Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e0c98ab-e83b-3fd9-9209-b9e94a9a2a1f.roa
File:                     9e0c98ab-e83b-3fd9-9209-b9e94a9a2a1f.roa (raw, json)
Hash identifier:          vRuKKujZ+UdnPu+1cp4u3MFhW3EH7AI1STzELm6h93E=
Subject key identifier:   12:40:D4:35:11:04:7F:48:14:2F:D9:37:17:83:20:09:13:23:33:8F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8FCF1A62CD4CF708357CF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e0c98ab-e83b-3fd9-9209-b9e94a9a2a1f.roa
Signing time:             Thu 19 Feb 2026 02:11:50 +0000
ROA not before:           Thu 19 Feb 2026 02:11:50 +0000
ROA not after:            Wed 20 May 2026 01:11:50 +0000
asID:                     54253
IP address blocks:        151.104.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:fc:f1:a6:2c:d4:cf:70:83:57:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 19 02:11:50 2026 GMT
            Not After : May 20 01:11:50 2026 GMT
        Subject: CN=3f9c868c-375d-42c7-b98a-6817cb3bd796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:40:45:07:05:dc:44:e2:a9:0a:48:ef:52:
                    0b:6f:89:53:41:05:b4:97:6a:6f:f0:76:c5:d9:dc:
                    d1:24:5d:21:a5:14:a3:db:84:ff:45:4d:99:43:47:
                    5d:41:b3:c5:89:81:1c:c3:de:4e:e5:bf:79:4e:a7:
                    53:26:d2:0f:a8:c0:f5:ae:57:ea:82:70:ff:64:52:
                    19:d7:dd:fa:22:55:27:4e:62:4c:05:06:bf:27:2e:
                    1c:f8:37:3f:cc:e0:03:4b:71:63:12:ca:d8:52:fa:
                    81:23:3f:51:f5:7e:ca:3d:02:b4:4e:34:c7:23:b1:
                    3f:10:fb:a8:54:7c:d9:82:d3:15:7b:cd:c0:d2:ed:
                    a5:b8:5b:fc:66:d8:5c:8b:1f:32:52:77:20:86:ba:
                    1a:da:2a:0c:94:70:c9:2f:cb:f6:cb:0f:4b:72:72:
                    77:94:84:ea:e1:ef:a2:a2:77:2b:9a:82:b3:08:4a:
                    96:5f:ed:15:f1:f4:be:6f:49:68:94:e9:cb:2a:09:
                    04:10:af:94:46:09:b2:78:1f:6e:e1:ad:86:6a:c3:
                    f5:9d:14:f8:b2:1e:6d:09:c5:68:c8:82:7d:5b:e8:
                    0a:00:c9:25:8a:76:7e:99:55:af:96:e0:91:11:fa:
                    9f:09:e8:36:06:63:2b:52:a0:bd:4e:bf:0e:77:5f:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:40:D4:35:11:04:7F:48:14:2F:D9:37:17:83:20:09:13:23:33:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e0c98ab-e83b-3fd9-9209-b9e94a9a2a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:31:c9:ca:83:eb:53:63:18:bf:7a:de:4f:2f:9d:0e:64:20:
         be:c6:90:a9:da:b3:fd:d5:e9:71:83:44:cd:c7:c5:85:c7:95:
         41:f5:68:7d:1c:24:96:f6:ae:b4:69:85:eb:68:cc:e4:75:c5:
         31:c2:2c:b0:0a:59:23:89:3b:29:b2:83:25:0a:21:8b:cb:44:
         f9:4f:26:a9:64:40:4e:28:4c:07:89:cf:07:a3:f1:87:0b:13:
         69:02:0d:ac:7d:95:dc:d8:0c:9c:44:eb:cc:4b:6e:5b:68:b9:
         7d:01:7f:5a:4e:e8:3a:3a:3e:27:f9:48:fc:19:9a:12:d2:ce:
         ec:b6:3f:2f:c9:ed:19:53:d5:9e:94:63:ad:76:ee:19:de:bd:
         eb:62:ac:5e:b0:79:bf:59:cc:c6:4a:5a:0d:dd:f7:7e:3c:46:
         56:35:cb:76:1b:03:c7:a6:86:07:df:e8:87:9a:84:07:a4:c4:
         7a:1c:84:cc:0e:a4:fc:19:78:16:33:59:da:8e:1d:2b:fe:7e:
         9f:aa:17:8f:57:d3:93:4a:e1:aa:8f:4d:93:46:22:fa:b3:80:
         9f:27:12:de:43:b9:ca:5f:d3:51:dc:37:44:73:c7:b5:cc:f9:
         9a:a8:ff:46:55:ca:50:20:a4:8a:d9:8a:6c:3d:2f:64:e1:fe:
         7e:b7:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:30 2026 by rpki-client