Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/218c1628-c1d8-3648-b652-31c608efe33a.roa
File:                     218c1628-c1d8-3648-b652-31c608efe33a.roa (raw, json)
Hash identifier:          FgDT8VC7AcofflLj7EIxiDF/hOfUlyRNa+TLiY+VJGQ=
Subject key identifier:   52:95:31:5D:A3:E6:80:DB:2E:08:EE:E5:B3:D3:3F:36:09:CE:44:86
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584CFBD669164EF28F23A8FF1184
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/218c1628-c1d8-3648-b652-31c608efe33a.roa
Signing time:             Wed 25 Feb 2026 20:14:33 +0000
ROA not before:           Wed 25 Feb 2026 20:14:33 +0000
ROA not after:            Tue 26 May 2026 19:14:33 +0000
asID:                     30705
IP address blocks:        216.57.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:d6:69:16:4e:f2:8f:23:a8:ff:11:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: Feb 25 20:14:33 2026 GMT
            Not After : May 26 19:14:33 2026 GMT
        Subject: CN=4f57d7b0-282b-4c72-86d7-b8f4ff7c5e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:43:9f:26:fc:00:b6:ca:c9:ae:3e:6f:74:
                    8b:04:de:e9:64:8c:e9:5d:ab:9b:30:7c:e6:68:99:
                    76:0c:13:32:c7:6f:01:b4:fb:70:d1:0c:70:65:39:
                    a7:16:78:52:e1:9a:ef:34:9b:72:91:63:d9:68:45:
                    8e:f9:20:2c:a4:d3:5f:ab:65:9e:92:ca:4e:13:64:
                    16:5c:a2:86:29:00:ae:b3:67:7f:84:36:26:4f:9b:
                    26:e1:6e:df:d2:36:11:0c:ac:d0:a3:bf:ec:6a:d8:
                    88:52:fc:19:bc:72:72:f4:45:2c:97:e2:e0:70:d5:
                    f3:48:3b:4a:59:c0:fa:8e:86:e9:8e:e1:6e:b0:39:
                    07:14:db:9b:55:13:78:04:78:56:fc:db:6d:fd:66:
                    43:12:9e:21:a4:c5:fc:0b:4b:36:5a:46:44:81:0a:
                    4b:25:b7:33:c3:0a:a8:f4:bd:e6:d2:ff:b0:ee:f0:
                    cc:af:72:46:58:ed:e7:1e:f3:d6:f7:4b:ac:af:50:
                    a3:aa:e0:11:b6:ed:5f:ad:15:2f:73:ef:f9:88:e7:
                    26:2d:f1:fa:da:ed:ad:8e:2a:34:36:da:8c:12:14:
                    0e:38:ca:4c:27:0c:87:73:85:d8:f1:dc:49:98:55:
                    0a:8d:b7:2c:9d:97:5e:6c:8f:56:eb:3a:9f:a8:e6:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:31:5D:A3:E6:80:DB:2E:08:EE:E5:B3:D3:3F:36:09:CE:44:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/218c1628-c1d8-3648-b652-31c608efe33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.57.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:0c:e5:ac:2a:2c:a2:c6:84:5b:2f:a4:14:0d:68:1d:96:
         2a:0f:17:ac:f1:68:ae:8e:76:44:ac:ac:2c:bf:0d:d1:8c:99:
         fe:61:8d:15:79:36:65:46:ff:cb:1f:0f:8e:c4:e1:6d:58:17:
         61:4f:02:4d:c8:f6:b3:09:92:83:d8:e3:9a:29:44:b6:f6:4a:
         30:e7:85:55:5a:00:1d:03:3f:9b:1c:b0:29:74:8d:27:61:e5:
         08:c1:2c:5b:b1:99:d2:53:63:85:6c:7f:5e:44:e1:b1:d3:9a:
         a3:38:52:24:e3:1a:34:31:24:6a:7d:36:f7:03:6b:d7:9c:04:
         a8:93:74:2d:e5:fe:1c:33:ac:79:59:86:76:3b:de:58:ac:48:
         fa:0a:c5:10:e2:50:e0:24:53:eb:80:61:f5:7e:49:d4:14:58:
         b3:3d:d0:04:ef:28:33:f3:1d:53:d8:e2:41:e5:71:73:3c:73:
         51:79:6b:a2:e6:bf:4d:57:a7:ad:8c:f3:67:a0:62:35:c8:6f:
         6f:7a:7a:ab:d8:d1:07:7a:da:c8:51:95:1f:af:fd:05:bf:09:
         bc:f6:7a:b8:dd:68:fe:0e:c3:0e:09:20:ab:16:df:54:6b:5e:
         92:ac:d6:59:73:86:2a:c4:1b:c9:3f:4c:57:7c:c4:1c:4c:7b:
         43:0d:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:15 2026 by rpki-client