Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
File:                     b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa (raw, json)
Hash identifier:          spR1z04RurYhJlA2uQxNYNgPkGaqGZyFL2zkLjs3hzU=
Subject key identifier:   92:B1:EB:52:21:34:83:10:63:95:D3:86:19:62:57:27:8A:42:D5:35
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CD13C9F87B02C2A9CEC561380
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     395092
IP address blocks:        52.129.44.0/23 maxlen: 24
                          107.161.50.0/23 maxlen: 24
                          144.208.124.0/22 maxlen: 24
                          146.71.86.0/23 maxlen: 24
                          208.123.116.0/23 maxlen: 24
                          2607:a680::/48 maxlen: 48
                          2607:a680:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:9f:87:b0:2c:2a:9c:ec:56:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=d2b6c241-aff0-418e-b3ef-83aefee93cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:7c:66:9a:4e:98:b9:08:58:ea:52:11:36:
                    c9:d7:d5:82:5b:e9:95:fc:58:5f:08:fe:16:39:8f:
                    dd:5d:4c:b6:3f:ac:12:86:8c:00:7a:57:e7:96:d5:
                    3a:d5:35:5a:eb:a0:3d:6d:46:1c:ac:af:60:d7:5a:
                    f2:2c:77:e1:c9:cd:be:e2:d8:a3:f5:e9:4d:51:82:
                    e9:e0:74:86:4d:a5:48:9e:d3:e9:01:ae:fd:c7:53:
                    5f:6a:ea:73:f7:e0:89:f2:9b:fb:7d:2f:71:91:9d:
                    af:b8:91:60:c4:8f:45:46:51:f4:8a:1b:76:cb:ed:
                    62:d3:6f:f1:02:45:ec:65:34:a6:42:d2:07:61:79:
                    ba:3d:72:4a:82:8e:17:e6:39:e1:45:3c:51:d1:6c:
                    25:20:63:10:f9:e0:34:0c:51:53:d5:b2:e7:50:3d:
                    b8:e0:25:99:17:fc:7a:f8:36:d6:d2:6f:10:d3:7a:
                    47:90:f6:9d:b1:08:64:d1:8a:bb:63:ec:ce:15:18:
                    ab:4a:5b:66:b7:75:ef:c6:a1:f7:1e:aa:e6:d8:c3:
                    1f:be:ee:fa:e7:6f:dc:6b:69:08:28:93:95:06:3b:
                    46:09:0d:2c:7a:42:cb:a8:fa:cb:90:51:03:9f:ee:
                    c9:84:d2:d7:dd:61:e8:1a:38:0c:7b:31:a5:d7:29:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B1:EB:52:21:34:83:10:63:95:D3:86:19:62:57:27:8A:42:D5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b27d885f-ce1b-3fb5-b97f-f2a57bb75766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.44.0/23
                  107.161.50.0/23
                  144.208.124.0/22
                  146.71.86.0/23
                  208.123.116.0/23
                IPv6:
                  2607:a680::/48
                  2607:a680:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:f6:88:ee:24:e4:d1:a1:23:2e:21:d7:7e:32:02:53:c9:
         f3:06:c1:20:81:81:b2:55:e3:a2:7d:31:47:f1:a4:00:f6:48:
         95:32:e0:98:d1:35:21:3f:2d:5e:a3:93:80:0e:8f:fc:eb:3a:
         b9:8a:01:20:20:ce:34:04:cc:01:98:8c:f0:a0:68:c2:24:ca:
         9d:ab:ad:50:d5:7a:c5:51:c5:c7:13:2d:d5:d9:08:9b:e8:fa:
         fd:16:1f:18:f9:17:d6:32:1b:cb:26:60:34:5d:4c:4b:fe:c3:
         1c:d2:45:7a:5e:66:37:1a:d7:7d:5d:87:9c:c8:29:75:36:58:
         38:2b:9b:a9:4c:c5:a9:e4:00:f0:f9:23:d4:00:c9:5b:f4:c1:
         3b:d6:ef:a0:76:18:ff:cd:d0:a5:ae:00:2c:cd:7b:01:a8:b5:
         65:70:ad:f3:a1:2d:b7:fa:5f:da:11:d1:6e:08:13:c2:3f:f2:
         88:eb:91:cb:b2:50:8d:04:43:6b:f1:85:05:94:dd:60:c6:cb:
         1d:d7:38:b4:38:26:f4:11:e0:c5:04:89:1b:d7:e4:4b:2b:49:
         63:84:9b:14:30:89:43:cd:8a:2e:6f:ad:c1:f4:64:d4:15:ba:
         1e:7b:bc:83:c4:ac:14:a4:22:0c:10:80:10:cd:82:d6:d3:16:
         d4:b8:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:27:48 2026 by rpki-client