b:ae:7a:c8:b7:27:
         95:cd:c0:bd:91:66:b9:7e:13:29:2a:05:be:68:41:cd:4e:7f:
         1f:6d:ed:53:0f:5d:33:3d:c3:6d:de:c5:bf:76:ca:51:b7:94:
         64:d1:e8:06:b8:13:c3:d0:2a:40:d4:86:56:3a:9f:62:f1:44:
         c6:f3:5b:25:b8:d5:ca:70:9c:d2:c3:2d:01:9d:7a:a3:1a:b4:
         87:93:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:15 2026 by rpki-client