Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa
File:                     a01a7685-6174-3d67-828b-f6987652b9fd.roa (raw, json)
Hash identifier:          5ogtDD0/tBELzShPqlJ8Tq30jEu/5Gml96YsM36jyEI=
Subject key identifier:   38:66:8A:AF:1C:F7:D3:9A:24:77:B6:5B:9A:CB:FE:8F:7D:95:76:EB
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584CE8F76FD98118C434081F5180
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     2153
IP address blocks:        209.129.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6f:d9:81:18:c4:34:08:1f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=4a0c6270-4cb7-4b9e-a050-d5a6263ae0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:0e:9c:c7:18:73:6e:e5:cb:45:b2:62:bd:
                    44:53:fd:5f:ae:02:eb:30:5b:88:c1:d1:0a:d9:6f:
                    0a:46:cb:29:1a:0a:76:33:09:0a:39:bf:f9:a0:9c:
                    46:8c:dc:25:ef:42:3a:cf:a9:9f:a3:01:a3:fc:68:
                    b8:b9:5b:d8:df:23:e6:f4:3e:28:d2:e5:86:5a:8a:
                    85:a9:d6:18:a6:42:03:5b:f8:b1:1d:0b:ab:f7:cd:
                    55:84:b9:85:84:b0:b3:5e:2f:30:5b:5a:21:67:2a:
                    38:fd:01:26:fe:fb:7e:bc:fa:f9:3f:60:39:e5:50:
                    cd:f4:15:94:c9:22:ed:e5:cb:e9:f2:fb:82:21:da:
                    33:58:c8:a6:3c:38:c4:eb:a7:7b:65:b8:db:a3:66:
                    ba:6b:e4:3b:c2:34:55:a8:19:6c:de:07:f6:5e:c8:
                    ba:00:ce:51:70:78:ea:83:25:c8:b0:78:0e:48:7a:
                    a0:1f:38:9e:40:f2:a0:e0:fe:b2:dd:2d:02:72:f3:
                    b2:a5:1d:31:37:f8:df:4d:ac:4a:93:75:0c:33:0b:
                    8d:99:f9:66:e0:18:2f:c6:4d:bc:d1:57:b4:2e:05:
                    c1:cb:8e:7b:5f:00:7f:34:49:30:4d:c0:9b:86:77:
                    e2:69:64:1b:af:06:41:32:02:d1:2f:4b:ab:b5:5a:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:66:8A:AF:1C:F7:D3:9A:24:77:B6:5B:9A:CB:FE:8F:7D:95:76:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.129.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:9f:33:4d:58:9d:eb:c6:67:f6:5a:9e:4e:17:45:66:dd:
         08:6e:c4:3a:32:e9:cb:c4:d7:f3:6e:85:15:6d:7c:42:06:dd:
         cc:fc:7d:15:ca:16:5d:b5:6f:6b:d5:4b:7a:30:ea:4b:9b:09:
         4f:7b:95:c5:27:d8:37:c4:5e:8d:dd:51:9c:69:c9:ae:50:be:
         eb:60:25:87:cb:52:62:df:72:14:63:a4:c4:13:69:75:0e:59:
         0e:dc:7a:46:4a:76:df:fa:35:9f:b4:90:7c:70:6d:e6:cf:b2:
         1c:42:2c:3c:e8:98:47:4f:67:59:7c:38:2b:db:e6:13:83:6d:
         ee:68:4c:91:5b:ad:4f:e1:47:02:72:39:8d:0d:4b:9c:31:2c:
         dc:00:f3:e8:50:a3:e3:40:b2:7b:90:3a:e2:94:be:f4:6e:3f:
         6a:99:36:5a:e7:a0:2f:6d:53:5c:50:04:94:65:9f:7f:1c:44:
         28:b8:80:38:2f:d3:f6:bf:36:40:b0:0e:ae:7f:9d:4f:0c:7c:
         d1:15:cc:1c:53:83:85:19:d2:0c:73:10:0f:6a:c0:83:f2:55:
         0b:eb:f3:ed:1d:16:69:d9:e6:9f:91:9a:79:03:09:b5:25:d3:
         6b:b8:9b:ef:d3:18:91:a7:e0:df:09:14:83:ea:0c:64:41:4d:
         12:05:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:29:32 2026 by rpki-client