Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa
File:                     27491df0-f813-39fd-ab8d-b28cf78a26fe.roa (raw, json)
Hash identifier:          wFxYPhBBK+fldZpNxEJ4G2RWCSlvjdA2OiBLD/fzK74=
Subject key identifier:   33:18:D0:F9:35:AD:71:28:4E:F9:08:BD:AA:1A:52:63:55:CD:40:F1
Certificate issuer:       /CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
Certificate serial:       010D0C9F4328584C5666B0D78C5DEBC28F6E5D00
Authority key identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa
Signing time:             Sun 28 Dec 2025 14:00:38 +0000
ROA not before:           Sun 28 Dec 2025 14:00:38 +0000
ROA not after:            Sat 28 Mar 2026 13:00:38 +0000
asID:                     32123
IP address blocks:        162.254.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:56:66:b0:d7:8c:5d:eb:c2:8f:6e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
        Validity
            Not Before: Dec 28 14:00:38 2025 GMT
            Not After : Mar 28 13:00:38 2026 GMT
        Subject: CN=9081f836-cfc1-45fb-a2d2-9c9e9062e3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:4c:bf:d3:d9:d4:52:85:7d:2e:1b:eb:cb:
                    e8:bd:fd:54:15:02:ea:c7:08:07:97:81:b6:29:23:
                    a5:b3:d7:bc:6f:2e:23:18:54:37:b3:3d:72:bf:6b:
                    dc:fe:49:71:40:44:e5:16:86:b3:c5:1b:0b:ff:bd:
                    8c:e8:88:33:b9:a3:3c:94:77:7b:85:de:94:84:32:
                    4f:e8:9d:67:1e:4d:81:8b:15:03:e6:69:07:8e:92:
                    75:b9:92:69:79:59:38:6f:33:62:d4:77:21:1a:1c:
                    ba:ac:74:d7:c3:f6:0c:e0:1b:27:a4:ae:48:95:4b:
                    9e:ab:b6:28:4b:17:77:d8:bf:e7:56:cb:2a:01:38:
                    af:9d:00:45:aa:23:71:0f:cc:12:3f:27:7b:ba:a5:
                    8f:09:fc:d9:45:6d:6a:e4:75:09:c0:b9:1f:b8:31:
                    83:d2:40:2e:b6:12:2d:96:3d:c7:be:15:2b:ec:bf:
                    4f:86:04:8b:4e:d7:0f:48:c8:e5:9c:06:f8:b8:cd:
                    8e:ec:9a:3c:3f:11:fa:1a:c6:f9:70:c6:9d:ee:08:
                    66:51:2b:46:ee:a7:fe:99:51:eb:eb:81:3b:84:fd:
                    50:f3:03:f4:a2:b5:2a:a5:df:57:ee:92:0b:6f:03:
                    1f:ae:d9:8a:8b:e8:2d:80:83:26:46:e3:95:43:71:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:D0:F9:35:AD:71:28:4E:F9:08:BD:AA:1A:52:63:55:CD:40:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:cc:a6:ce:a6:d1:0a:77:f3:f1:2e:d7:4c:c1:de:fc:a3:
         1e:d8:99:91:9b:20:e2:b6:43:bc:86:7d:c6:5f:33:f0:93:d1:
         79:5c:a7:f6:1f:f7:e5:d9:ef:7b:f4:38:79:f6:7c:19:cf:2d:
         8d:3a:2e:6a:92:8b:4c:ab:ae:99:89:1d:11:b3:28:ab:00:36:
         15:a4:e0:81:06:c0:3c:bf:91:31:ca:89:1d:3d:cd:7b:08:d6:
         cd:5d:1a:1f:17:5b:7a:fe:1e:f8:8e:33:4d:51:4d:ee:05:fa:
         e6:b8:ec:40:e8:3a:5b:21:24:64:bc:d3:31:15:cd:b3:e1:cc:
         61:7f:6c:f8:cf:b4:16:be:71:98:c4:34:87:7b:cf:c5:dc:5f:
         39:c2:dd:2b:f5:a9:f8:5a:f6:81:e1:f6:c6:f5:b8:29:52:60:
         79:8b:fb:63:7a:9b:36:9d:8b:00:fc:e2:8d:fb:63:97:fd:2e:
         2e:f4:62:4b:5f:b8:bf:70:2a:d5:98:ad:5e:65:14:b7:e7:5a:
         ce:27:50:0c:07:79:d4:de:03:02:55:9b:af:62:a4:bf:f2:fe:
         8b:ea:c5:6a:0b:26:a1:19:63:19:0a:55:cf:2d:cb:80:89:78:
         fc:51:ec:10:eb:46:33:e8:df:2d:b9:40:2e:e3:2b:8d:c0:54:
         1d:32:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:10 2026 by rpki-client