Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa
File:                     ec651062-e150-3475-8a69-0b79c30db69e.roa (raw, json)
Hash identifier:          Qzu4NZXmfXU2xRyynw9eyfrUwoCst6H+b4ZG5xzqo3Y=
Subject key identifier:   29:46:0A:09:11:50:10:4E:08:B5:A6:F7:E8:37:8A:FF:98:4E:F0:7B
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F4328584CED27BB920794E48B102D0600
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     23532
IP address blocks:        199.188.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bb:92:07:94:e4:8b:10:2d:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=709bd556-ff8b-475d-ba05-52b68fdbe261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:9a:7a:3f:6c:bb:fe:43:55:54:22:a0:b4:
                    cf:54:1b:98:ab:a6:ce:7d:b0:20:f3:f2:25:9a:1e:
                    fc:c9:66:62:87:85:64:5c:e4:15:48:ec:e4:80:59:
                    68:d8:51:ca:ee:ff:7c:23:d0:ba:3f:a5:64:71:16:
                    ad:22:1a:c4:48:c1:64:9b:6a:67:f9:9f:d6:aa:2b:
                    bf:a2:8c:0b:e8:94:2e:d9:83:54:de:96:1b:5d:43:
                    f7:4a:b3:fd:8a:9f:24:f4:cd:bf:f7:98:1e:c7:81:
                    e4:4f:86:66:44:45:00:5e:c5:ba:3f:a8:35:c3:f0:
                    88:cd:a9:bf:b7:b0:20:e5:a8:94:52:72:11:49:1b:
                    d0:6a:89:2d:4b:73:9b:48:83:4d:24:07:fa:a3:d3:
                    46:5b:e0:f8:08:61:89:66:3f:ba:6c:03:c8:78:cd:
                    67:1c:4b:ae:f5:29:a2:9f:37:28:b9:22:7b:9e:a1:
                    52:cb:89:04:c8:c1:97:79:1c:15:3f:57:fe:7f:5a:
                    21:3c:ee:fc:f8:e9:ba:42:f8:f1:46:4f:4e:9f:c0:
                    43:e6:d0:cb:b2:4a:d8:93:0b:90:60:e7:22:e0:7c:
                    31:c2:26:9e:01:78:f5:3a:40:91:77:70:ea:ba:89:
                    ed:94:2e:4c:ba:54:b2:dc:3e:f8:e9:47:fa:6d:3a:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:0A:09:11:50:10:4E:08:B5:A6:F7:E8:37:8A:FF:98:4E:F0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/ec651062-e150-3475-8a69-0b79c30db69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:65:01:c0:c6:de:f7:e3:af:77:8a:02:e2:59:03:49:ac:
         f6:db:75:5e:92:1e:2e:d8:58:2d:81:50:bb:09:26:a2:ae:99:
         0e:63:8a:79:cc:78:8e:c3:4f:cc:93:93:e8:d4:81:ff:46:82:
         a9:b7:39:05:f2:7f:35:74:b4:94:f1:18:7e:89:76:ed:b2:93:
         84:82:01:f4:6e:52:47:63:4e:f1:87:49:0f:6d:b3:62:90:22:
         67:53:7c:7d:d9:12:48:82:f5:97:bd:11:4d:7a:74:e4:d6:ab:
         db:b7:0e:57:14:b7:43:32:2e:01:1a:7d:c3:a4:5f:07:b5:07:
         b1:2f:a1:c2:e0:a9:3f:b9:f8:76:3c:f4:6e:c8:ef:d1:a7:eb:
         c1:08:d1:9a:34:42:d8:d2:a6:5a:2c:fd:f4:85:d2:76:db:b1:
         97:6b:0e:1d:35:a4:b9:b7:ba:18:12:8a:f0:ec:2c:2c:92:ee:
         7e:53:a1:e8:36:63:c6:2b:06:85:da:89:da:9e:5a:37:55:b0:
         ff:ab:57:17:f1:b8:93:76:62:14:a4:3b:7f:73:f7:bb:96:c5:
         a3:36:a7:3c:fb:28:0e:dd:31:9d:83:d8:e5:60:74:e3:4d:f3:
         b1:20:83:9e:d4:72:4d:6a:49:68:76:cf:bc:27:c5:3d:89:c7:
         e5:76:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:34 2026 by rpki-client