Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa
File:                     86fce722-1195-3dd1-a539-d8a16d741530.roa (raw, json)
Hash identifier:          ZvVZ/tlFTGuemTykvVsm4L0KDLNfgpPaRtZr8GAeKPE=
Subject key identifier:   81:D8:8E:93:5C:82:1A:40:E2:44:EE:5B:55:38:50:91:9A:44:F7:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CFE3E3E8AB21551EE706ED070
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa
Signing time:             Thu 26 Feb 2026 16:55:22 +0000
ROA not before:           Thu 26 Feb 2026 16:55:22 +0000
ROA not after:            Wed 27 May 2026 15:55:22 +0000
asID:                     577
IP address blocks:        142.134.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:3e:3e:8a:b2:15:51:ee:70:6e:d0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Feb 26 16:55:22 2026 GMT
            Not After : May 27 15:55:22 2026 GMT
        Subject: CN=181cffec-612b-459d-879a-1d5c033250f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:3f:3d:94:53:db:db:02:a7:86:5d:62:55:
                    93:1c:fb:fa:93:f4:ea:b8:d9:82:66:d1:de:2d:58:
                    f3:c7:1d:67:8c:0c:af:4a:ec:2d:36:82:b7:d0:fd:
                    00:d3:50:a9:53:e1:09:23:dd:9f:bd:3c:fa:9f:c4:
                    70:b9:d0:ad:5e:be:21:05:b1:27:6c:05:09:62:1e:
                    b6:d5:9d:23:81:a8:ba:0f:05:d5:4f:86:af:db:3c:
                    d9:0a:ee:7c:0c:b7:e7:cb:f3:e4:a1:f7:08:67:54:
                    f4:55:e1:18:89:b8:f0:5f:18:a2:82:ef:90:c5:a1:
                    4c:c5:1c:48:22:76:63:7c:24:f7:57:14:90:fd:d5:
                    52:9f:97:e1:3b:32:d2:fe:8a:23:9f:0a:87:37:4e:
                    9f:a9:4b:2f:9b:10:2b:07:0d:72:fd:30:b0:d6:fb:
                    a2:f8:47:12:f6:22:38:d7:0c:1d:1d:07:19:f2:54:
                    66:d9:56:6e:28:95:43:00:6f:e2:f2:e9:4b:5b:9f:
                    35:cf:09:e3:ff:94:4d:ff:a2:80:d6:82:51:f3:7b:
                    1b:80:4e:85:a6:86:56:14:ce:5e:9e:d5:15:21:b7:
                    db:4c:c6:e3:2e:50:da:0a:66:37:17:af:b9:b0:84:
                    06:4f:e2:e5:1c:28:f3:78:fb:bc:6d:fa:ae:e3:96:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D8:8E:93:5C:82:1A:40:E2:44:EE:5B:55:38:50:91:9A:44:F7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86fce722-1195-3dd1-a539-d8a16d741530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:96:6c:f2:12:77:d6:e7:9c:37:fc:8c:79:83:09:b0:0a:
         fa:2b:28:84:c9:37:9f:b3:47:48:8a:d6:e8:c1:b4:97:81:b5:
         ec:1e:86:af:c6:60:4d:3c:04:d8:cb:32:2e:6e:a7:b3:89:73:
         61:3d:e8:5d:a6:9e:34:8d:1b:e9:b5:94:ad:c4:e3:c7:d8:a8:
         c1:49:d1:3e:f2:62:06:63:37:15:ce:d9:a4:7b:5e:7e:e1:2a:
         68:eb:bb:6f:1f:39:67:2a:cb:89:31:5a:d6:e9:61:4e:9b:9c:
         47:9d:9e:47:95:60:0c:07:4f:ec:c1:fc:bc:2b:c9:fe:d4:09:
         ea:d3:3d:6f:c7:b4:a1:02:3f:c5:ed:27:34:8e:1e:4a:d8:6a:
         8a:94:95:22:00:26:f2:7e:d4:10:b2:08:89:1c:10:8c:0b:a2:
         e4:5e:f7:a9:5b:40:ff:20:b0:f7:b8:d0:ec:14:32:21:2c:e6:
         87:74:0a:e1:d4:7e:d7:3b:6e:4e:f7:9b:41:7f:d2:2d:35:72:
         ba:5a:ab:ea:33:96:81:fe:21:5e:0c:70:05:e0:cc:51:50:a0:
         0f:89:b3:ad:67:11:5a:32:44:b2:5a:6d:f9:48:81:d2:51:ec:
         5f:bf:f7:d9:5b:d8:e5:c0:6f:3b:9c:a7:e7:8a:6b:a7:44:e6:
         6d:64:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 04:48:19 2026 by rpki-client