Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
File:                     718c7d81-d37e-3832-a526-ea9f1f684b8e.roa (raw, json)
Hash identifier:          yPcgncbth5Y89IEWW5MLGS2T/0mDvhcrFqtz5ucZavM=
Subject key identifier:   0B:69:A0:7A:F3:2A:00:E1:34:87:74:7D:14:24:21:4D:5C:4C:C5:B0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CC361402A41E4C81CE3EC9C80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
Signing time:             Thu 05 Feb 2026 14:53:13 +0000
ROA not before:           Thu 05 Feb 2026 14:53:13 +0000
ROA not after:            Wed 06 May 2026 13:53:13 +0000
asID:                     33647
IP address blocks:        38.158.32.0/19 maxlen: 24
                          206.85.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:61:40:2a:41:e4:c8:1c:e3:ec:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  5 14:53:13 2026 GMT
            Not After : May  6 13:53:13 2026 GMT
        Subject: CN=9b27ecca-9e46-48c6-83cf-3e9eb98721d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:21:14:c8:66:03:65:7c:65:df:c9:fe:28:
                    6a:c4:65:f2:df:8a:4c:78:64:24:16:49:99:9d:05:
                    c3:b6:f6:66:53:c1:4f:1f:cf:51:20:b4:82:90:e3:
                    ec:9b:d6:8c:9c:d8:6c:38:7a:cd:2c:f1:a5:18:d4:
                    5d:45:08:76:7e:a4:9e:59:da:d9:a4:68:36:50:c3:
                    d3:9c:f0:cb:57:2d:cd:10:3d:f8:12:64:46:81:d5:
                    9e:7c:c8:c8:21:12:7e:f2:0c:53:eb:51:aa:6a:d6:
                    41:ed:dd:78:b1:d6:ca:5f:e7:e4:20:a6:d6:41:68:
                    ba:8f:9b:c2:a6:ff:22:a1:cb:ae:fd:92:ab:88:f2:
                    63:a4:98:d2:5d:6a:97:c6:9f:55:b9:b6:d8:66:a1:
                    79:d1:a5:4b:ff:8f:9f:74:3c:d1:6d:82:62:0c:8d:
                    19:88:f2:5b:d9:c1:86:9f:fb:63:7e:e6:35:10:05:
                    4b:9c:f7:bb:28:69:98:75:ff:3d:91:b2:47:0e:57:
                    88:2e:91:12:ce:e8:94:93:6a:36:be:47:b7:b4:dd:
                    6f:0b:17:d7:3c:f9:07:22:d2:df:5d:c2:7b:d9:76:
                    78:c3:b3:71:91:95:74:63:78:82:8b:a4:e9:bb:0f:
                    e4:a3:02:e8:ab:88:e1:76:74:5d:93:49:16:7c:c9:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:A0:7A:F3:2A:00:E1:34:87:74:7D:14:24:21:4D:5C:4C:C5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.158.32.0/19
                  206.85.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:d3:bb:64:be:8b:fa:21:1c:17:fe:7c:77:ed:e3:d7:e2:
         dd:3d:b8:b7:0f:a0:52:cc:de:a7:3c:85:41:e7:36:53:2a:4b:
         d4:33:db:e4:09:31:d1:47:d3:8e:11:00:6f:87:ee:e4:c8:28:
         0a:e9:68:28:4b:aa:ed:28:d8:c1:4b:e1:1c:16:36:c0:cd:db:
         a6:15:25:19:61:43:ca:35:d3:c3:d1:7e:60:f7:29:51:d4:db:
         09:04:20:7b:5d:a6:aa:64:52:e8:5a:ba:69:92:8d:ae:4d:e2:
         d6:11:c2:14:d4:e5:c5:c7:a8:35:3c:7c:4b:fb:e8:a3:2f:73:
         25:a0:5e:a7:d3:0e:15:13:82:60:8b:f2:5a:4b:5d:1f:45:8d:
         a0:62:84:86:14:ac:bc:68:c3:0d:1b:53:db:e7:91:4b:12:94:
         76:62:28:35:5f:95:92:ee:9b:fc:29:67:31:b3:c4:d2:be:79:
         fb:a6:82:8d:12:67:07:42:29:b5:4a:8f:54:a2:cf:96:a2:e2:
         96:01:21:47:10:9b:f2:e0:d6:0c:f6:45:83:5b:65:d5:7c:9c:
         cd:6d:6e:d8:67:83:5a:1d:90:27:3a:ca:0e:a8:da:cb:0a:88:
         53:c4:32:92:7d:c7:17:b3:5c:89:f7:ce:fe:5a:7f:1d:d1:71:
         08:22:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:47:49 2026 by rpki-client