Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
File:                     504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa (raw, json)
Hash identifier:          fV7ZVD83f1CT+0CUHjZYBrjUdCLspN5JAH591IpyjWY=
Subject key identifier:   18:FB:84:CE:56:41:01:09:B4:BB:2E:92:15:D9:8D:56:FE:0F:6C:54
Certificate issuer:       /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial:       010D0C9F4328584CBDB1E429760B07DBDCA8BFE0
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     36671
IP address blocks:        74.121.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e4:29:76:0b:07:db:dc:a8:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=777c7a94-a570-4ef5-b1da-6ac46fe6fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:12:78:6a:6c:02:aa:c2:3b:86:43:2f:68:
                    66:91:fc:4a:31:8d:8a:dd:21:fa:ff:1e:54:6d:61:
                    7b:d6:44:19:38:f4:bb:ca:a2:6b:e8:64:7f:1f:2d:
                    7b:9a:2e:75:52:e1:23:c7:a0:f3:fc:62:cc:e7:58:
                    42:69:4b:d1:9c:a5:f8:b9:17:9c:60:80:0d:d6:c2:
                    e7:37:2e:00:2a:7a:50:9b:90:b3:15:c3:ad:d4:cd:
                    12:1f:e0:2c:57:05:92:0b:01:21:3a:36:fb:bf:0c:
                    fc:eb:b4:5d:a0:d6:09:7f:67:b2:b0:21:34:3e:64:
                    07:5d:6a:07:aa:ce:4f:44:08:f4:a0:7c:80:2e:50:
                    48:8d:42:9d:87:94:d2:1b:5f:0d:de:14:0c:57:08:
                    15:2d:4b:99:bd:9b:12:4e:a1:1a:bb:8c:ef:87:56:
                    10:81:2c:f5:db:a8:8e:57:70:51:9f:b2:93:27:3c:
                    72:0d:62:f0:93:8b:f3:f5:89:76:0a:11:56:3d:c0:
                    1a:a3:b2:44:ed:dc:7c:28:dd:59:19:1a:12:85:4c:
                    59:e9:36:31:bb:3c:8a:ad:63:c7:ad:25:eb:35:f0:
                    f7:fd:b7:90:a1:0e:25:d2:db:88:6b:41:72:7f:08:
                    34:1a:07:9f:66:f4:b6:48:07:de:ad:99:ab:9b:3c:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:84:CE:56:41:01:09:B4:BB:2E:92:15:D9:8D:56:FE:0F:6C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/504f5f4a-ed8b-3b0b-a0f9-dbf9213e910e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:df:05:95:a8:1c:2f:c7:48:6f:4a:ce:8c:86:18:23:a0:62:
         c2:cf:98:9f:42:6e:aa:b1:f9:1d:c4:ed:37:41:e4:f1:18:9c:
         bc:e4:fa:5e:8d:d8:ac:f9:3b:99:e4:90:4e:21:df:35:18:79:
         f3:ff:47:80:88:36:37:c1:94:a0:01:05:c0:63:c2:07:c7:aa:
         18:38:87:26:4d:62:06:ca:84:1f:1a:c4:f4:29:bf:17:95:c5:
         ba:0a:a0:a0:f3:b8:71:89:2e:64:d6:48:2c:b4:4f:b4:f2:00:
         73:7a:0a:d2:13:e7:06:04:52:75:9f:da:a2:35:40:8c:96:e2:
         a5:2c:8d:25:59:d1:0a:f2:4e:c6:a1:da:ed:e4:8e:b5:4f:b7:
         3c:63:e7:25:e3:6d:1d:d8:6d:e1:09:95:cc:97:c6:41:f6:39:
         38:ff:30:f3:37:aa:dc:9a:a3:28:47:ab:f3:21:9f:f5:11:22:
         37:5c:bf:20:8a:7c:12:d1:a2:6e:64:ee:39:a6:94:cf:30:7d:
         5b:0c:4e:0d:c1:41:7f:60:a0:45:57:1b:ee:ee:51:2a:71:0d:
         2d:ca:ae:d3:a6:b2:56:3d:eb:35:21:42:ef:6e:0a:6d:19:72:
         1e:7e:0c:f9:76:d5:9e:0a:0e:71:a6:34:22:f1:2a:2d:aa:55:
         f2:3a:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:12:25 2026 by rpki-client