Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa
File:                     4bfba0d7-8739-3f45-a18a-99f16f93e756.roa (raw, json)
Hash identifier:          DEXduyEY67UEZcU8tc8fl0f4TS18pDBd4yTSlFlTiRA=
Subject key identifier:   C0:DF:BB:5C:E6:C6:DA:09:A9:9E:85:67:12:CA:F3:E2:A2:E8:6B:13
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584CED27848251030F0DECEA26C0
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        149.23.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:84:82:51:03:0f:0d:ec:ea:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=4710f63a-afaa-4dfe-a272-518633718220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:1e:72:ea:af:63:c8:c4:ba:63:05:5d:05:
                    43:e7:fb:4a:fb:83:f3:6e:e3:45:1e:5c:f1:f7:02:
                    ec:f1:89:cd:8d:a9:ca:20:67:ea:d1:81:4e:3b:a6:
                    e8:a8:78:35:0b:37:5f:73:5e:d3:2c:67:1a:fb:86:
                    86:18:df:68:88:14:29:77:84:2a:96:90:a7:8e:58:
                    02:46:fd:e8:45:fb:a1:d1:4a:c4:68:77:5c:9e:7e:
                    4e:f2:7f:84:79:92:8c:a0:3d:5d:03:f8:01:aa:9f:
                    00:b1:1c:c9:a3:75:b0:45:6f:9a:f3:c0:f3:2a:d3:
                    c0:a8:1a:4c:03:1e:32:c7:0b:73:45:8e:04:d1:cd:
                    fc:37:cf:b0:a0:93:5a:85:28:85:f9:bf:ad:41:36:
                    e6:ae:fa:9a:e7:ea:df:6d:94:a9:36:7d:89:61:61:
                    35:6a:ba:b8:d1:10:1a:7c:c1:b4:78:85:7f:32:17:
                    d5:f8:40:56:9d:df:76:8a:75:da:44:fd:b7:63:04:
                    af:39:b1:fd:5c:93:5e:70:d8:b7:e0:e1:c7:f3:34:
                    60:2e:41:80:ae:b1:de:8e:a9:03:f8:2f:6d:05:dd:
                    f3:b6:4e:42:9a:eb:25:5f:6d:0c:74:ba:62:8f:be:
                    67:06:1d:bd:af:d7:7c:27:38:f9:b5:31:74:ef:4e:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:BB:5C:E6:C6:DA:09:A9:9E:85:67:12:CA:F3:E2:A2:E8:6B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:29:05:57:ce:50:b3:24:3c:cf:6f:b5:3d:95:48:6b:b5:
         a3:c8:c4:28:b6:c3:02:f3:c0:dc:9b:4a:c4:2e:2e:5d:33:43:
         6f:40:00:2c:22:67:a8:1c:27:27:c3:50:9c:bc:0b:cd:a3:cd:
         11:b2:3f:75:ac:12:fc:5a:fd:d4:52:64:72:5d:a6:11:c4:f0:
         b6:1f:ad:6f:73:e5:65:21:9c:80:06:8e:cb:cb:7c:94:50:7d:
         14:d6:7a:06:19:a0:8e:31:3c:0f:47:f8:7e:b8:9e:72:77:03:
         c6:24:1f:7a:15:d6:4e:82:e5:3f:9a:e7:96:84:d9:bc:4d:69:
         57:54:76:e2:5d:bd:00:78:11:5b:1a:6f:ec:94:94:87:62:f1:
         df:e0:29:e8:da:c9:76:db:7f:dc:be:20:b8:ef:c2:2a:8f:89:
         8f:5d:ef:28:7a:c2:4f:59:b3:21:6e:66:07:e8:21:28:1f:b3:
         67:87:8d:6a:22:c9:b6:14:75:42:01:d3:61:1d:6d:65:3d:5a:
         d3:87:bd:74:c4:8a:1f:02:cb:f9:7d:8b:c7:3a:f5:3a:1c:75:
         01:06:42:13:a2:85:a9:58:60:1b:3d:f4:99:26:00:69:f7:70:
         b8:2f:63:a3:b5:de:54:6b:da:34:0f:a3:93:23:8e:9d:77:88:
         48:89:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:11 2026 by rpki-client