Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
File:                     49212b0f-98c1-33f7-b49b-5bbad34aa488.roa (raw, json)
Hash identifier:          ViNLyp93IsFabGUi6Jvh3apAuWMfIpYwEFJ1SvYTHIY=
Subject key identifier:   F6:AE:A0:E0:41:AE:9C:9E:AA:6C:22:76:28:E8:7C:B7:1B:1F:D0:97
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584CC7773379A02147DEC9BF5080
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     14877
IP address blocks:        209.50.137.0/24 maxlen: 32
                          209.50.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:33:79:a0:21:47:de:c9:bf:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=bab429c8-7334-4326-9200-db31f64129e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:11:a3:4d:7c:d1:4e:9e:fd:90:de:4c:05:
                    b9:f2:6f:cd:8e:61:43:5a:26:81:b4:07:3d:59:43:
                    1e:76:4f:3c:e6:76:01:8c:c8:19:ce:4c:c1:64:d9:
                    bd:e9:a1:cb:38:79:86:85:dc:b8:6c:1b:e8:25:f7:
                    43:39:02:f5:6d:6e:db:6c:51:6e:98:a2:e0:e2:9c:
                    1a:68:96:bc:f4:22:df:35:74:94:f2:d3:4b:67:5b:
                    c6:79:e6:14:89:7c:06:3b:ab:3c:1e:ef:7f:37:60:
                    ec:0f:81:62:84:a7:c9:4e:64:ef:9e:82:e9:0e:f9:
                    62:ef:f1:34:c0:c0:75:de:f8:d9:64:d8:1d:ca:32:
                    48:c7:7e:37:29:55:c5:ef:38:0e:9b:0a:bb:9c:6c:
                    23:2f:a9:fc:08:1e:a2:3c:a2:bd:48:d9:91:79:81:
                    02:a9:f7:51:a9:c2:de:c1:1f:96:59:45:b1:81:5d:
                    ae:9f:74:66:44:23:62:24:44:e0:95:09:21:b0:90:
                    f7:55:03:8a:5c:f8:a5:08:cd:38:d7:86:d9:08:d8:
                    12:3d:9c:da:38:2a:86:2c:f1:60:dc:90:da:f5:4c:
                    ba:f6:d5:14:b0:7b:5d:21:e8:b0:67:b2:10:2b:8f:
                    0e:d2:5f:9f:9e:44:02:58:a2:9c:05:87:67:0b:3c:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:A0:E0:41:AE:9C:9E:AA:6C:22:76:28:E8:7C:B7:1B:1F:D0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.137.0-209.50.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:1b:ce:76:64:92:2e:3b:99:8f:b8:7a:e5:62:26:b8:91:
         d4:82:b0:7b:ad:ec:59:c6:37:85:19:ab:5b:c7:b5:b3:43:0e:
         e6:b2:f0:6f:93:3f:af:b6:7b:49:f4:16:3e:c6:d6:71:60:ab:
         65:cf:b4:b1:b2:06:18:fc:81:dc:80:ec:41:94:32:02:42:48:
         11:a3:68:f5:f8:eb:87:15:48:37:f1:3a:6e:f4:e3:4f:31:38:
         f1:ff:14:99:81:a0:82:f7:cd:0d:aa:80:57:16:8a:9d:6a:c4:
         5f:ab:89:3e:3a:07:3f:77:05:af:75:4b:db:1c:c6:01:53:0a:
         00:27:4b:1d:c5:00:b5:86:6b:c4:15:5c:cd:12:ae:ea:4f:66:
         48:8c:28:1e:1c:38:f1:69:4f:5f:20:af:40:7b:91:a3:32:98:
         d0:e1:f4:ac:78:41:4a:8b:01:02:64:59:82:dc:ea:d5:19:45:
         a2:c5:a7:82:cd:38:83:f1:30:c2:ea:cb:aa:fc:0d:2f:45:48:
         07:c6:36:d0:2f:f7:48:75:89:a0:19:38:91:e7:6b:36:7c:60:
         b3:27:91:67:f7:10:8c:d4:0a:e2:29:50:31:ec:9c:9d:e2:d4:
         f1:9f:09:22:c1:f4:1f:0b:c7:0c:3d:65:14:41:32:c2:6b:54:
         1f:92:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:25:42 2026 by rpki-client