Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
File:                     edf7a120-a151-375d-869c-0b92a25fccec.roa (raw, json)
Hash identifier:          6g3WBwlKrugEvQZULwQLHseZKUCNWKYcKAyRY9OJzYs=
Subject key identifier:   49:E4:BF:25:78:64:1C:2E:16:FA:28:39:BD:5A:29:32:AA:99:B8:3F
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584CCA41F3FC43351EFAFEE02C40
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     55101
IP address blocks:        198.97.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f3:fc:43:35:1e:fa:fe:e0:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=4c83b5c0-1ec8-4eba-a892-23c4f475188e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:60:2c:65:81:47:59:d4:93:12:aa:ef:83:
                    63:a5:f3:f8:bc:24:77:4c:fa:a2:41:e8:dc:4f:e3:
                    96:6a:b9:6e:21:63:98:6e:2f:19:3b:65:83:bb:6d:
                    e1:47:ff:09:24:f7:e8:7e:bc:ee:bb:f0:7b:ea:80:
                    5d:72:02:4c:61:df:20:b0:34:06:f0:0a:db:28:b6:
                    5c:86:37:dc:47:0b:94:98:9e:91:ef:77:e8:c5:35:
                    9f:11:75:36:ad:bf:08:d3:9f:7b:ad:ed:ce:bb:c7:
                    e3:76:f3:5c:fd:73:2c:1a:07:0f:71:2b:0f:30:60:
                    c8:6a:71:1b:43:e7:28:03:c2:22:31:ae:83:6a:62:
                    da:b4:6d:89:39:69:9f:ba:af:fb:ea:46:63:2f:f0:
                    78:2a:16:3c:c7:3e:36:1f:84:b0:3c:66:b4:b8:aa:
                    ff:89:48:0c:18:e7:b1:d8:d4:e1:b7:df:83:33:73:
                    7f:ce:3d:7e:44:d3:b5:b4:6d:04:3d:75:3b:d2:ec:
                    60:a5:e7:ca:cb:44:48:05:8b:0d:c8:d1:e0:83:55:
                    f8:fc:3a:f5:99:59:21:c4:e9:8d:46:fe:04:52:55:
                    85:4a:63:de:13:6c:89:8b:6c:e4:5d:0a:7b:47:73:
                    c0:e0:e1:1d:1c:23:4e:aa:5d:b0:69:c1:67:6d:cb:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E4:BF:25:78:64:1C:2E:16:FA:28:39:BD:5A:29:32:AA:99:B8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e8:84:71:c8:29:85:b5:33:d6:6d:e5:f4:42:df:d2:ad:c5:
         65:65:74:99:88:09:34:df:e0:e2:ca:c1:43:8d:c4:96:71:18:
         37:58:d8:de:ab:f6:d7:31:dc:62:6e:40:26:0d:5f:c4:b3:9d:
         a9:6e:48:40:bf:f2:93:5b:a3:d3:22:63:3a:99:15:68:84:fe:
         5e:44:b5:0c:f6:c5:33:8b:5d:b2:70:e5:4d:69:e1:d9:30:d3:
         5c:36:45:03:56:8f:a7:31:93:2f:da:07:6c:d6:e6:9f:ac:f1:
         32:28:e4:89:c8:41:5f:f8:68:cb:fe:a8:92:19:ab:48:c3:af:
         8f:b6:da:7d:09:62:c7:e3:1c:cb:10:ae:5b:73:93:ca:b4:df:
         44:ea:28:52:f2:99:cb:f0:8a:ea:8e:3d:6d:47:0a:28:49:79:
         8c:04:e6:66:36:02:4f:13:d0:f4:ae:f7:f9:fe:51:d5:01:f9:
         68:ce:a5:c6:14:16:9a:9e:c8:59:de:13:7f:06:25:68:20:15:
         33:96:df:b4:1f:75:74:bd:d4:9d:47:48:c0:81:b7:7f:06:1c:
         70:6a:a9:8e:7c:83:32:77:aa:af:8e:b9:6d:a9:28:a4:6e:68:
         6f:ca:5d:21:4f:8a:6e:56:e1:80:d1:5e:52:25:35:f5:11:90:
         1a:94:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:32 2026 by rpki-client