Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa
File:                     47012d0e-274b-350f-ab7b-7277a2556e5e.roa (raw, json)
Hash identifier:          Py3q7YpS8Q0dthlTiy0FXHs+tyylccOX20TOoB7zU8w=
Subject key identifier:   E9:A6:BC:DC:66:6B:4A:C3:41:FB:79:D0:9D:61:C8:90:93:1B:10:1D
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584CCE71F4C34C81D8355A786100
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        164.55.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:f4:c3:4c:81:d8:35:5a:78:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=8497d821-3dd4-43e4-a400-41d071e60402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:36:eb:e9:ca:62:c7:01:c8:8b:36:e6:7f:
                    ef:0f:27:f7:43:40:22:46:ab:e8:a1:dd:38:0f:ef:
                    dd:50:9f:d0:72:83:d6:71:ed:27:8f:2f:3d:b9:82:
                    44:11:ed:1a:ee:a8:2c:97:ac:0c:81:b1:cf:a9:71:
                    9b:c4:4b:15:3d:4e:88:74:62:f1:85:ce:46:d5:f2:
                    3a:11:aa:3a:fc:3b:4a:2f:f7:55:0a:22:3a:40:aa:
                    bd:a8:72:60:ae:e7:02:44:6e:f1:b1:a5:58:98:29:
                    c8:07:e9:12:a8:7a:ca:65:ee:4b:5f:fd:06:23:58:
                    30:1e:23:b8:20:2d:4d:88:ac:68:f7:8c:9f:a8:11:
                    6e:0b:a2:13:fa:5b:d0:cb:7d:02:ab:20:31:b4:15:
                    a6:55:0f:c3:a6:52:52:88:73:2c:f6:90:38:b0:1f:
                    ec:41:86:26:fa:95:c7:86:98:2b:bd:bf:2f:d2:27:
                    d7:7d:ec:12:f9:79:f6:9f:ad:1d:65:df:62:f7:6b:
                    e1:ef:2d:66:06:2d:42:25:fd:c1:b6:01:a1:dd:f6:
                    d2:c5:cd:8e:0b:eb:f7:e8:66:27:06:37:a6:73:59:
                    32:be:74:3d:e7:54:1c:5c:31:c0:d6:9e:c8:9f:3d:
                    21:c6:be:41:fc:20:f4:b9:eb:af:39:e5:be:5f:9e:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:BC:DC:66:6B:4A:C3:41:FB:79:D0:9D:61:C8:90:93:1B:10:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/47012d0e-274b-350f-ab7b-7277a2556e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:33:07:f7:ee:ac:fa:63:3a:2a:1f:0a:36:d4:6c:c3:69:
         dc:db:56:24:7b:3e:5b:f2:9a:68:36:17:7e:cc:18:dd:97:8f:
         71:ad:cb:6a:e1:27:9d:a7:25:b0:4d:24:d5:20:8b:f8:56:0d:
         fa:50:e0:ad:03:ce:56:12:e7:56:68:29:10:7f:2a:07:60:c7:
         75:3b:ca:0d:f3:6a:a1:68:9e:b3:e8:67:77:dd:e0:05:16:ff:
         c7:c4:6f:12:53:ea:d6:e4:bc:cb:5c:de:42:43:32:44:e2:17:
         eb:3e:7d:b8:a7:c1:c1:28:af:8c:97:82:b5:b3:f2:86:f1:6b:
         92:ba:15:63:ce:13:7f:09:3a:d2:c5:79:35:0d:96:4e:e1:9e:
         33:aa:35:f7:4f:39:66:13:53:7b:96:0f:c8:68:1c:cc:3b:1f:
         03:ea:34:4c:4f:22:58:02:13:05:e9:06:c7:32:05:71:8d:fd:
         a8:d0:e0:97:90:6e:2b:ad:ad:40:7b:58:48:90:83:68:6f:bf:
         ee:a6:e9:0c:a4:f0:27:fb:ce:1b:2f:d7:9a:c9:78:11:76:c5:
         f4:c9:39:83:3f:a4:f3:3f:37:66:90:8e:6f:06:e8:5b:c9:20:
         e2:9b:fc:a9:57:51:9c:fd:48:a8:47:66:0e:23:c6:29:f9:3d:
         65:3e:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:15 2026 by rpki-client