Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa
File:                     57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa (raw, json)
Hash identifier:          UENVQzz3EjptVFIhG6RW+YpK7s7J7is3QQ12oeB6rL8=
Subject key identifier:   51:E2:02:2F:E3:5B:7D:79:40:0E:CB:F9:F4:23:B5:1B:08:FA:C8:9F
Certificate issuer:       /CN=fac97b3d-4c08-472b-89c2-d580150a0c8e
Certificate serial:       010D0C9F4328584CC34730FD1D331A6E5D2BBA00
Authority key identifier: 50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     36797
IP address blocks:        199.87.196.0/22 maxlen: 24
                          208.76.200.0/22 maxlen: 24
                          2607:f0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:30:fd:1d:33:1a:6e:5d:2b:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac97b3d-4c08-472b-89c2-d580150a0c8e
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=b7f1af40-d705-4346-a58e-ec9856f35ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:83:06:76:db:d8:65:c6:05:0c:5f:52:9e:
                    aa:e0:24:15:ca:51:e8:73:9c:c5:5a:50:29:b4:5f:
                    0e:54:85:cd:e5:1c:2c:14:3e:9e:6c:d6:5a:e2:38:
                    33:ce:f0:28:b7:62:70:ba:26:50:f8:25:03:13:cf:
                    ea:c8:89:c4:04:14:a8:1b:53:52:99:a4:1c:6d:f9:
                    b9:e4:10:33:b0:47:2e:47:6c:e1:99:47:41:59:c9:
                    5b:4b:6d:d6:16:69:b0:41:d9:a9:3f:27:13:a4:00:
                    11:3a:f2:7c:5e:f5:79:9d:ec:aa:5e:f4:5f:d0:2c:
                    71:31:b3:bc:94:99:20:20:fe:be:09:e9:e7:c9:fd:
                    36:85:db:21:a3:3e:f8:3f:c1:38:3b:f3:ed:43:97:
                    a8:56:13:3e:33:ef:e0:db:82:d7:6b:dd:a8:08:74:
                    ba:cb:e9:6f:a3:13:4d:f9:9e:ba:3f:fe:9f:78:35:
                    12:b9:b9:99:fb:df:02:2a:1d:64:a6:f1:f8:58:63:
                    b7:da:38:7e:76:9d:42:47:6f:e5:78:5d:68:5e:23:
                    a6:e1:92:18:62:f7:03:fe:4b:ed:d4:03:ac:ce:3a:
                    68:47:4d:88:83:5b:7b:0d:54:b3:e4:26:c9:22:8e:
                    fd:6b:5e:d1:8b:1d:a4:f8:f6:c7:8e:f0:52:5c:37:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:02:2F:E3:5B:7D:79:40:0E:CB:F9:F4:23:B5:1B:08:FA:C8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/57959813-1284-3a5b-9c0c-fa8cadd20bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e/fac97b3d-4c08-472b-89c2-d580150a0c8e.crl

            X509v3 Authority Key Identifier:
                keyid:50:7E:D8:36:FF:57:A7:33:12:72:70:7D:DB:4F:ED:BF:6E:46:1E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fac97b3d-4c08-472b-89c2-d580150a0c8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.196.0/22
                  208.76.200.0/22
                IPv6:
                  2607:f0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:bf:7e:a2:67:0f:b4:aa:71:d6:fc:de:df:52:d8:88:ca:
         2e:f7:3f:14:8b:32:33:4b:17:30:bc:d7:a1:b0:d3:e6:02:a4:
         2f:a1:9a:97:54:96:1e:ae:30:b8:66:b7:63:98:49:f6:f1:fd:
         ab:85:6c:92:0e:e3:90:a8:db:17:eb:f4:21:93:1a:4b:5e:6f:
         1d:f4:a4:fa:e0:b2:d4:01:f0:a2:1b:00:f2:dc:5f:8b:14:01:
         69:7a:74:70:40:ff:ea:81:aa:90:c0:1b:29:09:57:87:50:35:
         15:96:4f:b3:60:7c:4c:30:6b:77:0f:4b:17:02:69:f1:36:41:
         82:8c:37:dd:d6:7a:85:3d:4b:9a:5b:54:cb:7f:9a:e8:94:9e:
         a8:7b:2e:d0:5d:dd:3e:05:ff:89:87:dc:84:30:f5:d9:c6:43:
         8a:0e:a9:05:a9:c4:8a:24:68:2b:6f:d6:18:a9:a0:27:2f:3a:
         43:eb:0c:78:bc:f8:3e:4f:49:4a:c9:92:ad:b2:60:c4:1e:3e:
         ba:4a:7c:04:f0:00:48:f4:98:dd:51:06:9e:0c:c4:65:04:8d:
         f9:e8:64:d1:66:40:03:e1:3b:89:4b:a3:7f:62:10:b7:6c:e6:
         36:41:c6:d4:df:68:14:5a:fd:ae:56:3d:af:0b:0b:84:6b:1d:
         2a:0a:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:28 2026 by rpki-client