Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25404a18-2ac4-3a4f-a239-ecdc7f1f77f7.roa
File:                     25404a18-2ac4-3a4f-a239-ecdc7f1f77f7.roa (raw, json)
Hash identifier:          BJMF5ZNja/isQLo88cH5TL5tK/2fmYOuGGTthqDLZJQ=
Subject key identifier:   35:60:DB:68:74:22:B8:E8:20:E9:25:18:F5:08:73:F5:36:AD:57:7B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF42218163A0AC72AA3A5B040
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25404a18-2ac4-3a4f-a239-ecdc7f1f77f7.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     215607
IP address blocks:        66.93.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:18:16:3a:0a:c7:2a:a3:a5:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=896de8a7-f9e9-45bf-a8a0-2601de1a19e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:a3:25:53:40:75:99:23:33:c9:1f:50:99:
                    18:46:69:02:48:15:08:8b:3d:60:ba:9c:0b:fd:c4:
                    47:23:d9:17:8f:f8:62:e7:03:20:bc:58:fe:83:1c:
                    38:be:3e:32:cf:20:f5:ab:0f:e1:78:57:40:3e:eb:
                    10:f3:8f:a4:29:07:d6:21:87:ef:d2:57:e5:c3:ad:
                    b5:61:bf:d8:54:6f:36:56:63:82:a7:b9:55:cd:15:
                    c8:72:9b:33:24:95:da:87:ec:4b:df:81:57:90:b0:
                    8f:79:28:db:e7:ac:a1:43:ad:4e:af:00:23:50:e9:
                    c1:40:52:81:40:8a:87:0f:72:b9:ad:63:91:e7:27:
                    31:3a:3b:c0:5a:72:b6:54:73:66:c8:d7:02:97:7b:
                    f6:7c:6f:a9:2b:1f:b2:1a:bb:8e:8d:9a:d3:74:95:
                    00:87:5f:ed:57:42:a6:08:47:d4:b5:bc:3a:d4:22:
                    9f:61:dd:0b:df:66:43:74:65:89:89:41:6f:79:65:
                    89:80:23:c6:0f:8d:22:62:d8:22:a2:a3:6b:13:12:
                    93:f1:0b:b3:e7:2a:ac:b9:3a:f3:3d:85:a3:bc:3d:
                    04:b8:20:a4:7c:e3:67:e8:97:32:ac:1c:5e:fe:27:
                    b9:2a:c0:a7:39:3d:d0:ee:91:3f:22:ad:54:18:4c:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:60:DB:68:74:22:B8:E8:20:E9:25:18:F5:08:73:F5:36:AD:57:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/25404a18-2ac4-3a4f-a239-ecdc7f1f77f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e0:86:fa:8c:28:b8:3e:c1:e2:5b:13:f5:97:74:34:8d:e8:
         65:62:0a:af:41:b0:3f:3f:81:28:e5:e5:12:c2:91:40:f2:5e:
         ef:7a:d3:94:65:ee:35:d5:65:d7:35:7f:38:a3:dc:a0:ec:66:
         b4:71:93:93:40:93:ad:89:e3:eb:46:c3:ee:aa:d9:18:1d:e8:
         2e:47:6a:76:45:b3:7c:45:91:3d:e1:d1:af:6d:9c:01:32:2f:
         ec:fb:6f:44:a6:d2:dd:24:d1:59:63:1f:28:a3:67:2f:97:32:
         50:a9:82:2b:61:6b:78:f1:14:e2:c9:dd:dd:a8:e4:4e:87:71:
         33:2e:09:2c:dc:7f:d3:21:a2:0a:d3:84:7c:b7:3f:a4:4b:39:
         5b:ea:2b:f3:f9:0e:78:29:0a:df:74:b3:88:4a:64:77:22:fd:
         f3:82:40:7d:1c:85:7b:3c:eb:36:8f:a1:9b:b2:d5:e9:ca:c9:
         53:45:31:d5:19:b6:2c:fc:e4:be:3c:6e:0c:f4:c6:e2:52:4c:
         e0:6f:0f:fc:5d:2b:b1:b4:e4:ee:4b:d0:9c:d7:af:e3:61:2a:
         18:86:73:00:0d:7e:3c:74:fe:ca:97:13:a9:a6:76:e2:3e:56:
         62:2a:e3:cc:91:e8:eb:54:d5:ce:3e:07:bb:06:13:bf:0b:a4:
         b0:cf:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:36 2026 by rpki-client