Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
File:                     e277ca94-a552-3ae1-979e-0ca00fd433c9.roa (raw, json)
Hash identifier:          5+5QsCn/snwqmURIdSm01/KZ9rWm9UpL2FebMoEh5Mk=
Subject key identifier:   9A:71:BA:13:38:F5:5B:9A:9A:C7:A7:DE:5A:FB:76:B9:D2:3B:09:35
Certificate issuer:       /CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
Certificate serial:       010D0C9F4328584CCA41F97F5D31E9D3C5A86C80
Authority key identifier: 58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     13692
IP address blocks:        64.29.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f9:7f:5d:31:e9:d3:c5:a8:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b816cc2e-175e-4e44-a8ee-e02aaa1cbfed
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=c11caea4-5e30-4eeb-b94f-753450b95f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:dd:7c:76:b8:8e:26:33:ef:c5:34:f8:6c:
                    e8:a9:57:3a:4f:d9:7d:2b:b5:d5:15:2e:4c:bf:0c:
                    56:7c:a6:6e:e1:e0:da:d8:23:ef:ba:9e:6c:52:a7:
                    ab:a2:fa:0d:88:38:09:44:27:78:f6:c5:8f:13:dd:
                    51:fe:39:90:7d:42:b3:d5:d1:6e:fc:b6:36:3c:ef:
                    c4:2f:7a:72:c4:12:89:69:8c:9c:fe:39:cd:8a:77:
                    36:c0:67:a7:99:5e:97:1e:9a:10:a1:48:a3:76:78:
                    f6:32:09:f9:73:fa:2a:31:5f:20:42:62:88:59:df:
                    f3:46:82:9a:39:ec:93:ee:a1:26:a4:d7:2d:56:f4:
                    1c:57:02:a2:fc:a2:a2:52:c1:d3:94:07:2e:47:b8:
                    69:49:3c:1e:97:fa:68:df:62:71:8a:00:be:b4:bb:
                    c9:52:67:97:82:70:e8:b2:b8:72:06:94:09:ed:0a:
                    98:7c:f9:86:82:bd:7c:52:16:6d:81:c8:d8:f6:08:
                    34:1d:b9:a8:3c:c8:cc:7e:2a:07:1b:7d:bf:c8:7c:
                    f6:b0:4c:2d:c0:ca:db:9b:bd:1a:51:57:d3:1e:e7:
                    91:3e:dd:4d:82:4b:44:2b:c2:b0:4f:ef:c3:ea:53:
                    ea:2e:17:42:bf:b6:90:9a:4b:4b:1d:03:3b:21:fb:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:71:BA:13:38:F5:5B:9A:9A:C7:A7:DE:5A:FB:76:B9:D2:3B:09:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/e277ca94-a552-3ae1-979e-0ca00fd433c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.crl

            X509v3 Authority Key Identifier:
                keyid:58:08:22:F8:27:95:CB:5B:40:BA:B1:1A:58:6F:74:92:BD:20:C0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b816cc2e-175e-4e44-a8ee-e02aaa1cbfed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:fd:53:f3:5f:75:ea:f1:d0:c5:47:5b:2d:d4:59:05:18:
         a7:17:56:1d:9c:2f:d3:e0:f1:34:25:5d:db:2d:95:1c:ee:bc:
         5b:c4:d9:1c:60:39:69:d5:59:de:a2:02:41:e5:33:59:e0:1a:
         5b:ba:a7:63:fd:3f:d3:6d:ce:d1:59:8f:b4:2e:0b:bf:c4:30:
         47:35:c1:31:6b:03:0f:0e:ee:cb:ca:88:f9:37:e5:73:c7:0b:
         0a:22:29:01:b9:5c:8c:7f:76:92:aa:c8:3a:a9:2c:e3:c9:87:
         9c:ee:cc:4c:55:7c:6c:6d:b5:e3:0d:38:49:33:ca:fa:3f:03:
         bb:9a:32:84:bc:f2:2c:cf:f4:d6:bb:3a:e6:0e:59:b0:32:e5:
         2e:3e:1b:7a:eb:5f:c3:47:ee:ec:5e:ba:8a:4a:9f:5a:5b:fa:
         1f:b4:6e:9f:18:84:6b:1c:83:5c:ce:22:6a:79:e1:c5:ed:29:
         89:23:96:38:e2:14:c3:49:84:cf:32:24:d1:44:0c:04:7d:82:
         86:a2:61:e7:a1:12:1a:64:31:86:3f:9e:9a:14:7a:f9:88:ab:
         6c:a4:c2:8c:27:0e:38:5b:43:86:6b:b5:e0:d8:a4:96:23:9b:
         ed:eb:e4:70:89:b3:fc:3c:1b:b3:9c:85:0d:5d:ac:a6:3f:d0:
         79:e0:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 09:04:49 2026 by rpki-client