Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
File:                     d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa (raw, json)
Hash identifier:          Ht1eMRW1zTUtGzsD0CH5pKnyJ1gjXxmzQY1Q3W3j14A=
Subject key identifier:   E5:82:70:8C:7B:86:8E:93:8C:57:16:83:C4:47:68:01:9B:75:FE:26
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F4328584C5EC6BA86BFE66C32C3B67980
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     62695
IP address blocks:        162.246.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:ba:86:bf:e6:6c:32:c3:b6:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=fc43a6c8-cd84-4efd-b42f-1fc8a0e6b72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:eb:3a:8b:6e:9d:8a:3e:b2:2f:12:21:c2:
                    73:db:d4:ef:8a:19:89:dc:76:8d:46:d7:12:b9:cf:
                    ee:98:8e:f2:3f:db:77:6f:48:20:76:9a:fd:b6:96:
                    c6:c7:b5:43:d6:81:a9:d0:00:17:28:ec:ee:3f:8f:
                    f2:09:d6:9d:15:c7:60:b8:39:d5:3e:3f:8d:4d:44:
                    39:c1:bd:ec:57:d3:39:52:f9:4f:3f:82:a6:d5:77:
                    21:e3:48:f8:98:a6:c3:2c:76:7c:25:64:84:5c:7f:
                    c6:4d:6e:79:f0:73:e1:a3:40:53:57:a6:94:e2:f7:
                    73:09:9b:40:00:96:6d:23:63:10:73:b6:e3:06:f6:
                    69:17:71:6e:69:dc:e5:b2:2d:9f:2b:e3:92:bd:82:
                    96:a4:36:bc:a2:04:f3:4a:80:b3:03:dc:b9:a3:98:
                    bb:87:d6:7b:fb:05:5b:d1:6c:58:75:fe:75:c5:09:
                    5c:81:e0:84:41:71:34:f1:14:9e:f4:40:25:d2:7b:
                    30:4c:9f:07:8e:d2:9d:aa:0a:2b:0f:91:c5:24:3c:
                    6e:e0:0b:d3:e8:69:56:e1:01:48:f4:cc:f1:fe:0c:
                    44:53:ac:1c:10:e8:6e:5b:25:9b:8f:ba:c4:70:4c:
                    cc:7e:84:c6:d3:10:cb:73:47:e0:2f:9e:55:3b:22:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:70:8C:7B:86:8E:93:8C:57:16:83:C4:47:68:01:9B:75:FE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:e1:25:11:f2:c2:79:73:fc:83:ea:42:00:ce:95:9a:6f:
         af:39:ec:ef:a5:a2:98:a5:71:c2:b6:59:e0:b9:18:a7:c1:ef:
         e3:04:03:15:3e:88:32:ed:ae:ad:03:e0:41:ec:0a:0e:ab:b4:
         1a:a1:c5:17:b1:14:59:18:9b:14:8d:8e:6d:df:7f:04:6b:58:
         92:6e:f4:59:c7:fd:42:e2:1f:fc:02:0a:c9:23:ff:64:01:ec:
         ed:19:02:6d:f3:8b:23:e1:f9:03:9b:e5:a9:90:2f:53:b0:fb:
         a7:5d:fe:ba:24:8e:6a:75:79:ea:ae:c5:14:33:8d:40:0b:39:
         67:10:28:15:a3:ff:c4:45:08:84:8b:6e:43:d6:20:45:8a:7d:
         2c:90:df:94:b2:e8:6d:74:7e:23:93:76:63:6e:f2:2e:60:a7:
         d2:bc:21:fa:40:99:4d:3c:be:b9:9f:1c:a9:04:61:07:ae:47:
         50:29:8e:91:84:77:de:f3:72:c1:9d:60:41:87:a4:81:9b:7c:
         9a:e8:8e:a5:d1:4e:29:5f:b5:bb:69:65:a1:c3:74:b8:df:77:
         85:21:d4:dc:c0:ad:6c:a5:3a:1d:83:8e:8b:d7:8d:fd:e5:5d:
         ee:fd:0c:ee:d7:b8:b6:85:77:85:48:b4:54:99:59:fe:9e:12:
         68:99:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:12:35 2026 by rpki-client