Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/86ccb992-5c81-3196-b1bd-bec08a44bd5a.roa
File:                     86ccb992-5c81-3196-b1bd-bec08a44bd5a.roa (raw, json)
Hash identifier:          Y2kSLTZ+XT81GyD0PQXQYEc/zdGvXjnVOtPup0Swa3M=
Subject key identifier:   BD:51:B4:D0:53:46:73:4B:F4:C9:39:A7:CF:E0:A0:7B:CF:3B:97:F0
Certificate issuer:       /CN=a4c37a54-53a7-4980-be55-6af24c04c176
Certificate serial:       010D0C9F4328584CF5878622D25F5BF07BFD2C00
Authority key identifier: F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/86ccb992-5c81-3196-b1bd-bec08a44bd5a.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     62917
IP address blocks:        172.83.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:86:22:d2:5f:5b:f0:7b:fd:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c37a54-53a7-4980-be55-6af24c04c176
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=317b912e-9f4b-480c-aaf6-dc3626a41be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:43:f0:18:40:7a:59:4f:61:0f:d5:32:18:
                    7b:39:e4:22:c7:26:9c:9b:06:74:48:66:97:61:22:
                    88:6b:ef:fe:2d:f0:bf:67:f6:cb:99:42:e0:64:23:
                    52:24:e4:2e:ef:40:3a:03:f3:c1:f9:6b:d6:ad:4d:
                    d8:59:48:44:d9:23:5f:ae:cd:be:41:61:f4:c0:46:
                    07:8e:05:2a:3e:8d:3b:2a:ba:7e:43:9a:96:dc:90:
                    92:f8:77:0a:73:8d:04:f4:10:1f:51:09:ce:ac:c1:
                    fd:95:cd:0c:46:b5:71:1f:ed:bd:22:98:f9:64:bf:
                    a0:da:1d:ab:f9:df:12:f7:64:ae:d5:24:49:4f:e5:
                    76:dd:1e:a1:83:85:09:b8:bb:e0:e7:8e:65:a4:e9:
                    df:ed:32:30:a9:7c:7b:f5:a2:2b:fd:14:c9:f3:2b:
                    e2:6b:9c:af:e0:80:22:a6:45:11:66:27:e7:ce:bb:
                    97:b4:a4:cd:2e:d9:50:85:e9:e9:34:d6:52:2f:2a:
                    c8:1c:a8:0e:97:3e:75:2b:42:71:0d:36:c2:36:3b:
                    b0:18:63:42:2e:b3:04:9a:26:ad:0b:c2:a4:03:9b:
                    5e:74:a7:eb:09:c5:7d:dd:e3:b3:0b:4a:de:01:f0:
                    03:3c:d3:2a:93:79:e0:20:3e:ee:5b:21:7b:6c:f3:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:B4:D0:53:46:73:4B:F4:C9:39:A7:CF:E0:A0:7B:CF:3B:97:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/86ccb992-5c81-3196-b1bd-bec08a44bd5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl

            X509v3 Authority Key Identifier:
                keyid:F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:aa:d2:5b:77:df:f7:c1:f8:83:e2:a9:d2:a2:86:47:3c:
         be:73:64:a3:f5:bd:2f:98:f8:72:ee:41:80:13:ae:1b:ce:a4:
         a8:bc:93:cc:50:2d:f7:7e:d4:fe:da:af:22:14:d6:f4:a5:eb:
         30:bc:bf:88:43:4a:d2:b5:54:11:a6:c9:33:c2:c0:58:8d:50:
         5e:0e:96:28:7c:b5:13:c8:00:f6:04:6b:8f:ee:ac:6d:ac:24:
         bd:30:af:a5:d1:7f:dd:20:a7:42:70:84:15:39:0c:52:1c:4b:
         e7:d5:0f:5e:11:bf:99:05:22:cc:90:5c:30:42:02:80:14:26:
         9a:72:39:b5:00:c7:d9:ca:54:a0:40:e3:30:3c:3b:c3:35:cc:
         8f:db:15:49:d0:50:e3:03:86:1f:a5:56:1e:90:8f:93:d6:49:
         c9:e4:43:ea:a4:85:dc:0f:bd:10:9a:6b:a7:e7:91:4e:4a:96:
         73:92:61:d1:a8:09:a4:80:ac:d4:0e:ea:17:8a:81:09:74:6d:
         31:be:c8:68:83:08:77:49:c7:0b:fd:1c:0d:e6:7f:34:5a:bf:
         99:3f:b8:4c:00:75:33:c5:b8:30:b8:48:ae:94:30:42:db:5d:
         06:82:15:14:b3:8d:46:91:6a:e8:70:8c:d5:b8:12:36:bd:d3:
         77:13:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:22:16 2026 by rpki-client