Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/503e8dbc-a172-3fa2-b603-d92fdee2d75d.roa
File:                     503e8dbc-a172-3fa2-b603-d92fdee2d75d.roa (raw, json)
Hash identifier:          +sdIKDFEYBVjxq6RHhkk3ZhEUKeXaC/Y1fjCCz+E86o=
Subject key identifier:   4B:6D:C7:53:35:9C:19:A7:7A:65:D8:6D:CA:EA:44:C3:FD:B0:A2:56
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CC347303032B4E9D3688ECDC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/503e8dbc-a172-3fa2-b603-d92fdee2d75d.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     3257
IP address blocks:        205.214.48.0/20 maxlen: 24
                          206.40.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:30:30:32:b4:e9:d3:68:8e:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=18617d1a-5f6e-47cd-9d0c-4fa4a8496963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:98:54:89:91:7b:35:76:7e:65:ee:53:a9:
                    f4:bb:2f:46:7a:d8:a1:47:86:2d:72:1f:a5:e9:39:
                    24:78:8c:7f:cc:d0:1d:5d:b0:e4:be:e2:07:07:d7:
                    37:98:b8:08:0d:f1:10:b3:b6:72:31:41:78:05:86:
                    6b:23:e2:b3:e8:39:a4:05:5a:68:be:c3:72:e8:1a:
                    cb:67:87:aa:d0:6d:e4:c0:d4:cf:06:ab:ad:79:c5:
                    be:2e:26:ce:75:74:d4:13:3f:fd:e5:54:20:4e:f4:
                    e7:3a:3f:86:f1:ec:aa:ce:a1:61:70:f3:6d:37:c4:
                    49:a9:b5:60:e0:1e:f1:52:6b:8f:55:b8:ba:dd:5f:
                    85:7e:c0:6e:04:bf:37:bb:ce:8f:7a:8c:07:e9:0e:
                    86:2c:cd:ca:63:c0:fa:35:19:a3:33:54:01:30:3c:
                    3d:b3:d7:7b:3c:21:df:db:3f:5e:74:b4:6c:d8:fa:
                    b8:a2:8f:42:88:58:7a:72:ca:89:1f:82:36:bb:8d:
                    fa:36:87:3f:41:b3:b5:45:1b:65:9d:dc:85:a6:6c:
                    60:91:10:8c:79:f7:6b:c0:ac:44:dc:27:87:b6:8e:
                    03:5d:fd:19:30:0c:a3:01:a1:7a:a4:57:7e:0f:5d:
                    c2:8a:97:37:0d:d7:3b:97:5b:59:5c:77:43:78:61:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:C7:53:35:9C:19:A7:7A:65:D8:6D:CA:EA:44:C3:FD:B0:A2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/503e8dbc-a172-3fa2-b603-d92fdee2d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.214.48.0/20
                  206.40.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:2e:d1:8f:36:9b:b7:37:c4:89:e3:7e:1d:d5:2c:6e:fd:
         b7:96:5c:d0:dc:be:9b:c3:91:de:c1:63:0f:e5:20:d3:6e:e5:
         3c:35:83:bd:93:81:1a:88:ef:5e:4a:e9:d6:78:e3:01:5e:ad:
         1d:c6:fe:a0:7e:1f:bf:44:36:83:de:4d:e7:be:a2:d1:63:7f:
         55:3f:9c:36:b4:99:43:47:49:f4:28:b0:d5:24:40:06:03:06:
         ea:be:d8:a8:e1:b4:9a:78:b8:a2:0e:8e:44:97:de:50:36:3f:
         7b:b6:bc:f9:7f:1b:c7:f6:7e:c3:98:e1:88:b0:90:b7:f7:ce:
         08:56:76:42:ad:77:e7:6a:5d:2f:0e:1d:a3:7f:80:fe:b2:24:
         d3:cd:46:08:c9:2a:71:b0:ae:43:fc:1f:f0:73:fe:fb:d7:4f:
         74:46:3a:df:82:31:f1:91:78:33:93:74:83:b3:ce:29:a1:00:
         68:b5:f3:f1:f5:44:81:8d:7c:81:1d:4a:a9:5a:a4:c7:3f:01:
         f3:32:39:63:4c:0b:98:b5:d9:70:f9:07:ae:d9:ec:fb:7c:8e:
         68:f7:92:95:a5:f6:75:86:32:40:cc:47:09:7b:66:ce:6d:98:
         aa:17:05:a6:32:bd:8e:88:5e:93:68:50:9c:0f:42:a4:f3:27:
         9c:26:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:29:38 2026 by rpki-client