Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
File:                     79569488-5c69-30a4-ba69-3e3e08449c39.roa (raw, json)
Hash identifier:          K5oBUlmPt/kQkfZ8grDh41xLB4ADwqp8mXjuRz1JnJ0=
Subject key identifier:   A3:1E:34:5D:69:EF:30:29:98:C6:48:54:E5:C0:03:32:88:F2:21:BB
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584CB551EC4C1987C5ABA609FE80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     36511
IP address blocks:        209.35.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:ec:4c:19:87:c5:ab:a6:09:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=73816917-09b1-4db0-bdf4-fa1df4924b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:03:03:b2:d5:b8:0d:d2:fe:03:35:52:8f:
                    c4:d7:59:7c:10:d8:d1:f1:a0:08:6d:34:25:2f:14:
                    98:bd:ad:a1:f4:3a:0c:f4:d0:6c:6d:71:31:11:e9:
                    fe:03:37:ef:33:b1:9f:15:79:e6:c7:a3:67:d6:5f:
                    70:92:d7:26:6d:a3:d4:ae:89:54:3f:98:59:d1:a0:
                    4b:a4:6b:d4:e3:db:45:d0:0d:15:b0:3c:06:e3:f6:
                    59:5c:fc:6b:c7:c5:26:94:16:e8:0a:55:39:3d:56:
                    52:69:07:c5:26:a9:f9:9d:88:f0:4c:cd:9d:9e:10:
                    54:1a:fb:12:9c:bd:d0:c2:ec:60:03:09:7f:89:2b:
                    d3:1f:72:be:83:c1:b8:62:60:e7:db:cf:1c:85:d4:
                    e3:bb:b2:30:ff:a8:29:22:1c:8a:12:97:4f:21:f5:
                    af:24:6f:fe:a8:d0:31:9b:85:14:3a:f6:d2:9a:77:
                    72:76:80:54:96:21:2b:3a:74:ca:7b:cf:74:f9:b9:
                    f2:51:48:4d:94:43:90:f6:1b:88:f8:b6:86:a6:68:
                    61:ab:3c:80:1d:b4:05:20:fa:98:2a:f1:c2:51:4d:
                    85:a8:d8:f7:3b:83:1c:ca:42:a5:55:0c:89:a5:ee:
                    ca:8f:59:7c:9b:4c:8c:9e:e5:08:92:96:b4:85:df:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:34:5D:69:EF:30:29:98:C6:48:54:E5:C0:03:32:88:F2:21:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:83:5d:b7:f8:85:0c:79:00:77:91:82:a1:36:8a:a4:1e:
         ec:8f:b2:b5:6a:f0:19:39:cd:e1:65:f8:40:f4:ad:35:dc:36:
         06:a0:f3:cf:ea:97:fc:56:e5:8a:20:da:8e:60:05:81:61:44:
         fd:73:ac:c9:e0:ee:c8:63:5c:35:05:f7:2b:7b:31:f4:fd:5f:
         b3:71:c1:48:f2:20:6f:e5:fc:65:2a:a2:d5:e9:01:be:f0:b3:
         9e:ce:73:1b:0f:63:26:ee:bc:65:50:ac:bd:3a:ef:28:6a:52:
         65:5c:f7:9b:a0:32:e8:b4:79:05:6a:0e:6d:9c:a2:ca:6f:b9:
         28:15:5e:bc:bb:ab:73:dc:bf:ec:ea:ef:cd:ba:f6:aa:e0:06:
         a0:77:3c:95:e1:c9:17:31:49:cd:b9:26:32:44:63:fc:c8:bc:
         01:8c:c0:2f:14:21:36:e3:67:92:29:70:14:8c:e8:45:45:d7:
         09:e4:d5:6e:40:f1:32:25:fa:d4:0e:10:33:b3:4d:c9:42:37:
         ec:08:74:f9:bb:0a:d2:f1:02:49:ba:27:e9:95:97:2b:bd:bb:
         34:b6:e1:30:35:58:81:62:e7:53:0c:fc:09:6c:f1:e7:a3:f8:
         59:b2:cf:a5:06:e4:b7:a3:e2:f0:65:4e:ab:23:a7:11:ac:cd:
         70:0f:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 20:26:40 2026 by rpki-client