Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa
File:                     d379290d-66d2-34d2-a150-78081960fa2b.roa (raw, json)
Hash identifier:          EuszFsJMTnmSTN17nA1X8ewE7ZQbd79iXgNdbvcfyS8=
Subject key identifier:   F9:B4:E0:BB:1F:40:17:4B:7C:95:2F:0E:74:13:A0:A4:89:A7:99:56
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584C8FA188828CD8597C77FEDD00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa
Signing time:             Sun 18 Jan 2026 02:00:31 +0000
ROA not before:           Sun 18 Jan 2026 02:00:31 +0000
ROA not after:            Sat 18 Apr 2026 01:00:31 +0000
asID:                     6128
IP address blocks:        173.251.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:a1:88:82:8c:d8:59:7c:77:fe:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 18 02:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=ec54d6f3-c0fa-4401-88f9-fce2edaa6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:61:89:90:df:cc:b6:1e:1c:b2:23:5b:d5:
                    c1:99:b9:79:19:a0:c2:06:fb:58:83:9b:24:9e:95:
                    2d:cb:4e:f4:0e:a5:d7:93:03:61:77:ce:e7:e1:e9:
                    65:67:25:09:69:f4:82:e8:62:33:4d:73:ff:1b:52:
                    2f:60:ee:ec:46:b2:7e:9d:98:96:64:e1:1e:b9:95:
                    23:01:6b:07:0c:eb:02:d5:55:b6:3f:b2:79:0b:3d:
                    77:09:8d:30:cb:4f:87:8c:b2:05:02:45:8f:bb:3c:
                    8c:f2:55:35:c0:ba:00:77:4a:b0:f9:8c:3c:54:6d:
                    31:e9:dd:55:a8:96:42:bf:fe:3d:80:c1:3d:8c:04:
                    52:34:d7:33:13:e9:a9:05:fa:0b:2e:2f:d3:03:a9:
                    0a:c6:73:55:54:6e:30:58:3e:35:99:d7:4e:23:46:
                    db:df:c3:a9:9f:cc:38:38:fb:31:d7:79:f8:46:75:
                    27:1d:c5:9b:07:70:01:ac:a3:ac:15:9a:c1:61:92:
                    c3:28:00:ff:e2:a2:20:f0:fb:60:ec:bc:08:e8:19:
                    a2:7b:8d:40:46:e4:60:dc:e7:90:0c:7a:d6:7a:bb:
                    77:6e:b0:2d:38:e9:e4:10:a8:45:95:f0:0f:d1:eb:
                    c2:63:ce:dc:5b:6a:70:fa:66:02:82:45:21:48:82:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B4:E0:BB:1F:40:17:4B:7C:95:2F:0E:74:13:A0:A4:89:A7:99:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:5d:59:82:f5:ba:6e:09:72:e9:7c:80:98:01:ce:63:fa:
         38:52:3d:be:81:fd:19:44:a7:f7:19:a8:c9:7a:6b:76:b9:6f:
         b9:10:fe:ad:55:11:5a:9a:77:c9:2f:57:9c:8e:dc:45:9c:12:
         07:ef:84:e4:9e:2c:a6:c5:27:e5:8d:cd:25:dd:36:07:ba:92:
         61:da:9b:07:58:26:6d:37:f8:b2:f3:8e:4e:75:70:7e:9d:04:
         ec:04:10:d1:e6:3d:f2:e9:98:52:77:5d:fe:0f:18:f5:cc:00:
         f6:e4:e0:4c:00:5f:b3:e5:c9:45:98:09:71:1f:c6:24:2a:23:
         99:14:ac:a0:22:90:ff:9b:f8:53:7f:d3:38:ac:75:cf:98:df:
         fd:03:d6:90:f2:49:12:5c:88:53:02:d1:2c:ea:de:bd:d6:2a:
         bd:a4:a4:08:28:1b:1c:2c:bc:75:48:57:fa:3c:79:09:10:4a:
         a9:8d:70:7e:27:02:6e:4b:1e:98:86:0b:ad:22:2c:74:38:d1:
         f6:68:27:28:53:b2:ab:f2:64:45:86:be:ed:8d:6f:7a:0c:d2:
         a5:c4:f2:fe:e4:1f:21:50:65:33:ae:2b:f3:1c:7a:62:6b:80:
         6d:e7:3b:4a:a6:9a:19:5c:d5:98:8b:32:a6:98:0b:14:35:3a:
         57:a7:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:02:48 2026 by rpki-client