Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa
File:                     29faef7b-fbbf-39be-bd63-c00358954ef1.roa (raw, json)
Hash identifier:          yWmfblgOYBhvMi51xCcBipE0d5/Z6W8ONH2ZPPFHMDM=
Subject key identifier:   DD:89:93:8F:5C:7D:1C:E5:54:5E:58:F6:2E:A7:D9:2A:E0:01:57:06
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584CF587819320583A31B1E34B80
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     32707
IP address blocks:        216.8.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:81:93:20:58:3a:31:b1:e3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=841a76e4-9119-478f-98cf-6c000c44367b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:7e:82:93:fe:a9:f8:4e:90:be:76:f4:7e:
                    da:85:7c:ff:7e:d8:aa:74:e5:5c:82:34:9f:5b:11:
                    4a:ab:65:dc:e3:a0:a7:75:91:ea:c9:d9:24:9d:61:
                    46:1b:d9:94:6e:52:7e:df:42:a8:e1:af:8a:3f:13:
                    a5:91:1b:ad:78:d8:d4:1c:d7:ea:02:d9:44:bd:5a:
                    50:62:13:f6:4d:91:1d:6f:98:b9:a6:8a:e8:69:69:
                    22:19:27:bb:06:0f:de:b0:f2:4b:27:6a:5d:ce:cc:
                    e6:34:e2:a7:93:7d:92:03:9f:6e:b8:a0:2a:ce:14:
                    fa:ec:2a:5a:c2:53:4c:70:8a:25:d3:22:c4:77:19:
                    22:0a:ec:70:2b:69:03:df:3e:29:d4:8b:36:6f:9c:
                    da:33:69:6e:d4:be:39:22:be:a1:af:36:48:ce:cc:
                    ea:96:4b:ad:02:99:f9:43:1e:69:f1:b5:10:14:b0:
                    c0:1e:ad:71:21:9e:9b:a2:3f:2b:d3:4e:2b:e6:d5:
                    f8:6a:8c:7c:cd:af:25:2f:50:1b:e9:b4:65:df:2c:
                    e1:c4:b3:51:e4:4a:ba:fd:cb:eb:f9:40:a0:cd:2d:
                    13:8f:7b:7b:6b:8b:d7:60:61:d3:88:82:9e:e8:a4:
                    d5:b7:8c:40:78:93:4f:14:00:0b:6d:ad:a6:23:96:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:89:93:8F:5C:7D:1C:E5:54:5E:58:F6:2E:A7:D9:2A:E0:01:57:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:76:a0:84:61:8e:38:1f:64:8e:81:09:d6:66:6e:dc:3e:
         ce:8e:72:3a:5b:97:9a:45:99:cd:d2:f9:c2:3d:b4:da:39:39:
         92:03:11:31:59:6a:9d:af:0e:35:34:19:a8:5a:e0:81:ef:06:
         6f:79:6f:8a:b4:85:56:11:72:08:35:a0:9d:f2:e9:84:71:62:
         fe:85:d6:d1:52:c4:1b:1f:65:80:d5:36:a2:9f:ff:c8:5e:e6:
         89:3b:a2:cd:26:9a:93:02:fc:e8:b5:f7:ae:e2:92:6e:7d:69:
         eb:2f:98:e2:21:25:ef:1a:43:7f:24:a1:b4:56:25:29:4b:2d:
         45:c2:bb:24:db:fa:9b:3e:67:db:d5:8e:bb:90:4a:1f:d0:e9:
         50:de:eb:36:8d:7d:68:79:df:a2:f4:eb:3e:cc:d7:86:ba:1e:
         bb:b9:41:40:15:6d:1e:1f:c0:b1:49:e6:29:f1:08:bd:2d:a2:
         6d:72:31:62:28:3e:2b:a5:87:f1:c1:16:12:00:f4:c3:dc:36:
         6f:0a:9a:b5:ea:2c:25:a8:79:2c:3e:34:fa:17:93:ce:9e:13:
         b9:42:1e:b1:04:92:d8:41:b4:21:4a:2a:87:d6:33:2f:77:da:
         76:65:8c:0a:80:d7:40:3b:69:9f:e2:08:a8:b7:9d:0f:8d:b7:
         67:59:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:54:26 2026 by rpki-client