Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa
File:                     d17697b5-d0d8-3086-b4d3-493e42afafed.roa (raw, json)
Hash identifier:          GdhFikp1fdgl1ehas/nXJbqTGJeL9Oy4C4M4E/SeKjU=
Subject key identifier:   51:CE:B5:E7:16:F7:6D:2E:DB:CD:86:57:44:87:1B:3C:E0:6E:82:2B
Certificate issuer:       /CN=d473e375-fb2d-4dcb-888b-209cdbcba3f2
Certificate serial:       010D0C9F4328584CF8CE146B4EE477AB76048880
Authority key identifier: 68:1D:70:D0:D7:B4:1E:AE:23:DC:3B:4A:31:E1:B8:CD:20:21:70:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa
Signing time:             Tue 24 Feb 2026 18:10:20 +0000
ROA not before:           Tue 24 Feb 2026 18:10:20 +0000
ROA not after:            Mon 25 May 2026 17:10:20 +0000
asID:                     35850
IP address blocks:        206.108.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:ce:14:6b:4e:e4:77:ab:76:04:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d473e375-fb2d-4dcb-888b-209cdbcba3f2
        Validity
            Not Before: Feb 24 18:10:20 2026 GMT
            Not After : May 25 17:10:20 2026 GMT
        Subject: CN=7023a311-8cf1-40bd-afbd-56c24fd821cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:e0:e9:62:34:db:28:0f:01:c0:1c:f5:70:
                    e8:2f:a0:81:3f:6d:5a:b5:3a:b9:1d:02:8d:19:92:
                    2c:21:a7:ff:cf:5a:4b:b3:93:d6:f5:23:42:e8:9a:
                    da:b0:92:dd:73:45:93:28:66:c7:1a:27:a7:38:21:
                    9d:0f:cf:3c:4f:23:41:70:7b:bf:d2:65:1a:de:49:
                    a5:17:9a:86:48:b1:ef:65:c4:49:fc:4d:e5:4b:a7:
                    3f:80:10:f1:87:a7:a4:8a:dd:ba:71:16:e7:ea:25:
                    0f:b3:da:f9:ed:45:6b:69:11:46:77:86:c7:9f:62:
                    d7:78:28:ec:2b:83:2b:cc:51:c0:d7:8a:3b:e0:43:
                    1b:45:b8:8d:a6:16:fa:ea:9e:fc:58:5f:c4:5e:ba:
                    06:ac:76:c6:d5:72:02:21:f4:78:e3:03:99:89:8a:
                    57:fe:90:01:79:9c:5d:c1:04:f5:36:f0:4e:fa:84:
                    51:66:07:35:d5:27:a5:3a:21:1e:95:1b:c3:3e:a9:
                    dc:e6:cc:b1:fb:cc:5a:22:9d:f9:13:d6:d9:44:61:
                    fe:c1:b8:f8:f9:8f:be:4b:31:96:7e:78:2d:50:8a:
                    04:e1:2d:cf:34:80:95:aa:30:84:3d:12:3e:24:a9:
                    03:71:fd:12:f2:8d:a4:aa:11:6f:1e:b4:ac:68:0b:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CE:B5:E7:16:F7:6D:2E:DB:CD:86:57:44:87:1B:3C:E0:6E:82:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d17697b5-d0d8-3086-b4d3-493e42afafed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2/d473e375-fb2d-4dcb-888b-209cdbcba3f2.crl

            X509v3 Authority Key Identifier:
                keyid:68:1D:70:D0:D7:B4:1E:AE:23:DC:3B:4A:31:E1:B8:CD:20:21:70:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d473e375-fb2d-4dcb-888b-209cdbcba3f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:ee:ae:08:40:e1:d8:f9:b7:4b:fd:4c:ed:67:23:49:90:03:
         d2:b6:b2:c9:93:fa:ef:35:70:37:81:9e:4b:8a:57:08:7d:ea:
         00:de:87:67:b1:b5:50:a7:2c:95:0e:8e:3d:06:0c:1b:8a:8a:
         c5:7a:e4:8f:ba:33:0b:e5:26:77:01:80:c7:e5:26:9c:3c:ba:
         58:ae:4f:47:67:38:c8:d2:ef:89:55:05:15:77:45:26:08:24:
         ff:5f:ad:35:6c:89:f6:5d:80:8c:22:cd:82:d2:70:f2:b2:81:
         11:a4:e7:f6:a6:bf:a1:cd:b2:58:30:41:e6:2b:5d:2b:90:c4:
         70:62:41:ef:9b:78:ba:87:7d:67:fd:4c:b2:2f:a5:8c:40:08:
         b3:12:39:79:63:5b:da:c7:b6:55:94:75:21:04:cc:b4:ba:bc:
         c3:81:41:94:9b:c3:e5:75:e4:04:a3:35:72:85:b6:7c:74:e1:
         4b:fe:51:d9:dd:b1:ab:7b:7d:d8:b9:a5:ed:dd:a7:46:95:5a:
         f4:8b:46:92:a1:cc:3c:07:71:b2:e4:1c:af:c5:b3:d4:40:25:
         5b:9c:07:f2:e6:31:09:6c:6a:a6:b5:2c:2f:ad:20:b2:ed:b0:
         0b:ae:c1:fe:4d:c8:a9:d3:de:10:bc:2c:cd:7c:28:ab:37:38:
         ca:dc:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:08 2026 by rpki-client