Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/de2ce146-061f-306b-81e8-41ee15ed11d5.roa
File:                     de2ce146-061f-306b-81e8-41ee15ed11d5.roa (raw, json)
Hash identifier:          5MWGMyUoPdlD1kGrP8zf4DiNtopkEcqZOUb2aAQp2DQ=
Subject key identifier:   C3:4A:67:CA:88:E1:AF:AD:DE:99:40:72:1F:02:0A:33:65:BC:4A:EF
Certificate issuer:       /CN=5a348919-c6b5-4a17-a245-3c048005ec29
Certificate serial:       010D0C9F4328584D07AD21284D8E09F32751A080
Authority key identifier: 2B:E3:84:02:17:C9:76:95:79:FA:F4:81:CD:87:DA:0C:29:34:9B:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/de2ce146-061f-306b-81e8-41ee15ed11d5.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     26080
IP address blocks:        162.211.240.0/21 maxlen: 24
                          198.169.96.0/22 maxlen: 24
                          2620:115:9000::/44 maxlen: 60
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/5a348919-c6b5-4a17-a245-3c048005ec29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/5a348919-c6b5-4a17-a245-3c048005ec29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:21:28:4d:8e:09:f3:27:51:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a348919-c6b5-4a17-a245-3c048005ec29
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=5e5ba391-edae-474c-8dc7-bd5672d9df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:a4:c5:be:17:6c:9d:c1:13:8e:c6:db:7c:
                    bc:99:e6:9e:6e:8f:69:d6:83:d5:5a:87:5f:6c:98:
                    59:30:e1:a7:b4:60:51:28:d2:48:46:3f:b9:a7:f9:
                    b1:e5:2e:a3:70:58:be:ab:cc:90:1d:84:39:a4:a9:
                    22:4f:14:1e:04:a4:1d:77:40:b4:00:9f:ca:62:38:
                    93:86:bd:05:97:4d:0c:90:8a:d0:9d:2f:a1:a0:a8:
                    61:d5:25:8f:31:3b:87:3e:8d:c8:9a:a0:9b:ba:6a:
                    f9:f4:8c:82:8c:b2:60:42:0d:55:ab:b4:57:cf:13:
                    55:09:45:78:b1:36:27:aa:f5:70:ca:85:84:f9:26:
                    3e:4c:37:05:c9:34:fe:62:f6:82:30:04:05:31:05:
                    06:f7:a5:be:26:7f:4a:50:bd:e9:9c:b5:4d:d1:4f:
                    54:c5:99:22:6a:30:d1:43:27:a1:f1:05:5f:08:23:
                    50:c0:ea:ad:59:c1:13:ac:f3:cc:bd:56:84:5a:b7:
                    5c:ca:92:ed:04:d0:33:6a:34:a7:8f:5b:36:68:ad:
                    2b:de:07:a0:d5:78:d4:b8:67:04:2b:9b:d7:1c:23:
                    29:7d:79:90:bb:f0:0f:ea:b1:74:a4:03:7e:a6:7f:
                    b4:4d:34:80:35:f1:5f:0e:8c:5b:61:cb:bd:80:f5:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:67:CA:88:E1:AF:AD:DE:99:40:72:1F:02:0A:33:65:BC:4A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/de2ce146-061f-306b-81e8-41ee15ed11d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/5a348919-c6b5-4a17-a245-3c048005ec29.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E3:84:02:17:C9:76:95:79:FA:F4:81:CD:87:DA:0C:29:34:9B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.240.0/21
                  198.169.96.0/22
                IPv6:
                  2620:115:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:e1:f7:bf:41:a5:18:f5:f7:48:e8:80:dd:51:61:c8:20:
         8f:36:7d:b2:af:cc:52:f3:57:a5:0e:07:87:bc:8a:ca:4a:b0:
         0b:01:59:5f:7f:44:3d:30:4c:3e:76:d2:86:3a:c5:03:f2:72:
         8a:4f:14:d2:5a:91:79:4f:dc:02:82:6d:c4:4a:5e:81:50:1a:
         d1:94:6e:96:8a:0d:e2:9e:47:1b:78:51:af:fd:48:a2:f9:c2:
         b4:ef:6f:74:43:1b:ea:91:5b:ac:86:1d:77:17:87:0f:d5:8f:
         b0:a6:3d:89:00:79:e9:28:43:b7:7f:f6:3e:77:71:4a:c7:16:
         b1:70:17:9f:84:af:dd:d9:3b:ba:ce:14:bb:37:a1:f9:3a:99:
         e5:d6:01:4c:f3:2f:7a:e5:f0:87:57:2f:9e:94:a6:40:4e:ad:
         11:e6:18:45:60:d7:f5:75:41:a7:d2:62:8b:9a:9b:f5:68:e8:
         c9:2c:87:dd:aa:5d:4f:e0:0a:52:ea:29:80:f9:4a:4d:d3:67:
         4c:21:f5:16:86:83:f8:be:75:d6:90:58:e6:aa:12:dc:80:8f:
         8b:77:7d:ab:7a:00:a2:d8:5a:a3:61:b4:2a:ff:d7:ee:32:8f:
         22:0f:79:5d:59:d4:06:c6:08:e9:90:37:ad:c6:ad:df:ed:b3:
         f7:0e:4b:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:24 2026 by rpki-client