Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
File:                     a880d51c-6851-39e3-bdb9-911f86ebabaa.roa (raw, json)
Hash identifier:          B5pCJFT9NKDHQubAJcQ+4AowCFol4RgEJTckyjREjKk=
Subject key identifier:   FA:3A:E2:64:E4:79:DB:C0:AB:E7:6C:76:20:F2:BC:97:F3:7C:8F:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C928F3BA2016596FCB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        209.158.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c9:28:f3:ba:20:16:59:6f:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=2b2d8f6e-de50-404c-9f75-cea63abce322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:06:e2:3a:79:88:ac:11:40:b8:01:a1:f8:
                    c5:4a:0b:42:13:47:54:36:4a:90:6a:eb:42:88:c0:
                    40:79:5c:8b:f0:49:47:78:5f:c1:69:de:ec:dd:ee:
                    7f:5a:7f:23:72:69:3f:a7:31:a6:31:49:85:32:87:
                    8d:f3:18:95:34:87:4c:e8:a5:8a:11:0a:88:c9:e5:
                    08:9c:9a:66:84:a7:ae:15:67:91:2d:71:f3:cf:8c:
                    50:03:67:ea:92:db:6e:72:60:7c:70:c9:33:0e:10:
                    8e:64:b4:b5:42:8f:d1:bb:86:e4:3f:cd:7e:4e:56:
                    92:91:b4:18:05:1d:e0:cf:40:6b:61:e6:5d:fd:e1:
                    93:61:6f:d0:4d:00:bc:c4:b5:66:f1:3d:7f:cc:7f:
                    98:7f:2d:a4:59:c8:88:75:db:3c:79:ac:17:19:32:
                    8b:80:c8:82:67:77:31:32:03:b3:81:a5:42:62:ba:
                    ce:49:97:d0:ab:54:f9:0d:c6:04:f1:9b:7d:b5:74:
                    d2:ca:e1:c9:01:1b:e8:13:44:25:df:e4:a7:d4:03:
                    38:51:a9:90:f6:4c:fd:a7:d7:cf:fd:54:d9:3f:dd:
                    f0:16:c3:91:c6:78:43:be:59:d2:02:c2:df:b1:f6:
                    f0:f2:f3:66:13:dd:7a:88:79:f5:ac:66:be:d9:ca:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:E2:64:E4:79:DB:C0:AB:E7:6C:76:20:F2:BC:97:F3:7C:8F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a880d51c-6851-39e3-bdb9-911f86ebabaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:20:ac:bc:41:33:f7:01:3b:31:49:30:f4:a8:38:aa:16:
         cb:fb:30:89:1d:db:4b:f6:0d:0b:e8:68:bf:c7:04:f6:e0:d7:
         c3:7e:5b:8d:c3:87:b5:59:dc:97:cc:66:5c:31:3d:c6:0b:0f:
         4c:43:b0:27:4b:f7:8b:ec:26:8d:07:16:47:b7:11:b0:cf:0f:
         d0:52:e4:7a:bb:74:30:34:03:f5:43:bc:c2:7d:98:d0:ec:7f:
         6e:a0:3a:76:1c:10:35:22:13:79:75:0e:c8:76:c8:62:bf:46:
         3c:42:a9:5f:fe:61:67:fc:5e:d8:89:6b:bf:8f:0b:cd:b5:13:
         ee:24:b9:69:fc:89:70:d0:ae:bf:33:72:7f:66:ff:a9:82:61:
         55:7a:38:15:4b:46:66:c3:f1:12:32:72:c9:92:73:2b:9b:c3:
         3e:a1:8f:45:11:2f:8d:7f:e8:f0:ee:dc:b2:69:04:73:43:ff:
         42:94:91:a4:19:96:77:62:06:b4:c1:92:e0:3b:38:1c:6c:ce:
         3c:6e:f0:88:fc:5a:c9:a9:df:2c:7d:8a:1c:d4:0a:ec:d9:c6:
         60:29:f4:5e:14:c4:15:0a:21:97:b1:3c:3e:32:b5:bf:65:99:
         5d:7d:56:cb:46:28:e5:91:97:4c:b4:c5:dd:82:ce:3a:b1:32:
         b6:49:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:27 2026 by rpki-client