Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
File:                     daab233c-3584-3069-b9e0-933500bc4f22.roa (raw, json)
Hash identifier:          zuQoPGF8JRrrPSYZ1CWJ42zE0xsfPC1VwNTk6b3JTI4=
Subject key identifier:   C3:9F:F8:40:C5:0D:B8:F6:73:C2:FA:72:D3:52:2E:D8:18:77:6A:2D
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F4328584CF157794A55442924E2EFF480
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     20371
IP address blocks:        199.202.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:79:4a:55:44:29:24:e2:ef:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=6ddea1a5-ea53-4511-83c7-a74f014e328d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:8d:ba:c7:2a:9e:5b:e0:e4:3b:a7:92:1d:
                    41:a0:82:bc:79:51:82:05:d0:bb:62:df:17:d1:3a:
                    6e:b8:6d:99:ae:38:74:df:28:16:f8:72:97:1a:6a:
                    be:11:c1:16:ce:51:63:a5:c0:e2:14:73:15:40:2b:
                    ec:a7:2f:75:62:31:45:8d:ce:d0:72:bd:5a:24:fe:
                    59:fc:91:e0:2e:89:5b:8f:e8:f7:d1:1c:75:d5:94:
                    a9:89:df:86:e8:57:df:40:df:87:52:57:e1:76:b0:
                    41:42:a7:a4:35:af:76:a5:62:81:f5:ec:3d:c8:52:
                    5c:25:ea:ab:b4:18:52:74:2e:5c:1b:5a:10:e8:ce:
                    6b:bb:d3:38:92:fb:cc:e9:8b:bd:80:7e:a5:22:0c:
                    7c:1b:c8:d4:7a:f2:c4:0e:45:13:b5:e6:60:34:4d:
                    f7:cf:3e:22:a0:56:99:43:7b:2e:16:73:a0:32:48:
                    75:4d:6b:cc:7c:d5:c0:f0:c8:d8:8b:5a:e7:c0:df:
                    93:cc:cf:bc:27:01:cb:d0:c6:b1:15:4c:cd:7a:45:
                    b5:bc:d8:b1:87:09:a9:32:db:30:03:16:6a:c4:21:
                    e7:68:fb:6e:14:34:ac:b0:a8:7b:5c:c8:62:94:20:
                    0a:71:2e:5f:61:da:5f:ac:f3:e9:72:2c:4c:1c:e0:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9F:F8:40:C5:0D:B8:F6:73:C2:FA:72:D3:52:2E:D8:18:77:6A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:99:a9:7c:e0:e2:fb:b0:bd:08:4e:bd:69:41:8e:e2:7d:82:
         71:ca:11:0f:d8:13:76:76:e1:78:17:72:a8:2a:c3:3f:19:d6:
         60:e6:03:4e:39:cd:1a:41:10:a1:3c:79:86:9e:af:e5:95:93:
         74:57:5c:ac:43:a1:7d:b5:79:38:37:e4:16:94:d3:3f:ff:fb:
         ef:ae:25:da:f0:3f:ac:31:8f:3e:74:62:e6:8d:dc:65:51:40:
         aa:f0:81:0a:b2:58:aa:10:a0:91:6e:1b:d1:ac:53:fd:9f:8d:
         65:67:b1:d0:df:a5:28:53:66:38:96:18:35:14:fa:9f:64:32:
         79:15:cc:98:25:a8:5d:cf:5f:cd:16:86:2d:bd:fb:de:1a:f7:
         6c:f1:e9:0f:3d:31:1c:4a:8e:54:a0:7c:8c:c7:73:c7:e3:8e:
         dc:33:9b:89:ab:74:44:ed:3f:c4:a1:d1:9e:a6:c0:b8:4a:99:
         10:b1:57:7a:51:04:06:52:19:57:ce:2e:f0:61:95:27:4c:9a:
         1b:3c:2d:12:5e:82:5a:19:14:58:37:e7:bb:3c:4e:aa:2f:5d:
         1f:52:76:97:8a:a6:84:fc:d0:0c:70:cc:a2:03:84:87:27:30:
         79:a0:27:8f:0c:e1:84:72:31:28:19:64:66:0d:46:61:43:41:
         97:19:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:33:25 2026 by rpki-client