Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
File:                     9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa (raw, json)
Hash identifier:          vHLB0DiEeKAplHp2iE9DT8Uu8Edoc08A2lhobw0aLPk=
Subject key identifier:   CE:68:08:F5:67:DB:65:E0:FC:91:5A:CC:51:83:9E:FE:85:96:34:26
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F4328584C93D1B79AE7CD273F6824D0A0
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     3565
IP address blocks:        208.68.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:b7:9a:e7:cd:27:3f:68:24:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=e473ace2-ec9a-41b6-8762-7aadb8db424e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:34:7c:fd:73:0a:20:8f:5e:a6:16:66:d1:
                    cc:b4:47:34:f8:7a:b5:03:50:6f:96:16:10:ee:62:
                    e9:fd:8e:fb:f7:35:41:64:cb:53:a1:af:99:97:4d:
                    71:fc:9f:b7:42:8a:17:58:5a:9a:1c:f1:26:4d:be:
                    11:e4:b6:68:b4:90:ac:bc:81:2e:de:84:97:b9:f3:
                    91:ea:de:ea:06:48:7e:69:bb:da:ac:f9:13:3b:c9:
                    7d:c2:9f:fb:f4:9d:89:f4:66:86:08:8b:b9:3f:c8:
                    9e:e4:93:84:50:8d:62:2f:09:08:3e:5b:d9:8d:87:
                    19:5d:fb:b2:d8:7b:5c:ce:f9:a6:65:e9:06:c7:4e:
                    4a:c8:4b:8e:6c:14:f0:c3:90:9e:4c:89:5d:e6:e3:
                    47:c6:bc:29:ca:be:fa:19:e1:e8:f5:0d:fd:0d:81:
                    be:62:0d:eb:d3:10:6c:ac:fb:e6:83:e8:98:c3:18:
                    f0:33:15:ab:54:fe:52:b4:0c:3e:b7:66:b9:15:af:
                    8b:33:53:a5:63:11:a5:32:64:5d:bb:bc:64:c8:cc:
                    64:0f:8a:24:6d:79:52:c8:ee:45:e1:6c:0e:c0:e1:
                    8d:70:28:c1:46:ce:a8:10:34:83:25:b5:e9:38:76:
                    48:1f:08:06:c1:6c:fc:f3:42:5b:61:ec:b2:c5:51:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:08:F5:67:DB:65:E0:FC:91:5A:CC:51:83:9E:FE:85:96:34:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:ab:8c:1c:5e:4e:ca:c5:b6:93:9e:f7:d1:90:62:c4:1c:
         33:fc:9e:57:8c:28:6d:5f:42:1c:bd:d2:57:39:e1:5e:3b:1e:
         ac:da:44:2c:66:c2:79:2c:d9:4b:d4:86:8d:fc:04:dd:0a:3c:
         5e:ed:35:89:58:85:d1:cb:d7:15:e5:dd:37:e9:74:00:9b:6d:
         4d:9a:a2:1f:97:59:f2:36:75:a2:d7:15:71:01:d2:5e:92:b1:
         2a:ed:3d:0c:68:9e:1f:0d:58:a2:ba:ac:67:84:20:10:f9:59:
         8c:5d:11:bd:d0:70:5c:ba:b8:f3:9e:38:83:52:5b:fa:2b:16:
         98:09:08:56:a6:32:3f:10:d0:d8:eb:55:06:19:32:ff:53:e7:
         07:c3:1f:3a:0f:fc:5c:f9:74:04:e6:f3:dd:9b:c2:f6:18:81:
         87:26:75:18:bc:bf:d2:0a:a0:50:8b:03:fe:b9:92:61:fa:11:
         9e:c4:3f:86:d3:5e:d7:44:93:c4:6e:66:68:69:f4:b9:fb:fd:
         83:ae:11:ce:67:bd:59:b1:69:6e:e2:6b:92:f2:61:f8:98:3f:
         cf:2d:10:9d:02:30:07:a6:b1:c2:c9:ac:64:a9:1c:fc:ca:22:
         51:93:d6:d1:e6:9a:f6:ef:41:d0:55:46:37:87:03:36:96:cf:
         71:b1:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:05:47 2026 by rpki-client