Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
File:                     c243a375-2e4b-3391-8643-ce860578a4b0.roa (raw, json)
Hash identifier:          GctZPgI9dDmWPcrd4GXQwMfPJHNeP3fCcL1wFMscbzA=
Subject key identifier:   82:CB:62:9F:DE:00:FD:78:88:4C:8A:14:86:0F:2B:00:F8:BD:5E:25
Certificate issuer:       /CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
Certificate serial:       010D0C9F4328584CBF172790AB7983A1148B3AA0
Authority key identifier: 38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     18632
IP address blocks:        104.200.192.0/20 maxlen: 24
                          107.182.32.0/20 maxlen: 24
                          170.75.128.0/20 maxlen: 24
                          2604:3600::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:27:90:ab:79:83:a1:14:8b:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a353a9-2093-4564-ac5e-6dc9e39bec1b
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=6a278285-1324-4afd-a3af-9d596d4cbda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:28:51:eb:8e:c3:a5:b6:12:80:8a:99:9a:
                    31:b0:65:0b:bd:d9:a3:40:14:3a:e3:67:45:88:06:
                    c3:1d:10:51:43:17:71:d1:0c:8e:6a:03:04:1b:d0:
                    4a:1d:67:24:0c:7c:22:f3:6e:17:df:c8:31:e3:0b:
                    3a:d6:16:b0:47:d5:54:8d:43:bf:45:a3:e1:4e:95:
                    62:e2:5b:28:98:82:18:87:b5:4e:d1:a7:69:6c:a9:
                    3e:47:af:20:ce:71:1b:d2:94:0f:71:37:71:8c:e1:
                    f0:6f:a8:3c:c3:8f:24:de:3b:a9:47:f0:e8:f2:74:
                    37:55:8f:35:67:40:15:0d:14:23:91:3f:66:f3:18:
                    01:3a:2d:3b:19:f4:e7:05:a4:25:f5:21:81:98:93:
                    06:61:20:79:77:92:5c:c5:cc:c7:e8:38:59:7b:c6:
                    42:d8:99:d7:0c:8b:bb:30:22:fa:11:1e:29:74:9b:
                    4f:a0:5f:47:27:11:53:5e:18:46:e8:a0:14:48:26:
                    28:76:68:93:39:33:a2:0a:9c:c9:9a:af:90:17:0e:
                    8a:0d:3e:00:e4:fe:28:d3:9a:5e:ed:3d:0d:88:59:
                    7f:d0:ce:e2:7b:0a:79:bc:49:60:dc:7d:0d:4a:40:
                    10:ce:ea:95:d5:c4:dc:e1:2a:c3:77:f3:9d:a6:92:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:62:9F:DE:00:FD:78:88:4C:8A:14:86:0F:2B:00:F8:BD:5E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/c243a375-2e4b-3391-8643-ce860578a4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b/39a353a9-2093-4564-ac5e-6dc9e39bec1b.crl

            X509v3 Authority Key Identifier:
                keyid:38:03:E4:99:59:64:B8:D4:EF:E1:7A:D5:E0:91:DB:2A:9F:44:72:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39a353a9-2093-4564-ac5e-6dc9e39bec1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.192.0/20
                  107.182.32.0/20
                  170.75.128.0/20
                IPv6:
                  2604:3600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:37:9d:42:38:2f:4b:4e:21:2b:39:e5:39:d7:8e:4d:40:
         fb:8c:a5:8c:09:7c:39:eb:de:9c:a7:f3:51:43:f5:d3:10:7b:
         28:8f:b9:c1:94:d5:15:37:06:39:ff:47:1c:4b:70:32:20:ef:
         75:5a:b6:c7:f4:20:d7:78:79:7e:d0:f7:e3:8b:6e:4c:a7:6d:
         69:d6:aa:fc:05:d9:a8:7e:b0:54:37:69:63:d3:b0:25:01:9f:
         04:d2:b1:ad:ed:ad:3a:d2:a2:57:e3:8e:82:2e:b6:6f:1d:3e:
         2e:01:92:32:02:f3:86:54:c9:3f:8b:ba:04:31:f4:2d:37:b1:
         ca:65:8f:43:ca:69:4a:2b:a1:72:8e:b0:5b:2b:14:b0:f4:ce:
         25:73:44:aa:70:14:e7:c6:7a:9d:2d:8a:01:99:ab:aa:25:1a:
         1a:01:57:25:b8:4b:f1:1b:61:62:14:35:04:fb:b5:f1:87:f8:
         0f:fd:08:c3:b3:b0:ee:aa:f2:06:03:fb:8a:f4:20:81:d1:c8:
         70:b4:03:05:dd:3c:37:46:b9:1e:32:8b:96:19:af:c7:92:48:
         aa:b1:64:85:99:b5:cf:9a:37:43:02:d6:1f:eb:12:33:1b:2a:
         a3:28:b4:5e:d6:f4:15:7f:d7:71:08:45:1a:82:79:c9:fa:52:
         b0:00:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:44:17 2026 by rpki-client