Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/3bb91037-2107-37df-a754-1a0a89f9263d.roa
File:                     3bb91037-2107-37df-a754-1a0a89f9263d.roa (raw, json)
Hash identifier:          4MD15msaj554PsgFyz2WLgFtAMT4XoI8LKLYHhq7xTs=
Subject key identifier:   7D:AE:E1:30:FE:BC:6B:12:A6:6C:42:B8:6D:D9:18:E9:DD:09:3D:26
Certificate issuer:       /CN=20d1bc0f-5c56-4a46-a18f-ea9e599269af
Certificate serial:       010D0C9F4328584CEA9F2DB8E496CA58541D52A0
Authority key identifier: FF:6C:91:C4:A0:AB:5A:53:E9:25:81:62:4C:E0:35:B9:6F:79:B6:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/3bb91037-2107-37df-a754-1a0a89f9263d.roa
Signing time:             Thu 19 Feb 2026 16:14:31 +0000
ROA not before:           Thu 19 Feb 2026 16:14:31 +0000
ROA not after:            Wed 20 May 2026 15:14:31 +0000
asID:                     396982
IP address blocks:        206.109.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:9f:2d:b8:e4:96:ca:58:54:1d:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d1bc0f-5c56-4a46-a18f-ea9e599269af
        Validity
            Not Before: Feb 19 16:14:31 2026 GMT
            Not After : May 20 15:14:31 2026 GMT
        Subject: CN=ef75419c-794d-43d2-95de-2607a3a4220d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:9d:13:ef:b6:8f:6b:99:5f:35:33:29:66:
                    93:3a:8e:b0:ae:d1:6c:5a:85:4a:7e:6b:02:ee:28:
                    06:ee:c4:01:58:a4:b3:14:f8:f8:e2:82:5e:bd:6f:
                    6c:3a:f1:bd:1e:c2:51:d5:bf:12:da:48:82:d0:e1:
                    0b:0f:38:3f:b1:0e:14:8f:df:75:11:03:cb:06:cb:
                    37:43:37:82:05:d2:1f:6c:1a:6d:ab:f7:47:22:e5:
                    67:e1:e7:e3:23:03:f2:a4:37:56:23:0a:07:2b:0f:
                    ef:59:c2:78:2c:f4:bf:9b:9e:a4:1f:88:2e:57:53:
                    fd:93:3b:36:27:69:55:8e:04:51:5b:61:d4:af:03:
                    00:2d:f7:3a:17:af:26:23:a2:95:b0:4c:74:71:d5:
                    21:33:7b:77:b0:8f:d0:76:d5:55:b1:93:0a:4d:54:
                    24:6c:70:a8:1f:68:8d:eb:2e:17:ec:6d:9d:7c:4c:
                    3b:9e:c4:f2:8a:1e:a2:21:23:50:55:ed:e9:f9:d8:
                    22:96:d1:6d:40:df:a8:39:33:7d:48:25:45:61:71:
                    eb:cb:12:8b:df:a6:c9:da:15:e4:c0:03:54:b8:dd:
                    5c:b9:43:4e:99:4a:06:8d:5f:4f:95:66:0d:2a:d4:
                    41:bb:a9:cc:d3:a3:84:e0:9e:1f:aa:00:56:30:ce:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:E1:30:FE:BC:6B:12:A6:6C:42:B8:6D:D9:18:E9:DD:09:3D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/3bb91037-2107-37df-a754-1a0a89f9263d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af/20d1bc0f-5c56-4a46-a18f-ea9e599269af.crl

            X509v3 Authority Key Identifier:
                keyid:FF:6C:91:C4:A0:AB:5A:53:E9:25:81:62:4C:E0:35:B9:6F:79:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20d1bc0f-5c56-4a46-a18f-ea9e599269af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:09:b7:d1:1f:22:94:82:96:f4:93:a1:94:b6:b5:c7:80:
         c1:b9:31:f2:9d:a4:ef:e5:39:c7:60:ef:9d:96:9d:27:5a:bf:
         d2:df:83:78:16:db:61:11:1e:a7:a9:e0:b6:93:87:56:25:df:
         b1:38:d1:2e:06:06:50:62:fa:cb:39:a8:c5:cc:f1:3e:5e:8b:
         b3:9f:a2:f6:a5:5d:6b:6a:5e:f1:b4:7f:c7:f2:d1:fb:f5:81:
         9f:94:dc:bc:a1:75:d7:b8:ee:89:0c:23:35:00:81:71:6e:df:
         37:bb:8e:6d:d7:40:39:87:b5:ba:9c:4f:77:eb:37:42:8d:68:
         74:22:94:31:b5:62:00:59:ac:9f:d6:41:c4:11:a3:06:02:1f:
         2c:0a:16:8d:28:d1:e4:96:ac:61:2e:c8:0c:7a:c2:33:96:31:
         ef:91:1c:c7:8d:d9:32:f8:82:48:a2:50:cc:43:c0:32:79:05:
         c2:51:f5:be:56:36:83:7c:c6:c7:ab:13:b9:cf:fc:6b:56:b0:
         57:50:a0:ff:f9:17:50:e0:b0:23:4c:79:53:72:c5:e3:dc:d4:
         2a:4c:8e:f7:61:b3:59:df:0c:5b:9d:da:56:5b:05:47:46:26:
         55:2e:13:fa:11:66:e7:23:be:d5:09:05:10:1f:3f:49:47:32:
         a2:18:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:01 2026 by rpki-client