Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa
File:                     69c67b71-5974-37b9-bc53-30d3e8af8ead.roa (raw, json)
Hash identifier:          OrImLKde4IqoieecMY1+wUJYEWkASYK+Hh3ohV5D3us=
Subject key identifier:   30:46:1B:49:1A:E5:52:1A:81:A5:9A:6C:56:E1:E8:63:D7:E1:05:34
Certificate issuer:       /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
Certificate serial:       010D0C9F4328584CE1F526E84D976D259B9A2920
Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa
Signing time:             Mon 16 Feb 2026 13:45:28 +0000
ROA not before:           Mon 16 Feb 2026 13:45:28 +0000
ROA not after:            Sun 17 May 2026 12:45:28 +0000
asID:                     31116
IP address blocks:        195.85.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:f5:26:e8:4d:97:6d:25:9b:9a:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51
        Validity
            Not Before: Feb 16 13:45:28 2026 GMT
            Not After : May 17 12:45:28 2026 GMT
        Subject: CN=a809c77c-5e3d-4ce2-ae36-ee2139d8a687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:3e:5c:5f:7b:8a:dd:53:38:8c:ac:e9:a2:
                    6a:60:b0:bf:f6:a8:9b:38:b1:13:e2:bd:a9:c8:24:
                    89:6f:33:34:93:67:4b:44:08:b9:b7:f7:90:9b:d1:
                    ef:4c:a2:8c:cf:6d:88:eb:0e:71:6f:d5:bf:75:3f:
                    a3:b3:62:48:0c:74:01:ac:cc:d5:e1:c1:b5:ad:55:
                    45:1e:d8:f5:6e:9f:e0:4c:92:52:98:33:da:10:bd:
                    ae:59:19:ad:2f:09:e2:25:51:75:b4:3c:e8:29:7b:
                    d5:65:05:25:5f:0b:e6:11:47:d2:83:c1:40:9e:b4:
                    8f:12:aa:36:c9:ce:ca:a5:09:8a:91:30:31:00:6b:
                    9a:d2:93:80:16:f6:10:67:45:c7:47:cb:28:7c:80:
                    e9:20:3e:39:59:c7:cf:7a:55:f9:72:53:88:e1:59:
                    96:cd:fe:94:2f:7b:bc:de:19:ea:51:af:b8:43:21:
                    a5:2a:5c:d6:3a:7f:77:ae:a0:cc:67:67:92:72:8b:
                    68:4a:48:60:32:fd:0d:09:f2:8a:ea:8b:fe:4e:41:
                    d3:33:f6:d2:8a:53:50:ac:f7:01:81:3f:e9:06:ce:
                    cc:c9:ca:1e:98:3b:f1:4b:a3:44:e2:a1:e1:28:46:
                    5f:66:3a:fb:54:b3:07:d8:61:bd:84:d8:eb:2c:e9:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:1B:49:1A:E5:52:1A:81:A5:9A:6C:56:E1:E8:63:D7:E1:05:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/69c67b71-5974-37b9-bc53-30d3e8af8ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl

            X509v3 Authority Key Identifier:
                keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:24:0f:a5:8c:93:d2:cc:9b:6d:44:aa:0a:d7:c3:7b:39:
         09:f9:30:aa:0a:49:61:73:ff:60:52:ef:bc:f4:a4:44:4d:de:
         ce:28:63:38:e4:84:80:d2:ca:53:4f:08:a7:78:e0:42:86:72:
         e5:c3:df:a7:c2:9d:6b:8e:5e:59:b1:fe:ad:6d:6c:e6:38:97:
         5c:25:56:51:1f:8d:9a:08:dc:fe:39:bb:32:37:50:a1:d2:52:
         77:c2:16:18:21:55:cc:28:be:ca:9c:8d:17:51:1f:fd:43:f9:
         9f:53:1a:f5:35:bd:08:31:da:59:05:2d:0a:df:de:a9:0a:64:
         1e:36:e1:14:f8:78:c7:f7:e2:9b:07:01:7d:2a:d6:ec:cb:ba:
         c9:1d:60:df:98:16:c5:49:7d:ab:b7:bc:3b:f7:82:10:10:5a:
         b4:e9:a4:9a:df:c7:78:7b:9b:76:f9:2f:36:e2:1a:dd:61:32:
         20:8d:15:63:d2:a5:0a:e0:c4:01:d7:83:1c:01:2a:f6:d2:9b:
         82:98:34:cd:e2:1f:6e:97:a8:19:c8:b0:bb:66:e3:f1:c7:43:
         0d:a5:cc:e4:5b:69:ae:99:3e:5a:89:02:a6:f5:43:d0:c6:c4:
         e2:2e:5a:2a:9a:c2:7d:7c:90:ab:ec:1c:56:33:69:3d:09:9a:
         fd:ba:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:04 2026 by rpki-client