Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa
File:                     e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa (raw, json)
Hash identifier:          bFdwuqC+GznNhgbW/IIx2gQfRZuOmODy8X68Aus5c5M=
Subject key identifier:   35:56:83:CC:5D:86:58:2F:F8:95:83:93:ED:B6:FE:17:4B:C9:0E:FA
Certificate issuer:       /CN=cce65795-3b77-4225-98f0-89e8bfcf275c
Certificate serial:       010D0C9F4328584CF2BCEC9A070780454B0ABA20
Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     8070
IP address blocks:        199.15.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:ec:9a:07:07:80:45:4b:0a:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=7f2c2615-f719-4e19-9c80-fc780b3bd360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:94:87:2f:7d:d5:1f:5f:cb:8d:ca:09:6d:
                    45:18:fa:50:28:b3:41:68:d8:63:fe:df:16:7e:cc:
                    97:6a:9c:01:e0:cc:54:83:ce:b6:17:54:d5:0f:ed:
                    6e:64:26:9f:fe:7e:4c:58:41:17:66:cd:37:79:5b:
                    6a:be:66:e1:13:00:3b:d9:30:06:bf:6d:ac:f2:64:
                    6e:6a:96:a5:b0:87:0d:6a:37:eb:10:93:f3:1c:bc:
                    18:e9:3c:cd:38:36:c9:45:50:63:f6:19:98:b5:18:
                    17:22:ca:cc:bd:8e:ee:29:e3:6f:18:9c:8d:c5:26:
                    09:95:08:a2:c1:c9:b4:b1:aa:dd:0f:57:5e:31:19:
                    8c:43:43:bb:51:ff:fe:38:f9:f0:a2:0c:d6:2c:69:
                    b9:72:b5:7e:9d:dc:68:5f:60:94:83:40:14:94:4d:
                    6a:cd:20:33:fb:b7:0c:f6:9a:e1:1e:35:22:57:dc:
                    5a:c3:5b:c5:9c:35:1b:18:31:f4:27:cf:13:d0:b4:
                    ca:62:67:25:fd:ae:4f:b1:47:bf:25:e1:ca:17:b4:
                    f4:57:53:d3:1a:3c:2d:f1:c2:61:6d:f9:44:6b:6e:
                    a9:ee:c8:91:20:27:4b:17:ae:f2:1f:ff:8a:26:bc:
                    08:05:64:04:d0:d5:38:fc:a9:9b:2c:a5:48:f0:ec:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:83:CC:5D:86:58:2F:F8:95:83:93:ED:B6:FE:17:4B:C9:0E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/e6b3d63b-f0a2-39c0-a2f0-a64ee0f2732b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:f3:78:32:b4:b2:82:32:01:8f:b4:45:ef:55:e1:f5:d4:
         ae:46:f4:56:96:5a:34:a4:1e:0f:18:fc:fe:17:84:cf:c9:94:
         04:e5:a3:4f:75:10:f0:c1:2c:cc:33:73:3a:8e:34:7c:e1:9c:
         94:1a:cb:1d:32:9c:fc:9d:60:10:a3:06:8e:33:b1:15:8b:d2:
         41:f4:40:2f:ab:7f:69:76:e8:f1:a2:d1:ca:7f:69:bc:98:fa:
         6e:5b:80:52:b2:b5:20:e1:5d:a4:b3:f7:77:ff:a6:3d:80:81:
         63:ed:9e:5e:20:08:a2:e3:30:43:7b:a2:91:a7:8e:40:39:b0:
         f4:9e:02:83:cd:5c:91:39:01:35:45:3f:c6:48:3c:cc:96:2a:
         f3:40:15:1d:e1:94:a2:07:d1:e6:0e:de:18:14:77:72:91:63:
         6b:d6:73:d6:e3:f0:97:41:61:d2:35:22:c2:68:40:9e:fc:f3:
         3f:cb:a1:d0:00:3c:6e:93:79:f4:d2:c3:9c:7f:5f:ec:6b:18:
         23:59:e0:5c:50:d1:99:fd:74:38:c6:5f:01:f2:79:c5:72:e6:
         39:0c:c9:72:5d:41:b3:a9:9b:8a:bb:20:17:bb:a3:59:12:1a:
         f3:e0:a5:7d:3f:96:da:c0:11:a3:f1:3c:0a:96:81:31:e1:fe:
         69:2f:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:39 2026 by rpki-client