Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/17a68e94-ab1b-3f13-91ef-7240d094934e.roa
File:                     17a68e94-ab1b-3f13-91ef-7240d094934e.roa (raw, json)
Hash identifier:          dygW2RkbzkYnk0ycNwSXQsirXqQHuEli36NWFJX/mWk=
Subject key identifier:   A2:95:23:04:94:A0:DF:6A:46:8F:0F:61:50:85:A9:62:8F:F6:F7:E0
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584CC571F77ABDDEF330BA4DFB80
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/17a68e94-ab1b-3f13-91ef-7240d094934e.roa
Signing time:             Fri 06 Feb 2026 08:38:31 +0000
ROA not before:           Fri 06 Feb 2026 08:38:31 +0000
ROA not after:            Thu 07 May 2026 07:38:31 +0000
asID:                     212238
IP address blocks:        104.243.214.0/24 maxlen: 24
                          104.243.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c5:71:f7:7a:bd:de:f3:30:ba:4d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb  6 08:38:31 2026 GMT
            Not After : May  7 07:38:31 2026 GMT
        Subject: CN=0f4c528c-b1cf-4d5f-805b-7c0a66951299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:77:ec:9b:e0:22:27:4f:4f:41:4d:08:2d:
                    53:d7:41:90:13:75:c5:d0:b5:06:47:e0:2e:bf:e9:
                    7a:d1:ca:fb:9c:c4:d7:f1:fd:8d:36:8f:5a:f3:6e:
                    31:98:12:f6:bb:9c:49:19:bc:40:28:bd:33:8c:24:
                    d5:63:39:cd:25:2f:86:32:7c:0d:62:fc:37:83:3e:
                    08:3b:25:c5:a1:9a:58:61:bc:7e:03:ad:d8:db:fd:
                    e9:98:7f:5a:15:b1:6c:f7:a6:a8:e5:03:c7:81:0f:
                    93:90:ac:f0:78:1e:df:08:1e:3c:95:c1:7b:1d:ed:
                    23:d3:3b:88:60:03:71:5b:04:88:be:5a:56:e4:1b:
                    83:ea:9d:55:df:cc:45:b1:99:4c:1d:80:cb:61:3a:
                    64:4b:41:36:ec:7c:cc:e6:42:33:69:86:4d:3c:2e:
                    3a:a3:30:6d:6a:96:98:79:7a:4b:e1:2f:fd:99:73:
                    77:d0:e9:96:96:60:8d:8b:c4:39:76:b2:6a:ca:8d:
                    56:02:45:13:6a:6d:cf:3e:6c:36:52:e5:42:0a:b6:
                    ff:d4:26:fd:fe:46:4d:49:8b:be:66:56:0e:8c:ea:
                    7a:31:e6:26:ca:4c:b0:e7:9a:e6:06:4d:48:99:c9:
                    f9:cf:01:c2:ad:15:02:1c:75:6c:2b:c6:65:c0:90:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:23:04:94:A0:DF:6A:46:8F:0F:61:50:85:A9:62:8F:F6:F7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/17a68e94-ab1b-3f13-91ef-7240d094934e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:a6:dc:bd:ec:b2:99:b9:6c:32:aa:95:15:6b:6e:83:55:
         ca:73:12:39:81:6c:8c:c1:3d:29:5e:ac:6f:3e:78:6f:2b:9b:
         59:ca:ea:ae:93:27:93:9f:7e:f8:00:7d:88:56:b4:a0:c4:c3:
         a9:5f:f1:40:23:60:0d:8a:74:08:66:cb:fc:b4:1b:e0:b9:28:
         66:08:e8:45:5b:13:1d:86:a4:65:44:89:b5:50:a6:48:a8:8a:
         0d:c5:75:e2:71:cf:3e:b5:fb:fc:a6:54:1e:0a:45:db:39:bc:
         11:82:26:99:f9:3c:76:8d:38:4d:35:f0:56:c2:41:59:d2:e0:
         57:01:c6:74:c8:ba:2c:14:4e:85:35:80:6f:61:b1:22:59:8d:
         cd:83:e9:9d:2f:e0:e1:9b:a4:b1:61:12:e1:86:b8:92:bb:f4:
         58:8a:f5:3e:7b:c8:77:e1:1e:c1:92:8d:82:bd:43:9c:ed:40:
         82:f8:35:69:33:73:7b:2f:b8:85:76:94:25:f3:83:18:cf:ae:
         22:32:b2:0b:6d:a6:69:48:51:83:08:07:8c:22:7a:7a:a5:c7:
         64:83:4c:8f:56:1d:e0:d9:98:68:62:a5:e6:0f:f6:b7:84:60:
         0c:37:2c:88:ac:83:63:7e:f6:ac:47:9d:db:b2:b9:20:07:17:
         56:7c:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:42 2026 by rpki-client