Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa
File:                     ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa (raw, json)
Hash identifier:          3w8cVnSHybZoHsrMAoA6VKGydOjywEE2eiv6NF13iB0=
Subject key identifier:   4B:35:B6:85:16:EA:48:78:83:DA:DF:9F:04:0E:F1:55:B7:5E:AC:9B
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584CF8523F43240D0C540B40D368
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     15257
IP address blocks:        173.195.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:3f:43:24:0d:0c:54:0b:40:d3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=c1c712f5-6269-4eca-928a-7d2e07b0cf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:2b:c0:87:b5:b3:8f:5b:3f:ca:48:f9:de:
                    18:38:e5:8b:a7:e5:9f:72:82:59:57:dc:60:1c:e4:
                    e0:20:14:f1:2a:f9:3d:fe:39:39:a7:2d:4e:35:31:
                    2f:b4:1a:51:09:ba:82:42:4a:17:ef:16:d1:70:89:
                    92:ef:48:4a:3c:98:e3:87:1f:24:dd:50:3a:8d:2e:
                    6d:6d:af:6b:d9:58:de:87:18:16:82:c6:07:8a:d5:
                    28:df:cc:8c:d0:63:9c:b9:47:2c:6e:ce:2f:7a:ec:
                    df:d6:30:88:79:92:93:55:74:8c:49:55:89:21:d2:
                    16:6e:48:76:5f:7d:de:db:c8:f6:58:9c:ce:d2:b1:
                    b7:f7:7f:ac:33:df:ac:3d:39:8e:04:2b:e0:ff:24:
                    5c:85:7a:71:ab:8e:d3:08:17:4e:8b:a8:28:7b:c3:
                    2e:bf:19:42:f6:32:70:b4:b7:8e:87:cd:40:7f:8f:
                    a0:af:df:ff:be:07:27:00:f7:c2:c2:87:3b:bc:26:
                    72:a5:7a:06:ed:d1:9d:59:6c:0b:f1:44:e7:a8:9b:
                    8d:c8:5e:ad:ed:19:a6:da:d1:a2:0a:6a:02:00:b1:
                    d0:03:d4:23:5e:38:46:ae:d1:ad:e4:ea:60:ba:8b:
                    5c:85:82:39:33:e4:56:d4:de:81:a8:fb:1e:c5:95:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:B6:85:16:EA:48:78:83:DA:DF:9F:04:0E:F1:55:B7:5E:AC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ccc1e6e7-19ce-310b-92b2-8fffd9fc5676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b7:ec:3e:8f:40:24:7c:9e:ca:00:98:cf:a1:5a:7f:a0:4c:
         2f:33:d3:e8:a0:c5:52:55:46:f7:1b:b8:a9:4c:c3:1c:0b:96:
         5d:da:72:22:3c:ba:cd:0d:45:4a:36:79:d9:ad:67:21:ec:7c:
         c7:82:3e:7f:18:88:f7:7b:97:49:da:5b:9c:23:7a:1a:71:d2:
         aa:94:51:79:73:cd:96:7d:94:0c:28:f6:ff:a7:58:64:6f:54:
         b4:cd:37:7e:b5:33:64:c0:d7:8d:0b:3a:b3:e5:f5:44:9a:cc:
         2f:f9:e9:e9:c5:7e:23:68:58:6a:27:5e:f3:c8:20:ed:97:58:
         a8:08:bc:3f:ff:8c:9d:48:bc:e0:5c:71:2c:3b:d8:8c:12:55:
         a0:31:9e:04:31:04:d8:3b:20:16:1d:15:3a:2d:09:7b:97:81:
         ec:d2:a8:f1:84:26:59:4d:1d:f9:21:e2:55:a9:53:db:a0:3f:
         66:c6:82:7a:bd:3d:9e:e2:38:09:b0:5a:c2:a3:02:27:da:58:
         36:e5:93:b1:50:0b:db:de:2c:cd:ff:e0:79:e8:4f:51:ba:cd:
         4a:2a:18:de:8e:41:4f:55:03:2a:06:0e:2a:4c:dd:3f:e9:5f:
         4b:74:1f:af:27:6a:df:7b:73:15:bd:67:72:1f:30:89:cf:e6:
         54:39:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:54:56 2026 by rpki-client