Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa
File:                     f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa (raw, json)
Hash identifier:          VxxUr6qS5TAG0NdGVT7CAteFtApb5Buha3If3Adldrs=
Subject key identifier:   37:A6:06:14:B0:E5:96:73:98:F4:E6:64:8C:10:E0:1E:59:F5:57:4C
Certificate issuer:       /CN=d081b175-bc36-4a39-834f-2dd55d6265ad
Certificate serial:       010D0C9F4328584D07ACED88691D5584F3F6AF00
Authority key identifier: F3:95:91:9B:24:F5:BA:35:1A:EB:A4:6B:98:51:CB:A2:4B:B9:2F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     14120
IP address blocks:        205.147.0.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ed:88:69:1d:55:84:f3:f6:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d081b175-bc36-4a39-834f-2dd55d6265ad
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=d484dfb8-f317-4bf8-985d-d8728d09d0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:c7:47:b7:34:a9:48:79:b3:41:2c:af:8e:
                    d8:8e:df:7d:69:08:77:8c:04:07:a6:5a:d6:b2:c7:
                    37:48:fd:98:aa:4c:38:66:f4:16:93:45:78:2b:f8:
                    8c:96:08:69:7e:1f:f5:b0:a3:e7:9d:35:72:b9:02:
                    10:23:34:d0:fb:6c:57:c5:91:93:88:37:b8:06:44:
                    ad:81:51:e1:cb:d2:2b:fb:5e:95:18:7d:69:e0:15:
                    ce:27:d2:19:1a:6d:5a:78:c2:39:e3:ee:99:63:ff:
                    7d:3a:6a:74:1e:91:19:8b:38:18:17:dc:4b:73:b8:
                    bc:10:9f:fe:b0:3c:c7:9f:2a:02:bd:20:d7:8e:be:
                    fb:07:9b:67:8b:f9:21:59:21:bd:9c:0c:8f:8d:26:
                    c8:9f:f9:c4:e0:57:1e:bd:0c:5f:4a:d6:ba:a3:4d:
                    c5:37:8d:45:0f:2f:47:a4:af:e2:e7:71:38:54:7d:
                    31:89:b6:58:55:9f:4c:27:29:0f:2e:43:a9:78:0a:
                    cb:5e:fb:4d:56:b1:7f:dc:d1:3d:83:50:46:df:ab:
                    59:6e:88:ef:f5:cd:da:58:b9:ba:74:70:5b:db:6a:
                    13:ad:1b:2e:61:06:34:39:37:66:50:6a:da:f7:73:
                    1b:f4:24:dd:d2:5b:9e:28:e3:92:53:d0:68:bf:a6:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:06:14:B0:E5:96:73:98:F4:E6:64:8C:10:E0:1E:59:F5:57:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.crl

            X509v3 Authority Key Identifier:
                keyid:F3:95:91:9B:24:F5:BA:35:1A:EB:A4:6B:98:51:CB:A2:4B:B9:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:16:9a:21:66:be:24:08:a9:8e:6b:65:1e:3f:b3:88:43:5c:
         ae:94:50:a4:7e:25:6c:18:c2:aa:c4:0d:71:54:18:e1:87:65:
         f8:f1:bc:5b:54:45:42:51:14:37:a1:dc:24:5c:bc:ca:6e:e9:
         42:39:84:9c:f0:63:c3:45:78:bb:c3:87:aa:aa:cb:29:5e:7a:
         da:ad:fd:53:62:9c:c9:f8:6e:e1:6d:d9:27:13:e6:54:de:5c:
         bc:bc:70:d8:46:88:ba:80:12:6e:06:f4:b7:28:4f:a7:86:05:
         fa:b8:36:95:12:14:a7:14:b3:73:7b:4a:27:a5:61:53:03:09:
         31:75:11:48:13:56:d3:3f:d6:c2:8a:cc:88:9e:9f:38:17:e2:
         e2:f9:ac:74:58:2c:84:3e:50:b6:19:df:f4:b8:57:df:31:44:
         f1:be:89:0a:fd:ba:c5:1e:69:55:e0:bb:cc:b9:20:9a:0b:38:
         03:fb:1e:dc:d2:99:9a:ad:a7:f0:4b:34:5e:8d:fc:7c:e6:f5:
         ff:b3:d5:86:7a:fa:e5:b2:fb:c8:d1:02:3f:38:2e:40:32:6c:
         7d:df:12:c0:af:02:6e:4e:77:4b:75:bc:47:4c:80:e5:38:35:
         82:d5:67:bc:b8:c0:43:c8:3e:f5:f8:de:1f:30:e5:f8:8d:19:
         76:f7:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:48 2026 by rpki-client