Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa
File:                     6b5552b6-61df-3788-b537-8378e270c304.roa (raw, json)
Hash identifier:          nbyWZafa43m/eF0MWrL08WjIE120BS0a1Y9C4x4vWlg=
Subject key identifier:   76:B1:3F:87:AB:44:85:C5:9B:10:DC:61:EC:F8:29:69:7C:DA:A2:05
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584CEE8CB697282B511E76173D80
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        208.122.32.0/21 maxlen: 24
                          208.122.40.0/23 maxlen: 24
                          208.122.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:b6:97:28:2b:51:1e:76:17:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=5ceae2eb-d992-49ca-8028-0c02b653003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:cc:ea:51:08:11:a9:02:98:ad:93:41:bb:
                    27:cc:ea:44:e8:db:74:b3:52:f6:00:32:88:64:0d:
                    f6:10:52:3e:c8:e5:19:21:6e:1e:31:98:b7:82:ac:
                    24:73:5d:a3:6a:88:9c:a8:69:dc:51:93:27:df:fc:
                    89:25:f0:cb:3e:4e:eb:55:cd:b9:cb:99:c8:5e:3f:
                    b0:a3:3f:d8:a9:ab:fc:77:a1:f6:7d:d7:7d:51:fb:
                    11:95:0e:f9:41:d1:48:0a:e6:c0:a6:30:bf:16:25:
                    ea:a5:57:15:98:6f:32:39:48:16:46:30:49:5a:d4:
                    9c:76:d1:f6:e3:7b:11:f7:70:60:10:48:67:7e:c5:
                    0d:0d:3f:7c:b0:3f:84:82:ef:67:d9:69:7e:ca:df:
                    40:a0:b0:1a:59:7f:a4:d6:5f:dc:79:df:b0:e9:30:
                    32:cf:a0:47:0c:2b:09:cb:3d:ec:65:54:4c:51:0b:
                    5c:34:49:9f:77:12:79:df:19:4c:18:30:3d:ef:fd:
                    4b:4d:b9:0d:fb:7c:31:71:d2:7e:14:1c:19:b1:5a:
                    f0:74:67:37:f4:f7:21:13:50:15:c3:f3:59:12:43:
                    52:72:31:93:9b:01:3b:75:23:a0:5a:33:3d:03:58:
                    ce:01:70:32:fb:ac:fb:46:ec:55:fe:93:6a:8f:04:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:3F:87:AB:44:85:C5:9B:10:DC:61:EC:F8:29:69:7C:DA:A2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.32.0-208.122.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:59:0b:2a:ab:3f:0c:09:53:ec:7d:d2:12:a1:33:50:e7:91:
         47:82:85:38:ac:6a:03:49:69:f2:8a:58:72:50:9c:34:aa:f1:
         00:19:91:76:81:83:50:e0:b0:86:f0:ec:be:8e:7b:04:cf:9a:
         5f:e0:f9:57:c0:94:19:bf:73:30:b5:9c:98:aa:23:a2:02:54:
         e2:ac:0f:cd:1c:9e:8e:2c:1a:b1:d1:83:1b:f6:e2:f4:ec:21:
         17:99:1e:83:8b:ab:1e:0a:f0:74:71:69:3d:26:58:d2:6a:b2:
         71:6a:42:a2:87:4c:65:8d:3c:06:57:51:97:7d:91:0a:3d:6f:
         e1:48:00:85:1b:35:46:ca:6d:61:91:11:68:b7:b7:5e:56:21:
         1c:86:3d:3c:4a:30:87:82:0b:17:3f:ef:b5:18:a7:69:c6:65:
         99:1c:ec:ca:03:b0:85:aa:2f:c1:ed:d1:e7:ab:ea:d3:34:cb:
         9b:31:17:0a:1b:ec:75:05:70:23:9b:61:88:2a:9c:44:f4:e1:
         35:fd:2d:c8:06:ad:49:11:ef:8f:c3:99:74:16:f1:47:8e:d2:
         44:89:98:46:6e:73:ce:51:bf:23:e9:37:19:72:98:54:2f:a9:
         9c:8b:3d:f0:34:33:47:50:cc:a1:96:0e:dc:02:28:6b:80:be:
         11:d6:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:29 2026 by rpki-client