Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
File:                     01fb150d-a072-39ec-b4dd-9952490d8c1a.roa (raw, json)
Hash identifier:          +6sF5twCvrEJRM9ab6TMhlrNtuccrTz0kGFqi6mY+xQ=
Subject key identifier:   E6:31:3D:60:5D:96:AF:BC:5E:C8:F8:C3:F1:D0:9F:AD:F5:94:E9:70
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584CDB02136C13134608A564A400
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     40788
IP address blocks:        162.247.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:13:6c:13:13:46:08:a5:64:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=f8040b9a-9745-4a55-89b0-d2ebd2592581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fb:a9:fd:cd:40:ce:ed:ee:7c:fc:a4:75:15:
                    91:96:95:d7:c2:f3:39:f3:0d:ea:5c:dc:ab:29:4c:
                    f3:0f:18:d1:2e:df:e1:17:f5:d7:02:25:bb:8e:2c:
                    16:6f:b8:1a:ae:c6:1c:21:eb:87:16:5f:de:24:1e:
                    18:a6:d7:2f:55:5e:e3:75:b3:e8:8f:d0:ad:87:a2:
                    df:35:88:f9:fb:72:3b:8e:cf:93:1d:fe:50:aa:e3:
                    db:a9:81:37:88:2f:cd:f9:81:1f:92:17:0f:71:29:
                    44:af:26:c8:0a:08:17:b2:57:d0:27:59:36:e1:3a:
                    e8:41:c8:f1:97:b5:ed:6f:72:a1:7c:35:b6:3e:00:
                    25:cf:70:ac:f7:57:8f:a8:3e:78:19:83:73:63:04:
                    45:84:d7:74:e9:92:f9:81:33:0f:2e:89:dd:1a:7a:
                    06:58:ea:a1:13:66:bb:5e:1c:fa:b0:63:42:e5:1c:
                    73:c4:f7:c8:17:3b:76:67:31:02:fd:09:ee:fe:ff:
                    c7:0c:8e:a6:58:d2:41:8e:13:26:f7:bc:86:f3:17:
                    87:ae:37:bd:6e:5b:83:7f:e0:b9:77:eb:9d:1b:51:
                    a8:4f:0b:2e:b6:0f:e3:44:14:e1:82:79:bd:62:3f:
                    2c:14:60:0e:88:bf:c6:86:27:86:d9:99:3e:f7:31:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:31:3D:60:5D:96:AF:BC:5E:C8:F8:C3:F1:D0:9F:AD:F5:94:E9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:95:99:51:dd:30:95:f3:c2:84:f4:99:63:fe:f6:2e:44:
         81:cd:c2:70:20:16:0d:a3:d8:5b:a4:f8:e4:19:a0:43:11:19:
         65:61:f2:8d:76:11:4a:58:d4:e5:31:4f:48:61:a0:7b:4a:17:
         b6:c6:4c:2f:a4:2d:fb:83:15:b0:f2:94:37:0e:0f:a4:12:11:
         14:6b:39:6d:30:69:56:f9:39:5d:a3:6e:17:18:e3:35:d9:40:
         63:80:aa:65:cd:39:59:09:1b:ed:0f:ae:d1:c8:72:d0:df:0a:
         f1:c4:09:74:e2:a9:f6:4a:fe:35:ba:73:79:30:24:4b:dd:c6:
         7f:43:2c:aa:6e:a2:1d:94:da:ac:48:c4:79:9c:40:b4:e6:f7:
         a6:2c:87:dc:47:29:16:24:5d:92:58:e4:42:14:31:4e:1d:3a:
         6c:b6:cc:1c:94:5c:2f:ec:58:b2:0b:b8:22:5f:6e:8d:00:19:
         4a:fc:c7:4f:37:33:64:1a:51:31:79:fe:8a:da:55:7c:e6:23:
         18:65:1c:f1:24:5c:04:e8:50:d5:63:4c:f1:d1:ce:ae:ec:62:
         94:45:c3:3a:1d:92:06:37:39:c1:69:95:05:b9:f4:79:b7:8d:
         71:a1:e6:17:e8:30:f5:a9:42:a5:83:89:82:43:24:5c:51:22:
         36:a0:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:29 2026 by rpki-client