Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa
File:                     0f1dc560-0e65-3bed-bf76-a022358d677c.roa (raw, json)
Hash identifier:          C+ULMheR/AQP/8GWetfxHLoYZqaus5ceNmrgi18PJuQ=
Subject key identifier:   F7:D3:75:4D:B3:98:8F:ED:B7:87:0A:9C:29:85:26:AA:73:DD:3B:BF
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584CD74923F8EEA88DEDFAFFDE80
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa
Signing time:             Thu 12 Feb 2026 18:00:48 +0000
ROA not before:           Thu 12 Feb 2026 18:00:48 +0000
ROA not after:            Wed 13 May 2026 17:00:48 +0000
asID:                     63293
IP address blocks:        157.240.169.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d7:49:23:f8:ee:a8:8d:ed:fa:ff:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Feb 12 18:00:48 2026 GMT
            Not After : May 13 17:00:48 2026 GMT
        Subject: CN=6fe90a62-8ab1-4eb5-83ff-8fdc4dca05ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:8b:44:91:fa:84:4a:d7:34:f8:b1:68:2d:
                    82:d6:54:51:0c:8c:13:e0:00:d4:34:da:4b:50:46:
                    4b:1c:66:8d:06:f4:71:7b:c7:17:3d:5f:55:ab:1a:
                    9e:92:76:e1:68:c4:fb:0a:82:5f:0f:61:c2:10:c0:
                    a7:47:b4:35:83:3b:29:9e:ed:43:0f:fc:40:22:9c:
                    8c:c3:f3:d7:5e:49:d1:c5:81:e2:86:58:74:0a:66:
                    33:77:5c:27:3f:5f:90:43:b9:35:9e:c0:a2:e6:6c:
                    53:ae:67:bb:ba:a1:f5:77:11:72:e6:ae:70:f5:cf:
                    e7:cb:a9:50:fb:67:0c:cb:ce:4a:0c:04:4b:69:c6:
                    f2:b1:c7:7e:39:59:c5:e6:d9:27:b6:c5:33:5b:f1:
                    24:42:69:76:a0:15:0b:0a:26:26:be:49:e8:3c:3c:
                    cf:c0:a4:96:f5:63:2b:0c:88:32:b8:93:af:4e:22:
                    62:c1:2a:5e:d9:00:2b:e1:dd:78:c5:c2:83:c9:5b:
                    02:2f:5f:c1:1b:2b:dc:34:83:19:17:e3:95:be:73:
                    4c:83:94:81:22:72:58:ca:5f:31:cf:5f:d5:c8:c1:
                    83:d9:42:46:1a:0a:74:fb:b7:26:39:65:ea:36:1a:
                    40:e0:8d:6e:a2:88:e9:ea:09:bd:44:e8:aa:a3:af:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:75:4D:B3:98:8F:ED:B7:87:0A:9C:29:85:26:AA:73:DD:3B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.169.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:25:12:6e:7f:62:57:aa:05:f1:ec:c8:95:89:71:98:4a:
         ce:3d:e2:dd:d0:32:0e:32:3a:99:ac:4a:28:59:c1:10:f6:ca:
         dd:9f:9e:e5:44:6b:81:fb:2a:95:d0:9a:75:df:da:28:c5:c6:
         54:90:3f:56:83:98:c7:b8:a0:8b:5e:12:c7:49:ee:5e:ca:59:
         e2:9b:ee:f7:3d:be:5e:a5:00:5a:f3:42:85:96:ae:d2:7b:b9:
         7f:1c:a3:5b:82:20:08:40:c0:a7:70:b5:ee:a4:9c:58:ab:db:
         95:ba:25:dd:81:04:58:87:3b:13:fb:23:d3:4f:57:65:c2:2c:
         c1:9f:1f:5a:d2:76:4d:d7:b5:9d:aa:de:de:ca:ba:17:65:d4:
         98:1f:16:49:24:81:8b:ce:4a:02:ab:29:a4:b1:79:64:bd:eb:
         77:dd:cd:d2:d3:13:32:ce:bd:57:7f:a9:c7:e7:18:44:7f:5a:
         b9:28:9a:46:85:77:44:2e:52:a9:70:43:b6:be:c2:31:2f:4f:
         26:5d:73:57:07:72:be:08:19:a0:38:36:da:6b:54:84:a3:3e:
         24:3c:29:5b:e2:68:3f:5d:fb:69:a9:ea:c2:5c:8d:75:ef:cb:
         59:35:8a:69:f2:a3:a4:3e:ed:ec:29:e8:35:8c:e5:f2:2c:8f:
         19:1e:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:14 2026 by rpki-client