Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/a0907581-3265-3db1-ac61-4c43523cba16.roa
File:                     a0907581-3265-3db1-ac61-4c43523cba16.roa (raw, json)
Hash identifier:          2TPUMqT/DHxpb8Cetwkj5UQ9iG5mAmvTr2au/0np8Gw=
Subject key identifier:   02:7B:A3:80:D3:8E:58:4D:A8:8C:B1:1A:1A:A3:9E:40:B3:46:B5:44
Certificate issuer:       /CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
Certificate serial:       010D0C9F4328584CB981C7598D744CD21B147BB8
Authority key identifier: 1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/a0907581-3265-3db1-ac61-4c43523cba16.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        141.206.200.0/24 maxlen: 24
                          141.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c7:59:8d:74:4c:d2:1b:14:7b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa27be3e-5663-4196-bb8a-966e8a6bf571
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=2e447cc5-e7e1-4c77-b776-28eb6c0aee99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:ec:22:be:10:6a:a4:ed:ed:43:15:61:8e:
                    d1:87:35:e0:45:05:4b:bd:91:4a:0f:16:dc:db:55:
                    78:f2:74:9e:62:04:da:c4:a5:59:17:80:9d:be:63:
                    e8:1c:65:18:3f:1e:15:16:60:33:d8:19:c9:75:ae:
                    9c:a9:fa:f8:dd:3e:d1:c3:b6:01:13:b0:14:f9:0e:
                    26:ea:85:3d:ad:51:18:73:4f:1f:f8:b3:f5:bb:1d:
                    bb:7c:27:5c:77:ad:04:08:19:17:1a:e8:b1:d4:5c:
                    41:ad:2a:ff:99:9d:b4:05:e9:6c:42:5f:5e:a4:ef:
                    df:f0:ff:f3:4b:41:be:55:98:28:68:7c:90:76:fb:
                    0d:17:81:ca:20:78:f9:72:c7:0a:8c:bd:fb:11:cb:
                    3a:0d:8e:0f:d5:11:85:54:af:9c:ac:ad:75:19:54:
                    76:8e:91:39:c2:21:1e:f3:ef:c9:10:9a:d7:e0:da:
                    55:ff:bf:a1:c9:03:ec:35:92:03:7b:4b:8f:e1:47:
                    d7:5c:49:29:c3:27:17:17:c4:36:2f:f9:cf:3b:2e:
                    74:71:37:cd:bc:ff:97:9c:f9:af:b4:db:2e:ca:02:
                    58:9c:9d:b2:58:e2:e3:a3:ad:d1:eb:66:bc:ac:d6:
                    ec:2a:27:ed:c9:fb:2d:11:15:8e:76:09:ae:77:1e:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:A3:80:D3:8E:58:4D:A8:8C:B1:1A:1A:A3:9E:40:B3:46:B5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/a0907581-3265-3db1-ac61-4c43523cba16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571/aa27be3e-5663-4196-bb8a-966e8a6bf571.crl

            X509v3 Authority Key Identifier:
                keyid:1B:90:85:AE:E9:17:7D:6D:3A:CD:63:21:A5:87:E5:B8:09:76:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa27be3e-5663-4196-bb8a-966e8a6bf571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.206.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:69:82:f7:a4:a4:96:cf:8d:82:57:4b:01:02:8f:9d:c2:a4:
         08:93:d1:35:7a:c4:bd:70:cc:1b:8f:59:f4:3a:e8:42:8f:a7:
         6e:56:52:d0:fc:92:6c:2e:7a:0e:14:30:01:70:5d:fa:67:1b:
         04:76:0c:70:b9:0d:ee:7c:58:85:7b:cb:81:a6:ae:3b:d1:f7:
         df:3a:08:36:db:6c:bd:de:ad:70:d7:27:4c:5c:77:f5:ef:57:
         9c:45:81:29:da:c2:fb:6b:ad:6a:58:78:e9:0c:73:f1:94:a6:
         68:0a:a8:e8:48:b4:41:d4:b3:13:2b:15:08:a2:5e:cc:11:ec:
         bb:79:9c:87:f6:f5:ed:a1:fc:85:f6:0a:13:79:ef:14:30:23:
         b5:58:47:d7:f1:09:d7:ad:0d:71:dd:f6:a5:a0:44:d4:1d:67:
         92:53:e9:d7:df:a8:4f:b7:2d:fa:d1:d1:fa:3a:23:18:69:42:
         c7:43:6f:f9:5b:70:cb:2a:87:f9:97:be:f4:22:17:c5:4f:e2:
         63:94:33:b9:dc:d2:1c:7a:4a:92:bd:16:42:ee:71:e5:64:ef:
         94:13:8a:eb:b7:01:1a:7b:9a:94:33:4d:dd:99:6e:7f:71:94:
         ed:c0:fb:2b:e1:21:05:b6:3e:84:56:24:ba:d6:65:4a:b3:0a:
         b6:2b:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:54 2026 by rpki-client