Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa
File:                     f4492200-1440-37df-90c8-244dcaf5ce9e.roa (raw, json)
Hash identifier:          FK12w1JEcgwt3LL62kDSg6I5/9kLZuUt7qF2zntbkvU=
Subject key identifier:   2F:D8:06:52:E4:1C:EA:1E:42:F8:CD:2D:63:9D:0A:7E:B2:B6:F3:5D
Certificate issuer:       /CN=6c75d476-dd42-4501-9696-faf234c05e36
Certificate serial:       010D0C9F4328584CDB01EFF1B0AEFBC5E8A70320
Authority key identifier: 3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     20115
IP address blocks:        63.133.192.0/21 maxlen: 24
                          63.133.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:ef:f1:b0:ae:fb:c5:e8:a7:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c75d476-dd42-4501-9696-faf234c05e36
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=3dd253f0-a7c1-4153-90e9-153fa12c7ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:5e:09:4e:16:76:03:8c:ec:53:ef:ea:66:
                    60:59:bf:b9:07:c0:01:f9:a7:16:0c:88:cc:4e:e2:
                    73:11:2f:c8:9a:22:cc:d1:c3:d3:9e:0b:ba:6b:f1:
                    06:52:58:0b:55:ec:9d:b0:78:8a:02:3e:02:72:f7:
                    35:bb:03:dd:9b:c0:f8:c8:bb:a7:b7:54:ec:a0:39:
                    6e:cf:26:ce:6e:10:9e:bb:af:13:67:f9:f4:d5:a7:
                    de:ab:80:c3:1b:ea:6b:3e:9d:6d:bd:0e:0d:da:ff:
                    c0:db:8b:5f:c4:6e:51:41:f9:fc:3c:a2:62:02:31:
                    b8:ef:d6:2f:95:a5:c9:bd:1a:be:22:d2:aa:65:08:
                    d5:92:1b:40:51:e2:da:c4:19:16:6b:3f:68:aa:22:
                    d5:76:33:51:73:93:08:9d:55:73:f3:64:50:ee:89:
                    18:90:1c:ed:9d:2d:91:f1:8f:45:c0:14:9c:7c:83:
                    62:e6:b9:e6:84:49:af:8d:20:c3:16:34:0f:3a:63:
                    c9:f2:58:25:b5:0e:80:01:07:4d:fb:78:83:82:78:
                    dd:ff:19:30:f9:80:37:9d:d1:3c:5c:49:33:93:a5:
                    a8:6f:5d:8e:ef:1e:25:45:63:bb:9a:f6:15:87:a2:
                    83:ef:a5:b5:85:46:47:1c:af:bd:ee:fd:62:78:65:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:06:52:E4:1C:EA:1E:42:F8:CD:2D:63:9D:0A:7E:B2:B6:F3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/f4492200-1440-37df-90c8-244dcaf5ce9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:0e:64:cf:42:b7:95:c8:92:a3:fc:15:e5:40:ae:dc:c2:
         40:f6:13:f7:2c:27:45:5e:ba:11:68:a6:25:04:82:dc:c5:00:
         d3:bc:3c:ba:bd:c2:2b:2a:64:4e:a3:15:9f:43:75:cc:4a:78:
         5b:76:72:5c:63:d8:de:d1:b5:55:3e:0d:a7:7e:00:64:c6:c1:
         cb:bd:c9:73:b0:c8:42:ca:8d:93:88:29:36:46:01:2d:44:e1:
         e0:f6:10:15:fb:d8:b5:11:0e:73:12:07:8f:63:9c:2d:37:65:
         5b:92:93:22:1f:7b:0b:7f:40:54:88:cd:dc:52:4f:d5:22:dd:
         8f:be:8f:9c:4c:54:19:58:42:9a:a0:f5:19:73:e6:26:3b:60:
         68:e6:18:c8:a3:66:4c:e3:35:02:02:b9:bb:a0:79:28:16:50:
         a3:87:6c:1e:91:3f:c8:84:1c:78:9f:7a:e0:3f:af:58:8b:0b:
         12:0a:25:9b:44:8f:e2:b5:ec:3b:9f:d4:54:b8:41:a2:64:32:
         81:f3:55:60:86:af:51:36:8e:e6:4d:c3:c2:60:52:99:5b:6e:
         a4:ad:69:03:7b:f0:dc:80:54:a6:a3:ba:f5:5b:c2:1e:03:f8:
         33:b3:41:ae:ca:f8:18:9b:b0:3c:08:d3:38:d8:a0:7c:c9:0c:
         e4:a6:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:55:57 2026 by rpki-client