Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4153b259-4999-375a-8306-c0e12e589a6f.roa
File:                     4153b259-4999-375a-8306-c0e12e589a6f.roa (raw, json)
Hash identifier:          BugQieGhchMi8frTMxqyqtVf1ATsQTZg5se8u8rSu40=
Subject key identifier:   FA:40:73:7F:73:FC:2E:71:C0:3F:83:CA:CE:40:11:71:84:D0:6E:59
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CFB4C486C0E6B038598955D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4153b259-4999-375a-8306-c0e12e589a6f.roa
Signing time:             Wed 25 Feb 2026 15:36:14 +0000
ROA not before:           Wed 25 Feb 2026 15:36:14 +0000
ROA not after:            Tue 26 May 2026 14:36:14 +0000
asID:                     20001
IP address blocks:        67.103.194.0/23 maxlen: 24
                          67.103.196.0/22 maxlen: 24
                          67.103.200.0/22 maxlen: 24
                          67.103.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:4c:48:6c:0e:6b:03:85:98:95:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 25 15:36:14 2026 GMT
            Not After : May 26 14:36:14 2026 GMT
        Subject: CN=a5d342b2-c2d1-4a39-bcb8-f3e910233c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:3d:44:70:47:6d:89:84:21:c8:d5:42:d0:
                    7b:69:c8:39:f8:b2:f5:7a:50:ac:1d:7d:27:54:63:
                    0b:df:39:e4:c2:b8:2d:b6:33:dc:57:2e:c1:b7:7b:
                    b7:96:45:c6:18:38:83:a7:1f:d4:73:60:ef:be:7d:
                    75:9d:cf:1a:ee:d3:5a:3f:84:cc:e5:58:01:1b:18:
                    75:18:20:4b:8f:93:0e:69:2b:0b:5d:05:b4:db:b9:
                    b3:ad:d1:97:83:26:88:21:7b:bc:5d:c6:9f:28:f2:
                    68:33:bd:a5:1e:4a:30:b5:c7:44:2f:b5:83:84:f5:
                    c6:dc:1a:c4:79:02:7f:79:ee:c5:75:8d:ea:39:66:
                    f4:e7:0e:da:39:c9:fc:c7:5f:ad:a0:ea:03:8f:04:
                    c4:3a:6b:3f:1b:3f:78:f4:ff:11:de:9f:16:f2:93:
                    8a:a4:eb:a6:eb:de:7a:41:42:88:87:56:4e:d5:66:
                    62:88:dd:b0:1b:37:34:05:c8:5e:9a:50:8b:ea:4b:
                    bf:d9:fc:b6:a5:7f:44:48:a4:11:1c:fe:83:ff:32:
                    b7:c9:80:df:62:21:5d:b0:03:4e:b6:8c:cf:64:ca:
                    d4:a8:70:23:01:a5:ca:7d:b0:ee:4a:7e:01:ed:e6:
                    e2:3f:62:4a:5c:ab:f7:3e:f1:a6:96:d3:c5:c1:27:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:73:7F:73:FC:2E:71:C0:3F:83:CA:CE:40:11:71:84:D0:6E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4153b259-4999-375a-8306-c0e12e589a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.103.194.0-67.103.205.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d4:35:d4:c0:d8:2f:07:2b:74:f0:da:ea:68:ff:af:0f:bf:
         4e:7b:04:66:bd:a2:64:b2:b4:a2:d2:a0:ec:86:9a:b2:f5:79:
         62:e1:7f:8b:cc:c9:e5:7d:25:84:18:f5:7e:ce:67:30:c9:5d:
         08:59:63:59:61:6e:a4:c9:82:ab:af:b3:20:1f:79:f9:e8:dd:
         55:4d:56:8f:74:5d:a4:ec:49:42:ab:48:c7:d9:ef:fd:ca:ea:
         d5:a1:7e:e9:67:74:f9:e2:ff:1c:f7:ae:2b:4f:e6:99:42:b9:
         fc:12:10:45:16:35:ea:8e:4c:44:7a:86:31:e7:c2:18:e1:53:
         de:74:4e:62:d6:31:6c:dc:2d:ba:5a:38:fb:a6:e6:f3:d0:d7:
         e0:cd:cd:90:73:87:47:17:ef:17:29:c0:42:94:09:c1:64:f1:
         d6:54:e2:b8:7f:e5:3b:65:d9:71:70:b9:b1:37:b8:73:64:a6:
         3e:6a:3d:3e:ed:ad:fd:3d:d2:3f:29:2f:d4:89:5b:5f:74:4a:
         3a:94:f9:a0:13:d6:2e:b5:d3:19:3b:b8:72:d4:48:f3:45:1c:
         cd:cc:f6:d5:8c:14:4b:a8:6f:84:6d:d5:e0:e2:ca:71:5c:21:
         b7:51:7e:05:cd:53:c0:f8:07:d3:4c:2c:11:f2:2b:a5:c7:de:
         dc:8f:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:05:12 2026 by rpki-client