Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa
File:                     a87b36e3-45d4-315f-a2d5-77c49a02b878.roa (raw, json)
Hash identifier:          X/TJ9yPg7eSeP4TnGM/M9drLQJq4virZtH1RP8IMczs=
Subject key identifier:   BD:D1:2B:55:78:DA:3D:B2:34:86:3E:2B:EF:E4:50:D4:65:EA:CF:A5
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CC7D8D7A2AD94D15D4E730A80
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa
Signing time:             Sat 07 Feb 2026 05:17:25 +0000
ROA not before:           Sat 07 Feb 2026 05:17:25 +0000
ROA not after:            Fri 08 May 2026 04:17:25 +0000
asID:                     23470
IP address blocks:        65.110.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:d8:d7:a2:ad:94:d1:5d:4e:73:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  7 05:17:25 2026 GMT
            Not After : May  8 04:17:25 2026 GMT
        Subject: CN=813ff6ad-1d45-48a8-b8cb-1095c86fe1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4e:92:e9:d5:df:92:3c:cc:3d:a0:6a:2f:94:
                    02:8a:24:49:b9:9b:65:d2:f8:fa:a3:0a:48:cf:6b:
                    3b:8a:d7:ac:68:f0:c3:f6:f8:ba:00:d2:c0:b0:08:
                    3d:ed:89:67:2c:d2:0b:b9:77:1a:49:7f:13:9e:82:
                    1a:c3:02:f3:ed:b2:c3:f1:2b:4c:5b:74:e1:87:f6:
                    78:7a:11:df:74:18:83:80:30:40:e5:cd:eb:fc:46:
                    30:45:85:22:e1:03:d9:b2:25:27:56:8e:92:fb:5c:
                    3e:cb:f0:91:a7:98:c5:fd:67:cd:f3:c2:88:c9:2f:
                    23:70:9c:d3:0c:42:c6:ef:8a:d0:ad:a4:94:7f:cc:
                    fe:5a:c7:04:29:ac:a2:3c:ae:bd:37:07:7a:10:0d:
                    6c:7e:f5:9f:49:bc:64:67:72:4c:c9:4b:08:f3:b2:
                    b1:b7:7c:a4:00:a5:f1:7a:47:ea:b9:3d:18:e9:ca:
                    32:4d:7d:b9:cf:0c:9a:70:ac:5a:ae:2f:e9:8e:4a:
                    34:af:b2:1b:95:60:dc:cc:86:b6:59:25:f2:50:ab:
                    56:a9:73:08:ee:fa:3b:bb:2b:5f:56:43:b2:77:97:
                    cb:32:ce:a8:a0:f1:cc:46:77:75:eb:f8:7b:3e:5b:
                    18:a2:61:a3:3e:58:32:60:c5:42:de:3e:0b:2b:77:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:2B:55:78:DA:3D:B2:34:86:3E:2B:EF:E4:50:D4:65:EA:CF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:61:06:07:5a:b6:1d:97:64:32:57:0c:14:7e:c3:25:1e:
         ef:78:57:05:fb:01:09:5d:f2:89:b9:1a:fc:6c:62:52:59:8f:
         4c:33:f9:ce:fd:8e:8b:93:48:b9:6e:c6:c0:a0:05:5c:e3:08:
         d7:07:a4:dc:a9:2c:dc:b2:a1:ae:29:7d:0b:2f:b6:19:16:fd:
         3d:ba:b5:0f:41:48:65:77:15:5c:0f:c9:de:ba:da:1c:96:a0:
         a1:2c:67:1f:38:b9:61:41:30:74:7b:11:79:d6:ef:2c:da:0f:
         89:87:9a:b7:ef:98:dc:f6:f9:12:b5:dd:72:cb:74:45:65:64:
         c1:02:9f:ef:52:4a:ce:dd:af:49:7c:12:1b:8a:2d:b5:2c:5d:
         e5:38:dd:e1:43:ff:11:c9:85:9f:a8:0c:55:15:aa:74:18:0c:
         3e:31:5c:6c:40:fa:02:27:96:f9:12:de:3d:4e:09:e4:8d:36:
         a0:c2:e0:d1:a7:e7:1e:77:d9:a1:62:bb:72:a0:40:0c:0e:98:
         bd:bd:6c:54:99:6c:8e:21:88:10:54:76:4a:49:91:0d:32:26:
         7e:1e:b1:2c:4f:85:24:59:8a:1f:42:53:be:ba:75:ee:f1:0f:
         c8:c3:a9:64:04:dd:af:73:67:06:db:84:84:58:b1:6b:74:39:
         d2:c1:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:41:10 2026 by rpki-client