Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa
File:                     973468d0-7226-3ff1-a216-3007302b0b90.roa (raw, json)
Hash identifier:          EXi/i3uX5zTMrw1n0yJIiTLnXgn5rwOwzRxzgkao9bc=
Subject key identifier:   F1:C1:9C:65:35:7A:FA:5C:6C:0E:75:3C:A6:02:51:FD:C1:8C:A5:2D
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584CE62CB2A02B7A1B99ECBBD6C0
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     30313
IP address blocks:        152.216.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b2:a0:2b:7a:1b:99:ec:bb:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=af67c5b6-b728-49c2-97bb-b9735e3d9fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:6b:d5:f7:13:88:c8:ce:be:03:94:bf:73:
                    83:22:18:b1:26:a2:16:be:b2:b3:58:40:e8:9f:66:
                    9f:ab:87:48:54:f8:ce:ea:32:e5:fc:20:ad:e3:5c:
                    d1:55:bf:3c:96:3a:a5:e4:ec:0e:e6:73:4f:89:f7:
                    c1:d8:39:62:f8:e8:e9:fe:09:e3:cf:ae:3a:13:69:
                    1a:01:bc:c7:ad:e5:55:4c:5b:aa:a6:0b:f2:31:98:
                    50:29:b4:f3:4d:f4:6a:01:97:0a:29:1c:ef:69:08:
                    5a:bf:b4:6e:ae:ca:6e:d1:ce:01:cb:56:15:da:49:
                    65:24:fb:74:bf:db:56:4b:c8:20:48:5b:00:5f:c9:
                    29:15:48:28:15:57:cb:3c:0d:6b:a3:a3:ad:ae:4b:
                    7d:b5:22:45:9d:c4:92:52:56:17:fb:22:a2:f1:fa:
                    b4:0c:e6:9d:bf:3a:37:b5:52:05:8c:6c:36:a9:a5:
                    5b:c6:09:66:46:bc:af:94:87:c4:78:4e:bc:fe:96:
                    0c:64:bb:e9:4f:81:c9:83:b8:b2:76:03:ab:6d:6d:
                    7b:27:ca:e7:84:5b:61:ad:b0:29:e8:1a:0d:10:a7:
                    a3:de:83:37:1d:b9:6b:ac:97:25:e9:87:aa:bc:e8:
                    99:8c:56:35:5b:3d:fd:cc:2d:76:60:75:63:01:5a:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:9C:65:35:7A:FA:5C:6C:0E:75:3C:A6:02:51:FD:C1:8C:A5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/973468d0-7226-3ff1-a216-3007302b0b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:03:e1:25:a9:58:b8:bc:4f:82:ec:9e:1d:bb:09:e2:e6:
         55:52:3e:24:14:38:6f:ef:18:e5:42:d1:d6:a1:4a:df:4c:63:
         93:3b:2c:a0:ed:4f:d6:8d:9c:79:13:65:b6:a7:a2:d6:a1:b8:
         ce:a9:64:a7:e9:64:56:13:0d:b7:f1:9c:a3:3d:77:7c:b5:38:
         19:0c:ed:a3:bd:77:33:78:e4:15:1d:56:f3:92:8c:e9:58:e4:
         55:29:58:f8:6f:71:89:22:a1:dd:fc:6f:fa:a3:ad:5a:b1:7e:
         84:e6:1c:5e:e6:95:1b:6f:ed:e1:37:f3:23:56:23:d0:e0:41:
         50:3b:82:96:1c:67:0a:61:9b:ff:94:f2:fe:18:6d:9c:c9:b6:
         54:e9:b5:63:62:ee:6e:e3:73:1d:c5:6b:43:75:fc:45:b4:1d:
         e2:96:fb:7b:d0:f4:66:a9:55:1b:9d:83:b6:ce:36:84:de:07:
         f1:05:11:d2:da:ec:47:3e:43:b4:09:47:40:8a:d6:15:55:eb:
         74:04:d5:28:94:b3:02:99:60:1a:44:14:47:55:f9:a1:9c:e6:
         b3:84:5f:e8:6e:af:9a:96:fe:52:89:50:fe:d4:be:e5:4d:1f:
         97:26:44:d3:2d:f0:88:e4:44:1d:d0:53:8f:85:5d:3c:ca:c6:
         02:af:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:05:57 2026 by rpki-client