Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
File:                     5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (raw, json)
Hash identifier:          k+H31KnMe0CB5V+wiRezUMY7dVwBio99WlXel8+PtUA=
Subject key identifier:   50:0A:32:78:C9:92:75:F9:49:8C:9C:02:19:C8:86:A4:19:23:F6:60
Certificate issuer:       /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
Certificate serial:       010D0C9F4328584CF2BCE816D1912BB32F53D900
Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     400362
IP address blocks:        216.181.108.0/24 maxlen: 24
                          2606:a5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e8:16:d1:91:2b:b3:2f:53:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=d4cda363-aa46-411f-b79a-2184439ec4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:76:1b:25:7b:36:0a:d2:4a:84:9d:4e:c7:09:
                    3b:9b:09:47:c2:17:53:8c:a0:1b:64:3f:b2:5f:b5:
                    22:78:be:1a:a7:84:56:07:58:1c:b0:57:82:ea:42:
                    c8:62:2e:f6:4a:c1:b1:b9:11:d1:85:6b:c2:77:94:
                    67:24:7e:d3:ba:a3:f7:b7:57:4b:34:e5:84:98:41:
                    50:89:b5:0c:d1:2e:92:05:6e:01:03:44:b5:96:b7:
                    70:af:4e:db:88:b5:ad:da:15:ea:23:b6:5b:20:f0:
                    0c:2c:73:7c:5e:9f:e7:21:ec:be:b4:67:45:bf:07:
                    53:66:61:5e:9f:96:8d:23:4e:5b:4c:13:68:7d:d8:
                    0c:8e:bd:b8:12:3f:91:34:ae:4b:96:54:71:e7:b9:
                    37:ea:9c:19:df:2e:50:69:87:f7:7c:02:37:01:01:
                    15:f7:f5:a6:32:af:5b:04:17:74:85:cd:10:cf:f3:
                    d8:87:60:26:48:89:06:47:cb:92:97:bd:d4:49:16:
                    d7:ee:a7:c2:da:f1:7f:46:62:9f:db:c5:c2:79:44:
                    76:ca:6c:e2:a4:7d:b7:54:e5:6d:c4:aa:f0:f0:36:
                    ef:9b:5e:6c:5f:8a:62:cf:73:b2:a2:0a:e6:ac:6d:
                    32:7c:4a:60:5c:65:55:cb:e2:4f:f5:62:a5:06:b8:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:32:78:C9:92:75:F9:49:8C:9C:02:19:C8:86:A4:19:23:F6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl

            X509v3 Authority Key Identifier:
                keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.108.0/24
                IPv6:
                  2606:a5c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:d0:6c:e0:03:b5:39:2a:61:9b:a7:68:d0:87:6f:02:8f:
         7f:6d:16:41:36:e9:11:7d:9e:f2:96:81:6c:70:34:b9:88:12:
         36:96:54:f5:a5:22:1d:e1:ad:ab:3c:d1:df:d6:68:27:ce:75:
         c2:16:3e:06:f5:3a:98:3a:8f:fc:a4:ac:c3:9b:c8:1c:d1:26:
         fb:0c:fc:61:58:93:ec:fe:0a:9d:91:2a:ba:e2:ee:70:f7:c3:
         77:2c:7d:5d:9a:66:67:90:63:40:3f:54:c0:4f:19:48:bb:e8:
         ca:3d:2c:14:de:38:db:74:d9:96:6e:3a:e8:98:6a:11:a2:07:
         0d:2c:77:55:b3:7c:2d:52:80:47:f7:dd:26:81:71:bb:a2:a1:
         6a:53:da:e7:64:3d:ea:65:06:cd:bb:2a:31:ab:c6:e2:a4:63:
         f9:60:d6:4b:e4:ca:05:e0:c0:27:49:cb:2b:d3:4e:5f:a7:9f:
         e9:4b:f6:a5:c0:28:49:05:19:e5:77:41:77:da:da:f6:7e:cf:
         8b:89:1a:a7:18:81:0e:e8:f1:d1:e6:ca:8d:f3:79:31:54:52:
         e3:ae:56:a4:95:30:cd:23:ad:fe:1d:d2:11:a3:f8:e0:72:03:
         80:68:d5:d4:ce:ff:2a:8b:ab:22:b5:42:56:25:5e:67:bb:48:
         dc:05:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:54 2026 by rpki-client